Privacy policy
Molvi records your voice. That is the whole product, so this page is specific about where those recordings go rather than generic about “your data”.
The short version. We keep your Telegram identifier, your recordings, their transcripts and the reports built from them, and your subscription status. Recordings are transcribed and analysed by named third-party AI providers. No human at Molvi listens to your recordings as part of running the service, they are never shown to other users or used in marketing, and nothing is sold to anybody. Product analytics are deliberately stripped of anything that identifies you. Write to hello@molvi.app and we will delete it all.
1. Who is responsible
The data controller is Molvi. Questions, requests and complaints go to hello@molvi.app, or to @molvi_speech_bot in Telegram.
2. What we collect
From Telegram, when you open the app
Telegram passes us a signed block of data about the account opening the app: your Telegram user id, first name, username if you have one, language code, and a link to your avatar if it is public. We use the id to know whose reports are whose, the name for the greeting on the home screen, and the language code to pick a default language. We never receive your phone number or your Telegram contacts.
What you record
- the audio of each take;
- the transcript produced from it;
- the report built from that transcript: highlights, notes, measures;
- timings that come with a take, such as its length and where the long pauses fell.
Subscription
Your plan, whether you are on the free trial, when the current period ends, and an identifier from the payment provider. If you enter an email address for a receipt, we store that address for exactly that purpose. We never receive or store your card details. Those go straight from you to Stripe or ЮKassa.
Product analytics
Which screens were opened, which exercise was started or finished, how far a screen was read, and technical properties such as platform and app version. This is how we find out that a screen is confusing without asking everyone.
3. What we deliberately do not collect
These are engineering decisions in the code, not intentions:
- No automatic capture of what you tap. The usual analytics default records the text of whatever you clicked. In this app that text is fragments of your speech analysis, so automatic capture is switched off and every event is named by hand.
- No personal data in analytics properties. What identifies a person to the analytics tool is language, plan, trial status and platform, not a name, not a username, not an email.
- The Telegram sign-in blob never reaches analytics. The real page address inside a Telegram Mini App carries your Telegram id, name, username, avatar link and the signature you authenticate with. Every event is rewritten on the way out to carry a synthetic screen path instead, and that data is stripped recursively from event keys and values.
- No advertising trackers, no third-party ad pixels, no data sold or shared for marketing.
4. Why we are allowed to hold it
If you are in the EU, the UK, or somewhere with comparable law, the legal bases are:
- Performing our contract with you: for your identifier, recordings, transcripts, reports and subscription. Without these there is no service.
- Our legitimate interest: for product analytics and security logging, kept narrow and de-identified as described above.
- A legal obligation: for billing and tax records.
- Your consent: for anything beyond the above, such as using one of your takes as an example. We ask, and no is a complete answer.
Voice recordings are personal data. They are not used to identify you biometrically: Molvi analyses what and how something was said, and never builds a voiceprint to recognise who is speaking.
5. Who else processes it
Molvi is a small operation and stands on other companies' infrastructure. Each one below acts as our processor, under contract, and only for the purpose named.
| Who | What for | What it sees |
|---|---|---|
| Telegram | The app surface and notifications | Your Telegram account and our messages to you |
| Soniox | Speech-to-text | The audio of a take |
| Google (Gemini) and OpenAI | Building the analysis | The transcript of a take |
| Cloudflare (R2, Workers) | Audio storage and serving the app | Stored audio files |
| Northflank | Running the backend | Everything the backend holds, as infrastructure |
| PostHog (EU) | Product analytics | De-identified events as described in section 3 |
| Stripe | Payments on non-Russian cards | Your card details and billing data, directly from you |
| ЮKassa | Payments on Russian cards | Your card details and receipt email, directly from you |
6. Where it is held, and for how long
Our servers and databases are hosted with the providers above; analytics are on PostHog's EU infrastructure. Some processors operate outside your country, so data may be transferred internationally, under the standard contractual protections those providers offer.
- Recordings, transcripts and reports are kept for as long as your account exists, because reopening an old report is a feature you are paying for. There is no automatic deletion schedule today; if we introduce one we will say so here first.
- Billing records are kept as long as tax and accounting law requires.
- Analytics events are kept for up to 12 months.
7. Your rights
You can ask us to show you what we hold, correct it, export it, delete it, or stop a particular use of it. Write to hello@molvi.app from the Telegram account in question, or tell us your Telegram username, and we will answer within 30 days.
Being honest about deletion: the app does not have a delete-my-account button yet. Until it does, deletion is a request by email, and it is a real one. We remove your recordings, transcripts, reports and profile, and confirm when it is done. The obligation exists whether the button does or not.
If you are in the EU or the UK you may also complain to your local data-protection authority.
8. Children
Molvi is not for children. See section 3 of the terms for the age rules. If we learn we are holding a child's recordings without the right consent, we delete them.
9. Security
Traffic is encrypted in transit. Audio sits in private object storage, reachable only through short-lived signed links issued to you. Access to production systems is limited to the people who operate them. No system is perfect; if a breach affects you, we will tell you and the relevant authority as the law requires.
10. Changes
If we change this policy in a way that affects you, we will tell you in Telegram or by email before it takes effect. The date at the top always shows the current version.
11. Contact
Email: hello@molvi.app
Telegram: @molvi_speech_bot