Safety and Data

Vzpomínkář was built to preserve personal stories — not to misuse them.

Consent and recording

Before any recording begins:

• the user must give informed and explicit consent,
• the recording state is clearly indicated,
• browser-level microphone permission is required.

All data transfers are secured using encrypted HTTPS connections.

Audio storage

• recordings, transcripts and photographs are stored in the European Union (Frankfurt region),
• speech-to-text and language refinement themselves run at OpenAI, therefore also outside the EU; see the Privacy Policy for details,
• audio files are kept in private, non-public storage,
• access is restricted using Row Level Security (RLS),
• data is encrypted at rest using AES-256 encryption.

AI processing

Text data security

• Transcripts and structured chapters are stored in secure databases with RLS enabled,
• every record is strictly linked to a specific user ID,
• API keys are never exposed in the client environment.

User rights under GDPR

Users can:

• delete individual recordings, transcripts and whole stories in the app,
• download any recording, and a finished book or diary as a PDF, in the app,
• delete their entire account and all its content in Account settings,
• request a copy of all their data at info@mujvzpominkar.cz.

Account deletion

Deleting an account is irreversible and takes effect immediately: all projects, recordings, transcripts, books and photos are removed, and every shared link stops working. Data is removed from active systems and subsequently from backups in accordance with retention schedules.