Skip to content

Privacy Policy

Codi is built to know as little about you as possible. Here is exactly what we collect, why, and what we keep.

Last updated 15 November 2026

The short version

  • For dictation, your microphone is only on while you hold the shortcut. That audio is streamed for transcription and discarded. We don't store it or the text it becomes.
  • Meeting notes are different, and only run when you start them. Codi records the meeting and stores the recording, transcript and summary in your account until you delete them.
  • We don't use your voice or text to train AI models, and we don't sell your data.
  • Your account holds your email or phone number, your plan, how many minutes you've used, and any meeting notes you chose to save.

Who is responsible

Cognify Digital Private Limited, New Delhi, India, is responsible for your personal data as the data fiduciary under India's Digital Personal Data Protection Act, 2023, and as controller under the GDPR where it applies.

What we collect

Account information

Your email address and a password, or your phone number if you sign in by SMS code, or your Google account email, name and profile picture if you sign in with Google. Signing in by SMS code runs Google reCAPTCHA to block automated abuse, which is covered by Google's own privacy policy. Passwords are stored by our authentication provider as a one-way hash; we never see them.

Usage information

The number of seconds you've dictated this month and in total, your plan and account status, when your account was created and when the app last requested a transcription session. We use this to apply plan limits and show your dashboard.

Dictation audio, only while you hold the shortcut

The app streams audio from your microphone directly to our speech recognition provider, using a short-lived access key issued for your session. The transcribed text is sent back to the app and typed at your cursor. Neither the audio nor the text is stored on our servers.

Meeting notes, only when you start them

When you press Start meeting notes, Codi records your microphone and the sound your Mac is playing (the other people on the call) until you press Stop. During the meeting a copy of the audio is streamed to our speech recognition provider to show live captions, which are not saved. When you stop, the recording is uploaded to your account and sent to our speech recognition provider to produce a transcript, a summary and topics. We store the recording, transcript, summary, title, time and length so you can read them later. You can delete any meeting in the app, which permanently removes its recording and notes from our servers.

You are responsible for telling the other people in a meeting that it is being recorded and for getting any consent the law requires.

Technical information

Our hosting and authentication providers keep standard logs (such as IP address, device and browser type, and request times) to run the service securely.

Messages you send us

If you email us, we keep the conversation so we can help you.

What we don't collect

  • Audio when you are not holding the shortcut and have not started meeting notes.
  • Copies of your dictation audio or the text it becomes.
  • The contents of the apps you type into.
  • Advertising or cross-site tracking data. Our website uses no advertising or analytics cookies.

Why we use it

  • To create and secure your account and let you log in.
  • To provide transcription and enforce plan allowances.
  • To bill you if you choose Pro, once paid plans are on sale.
  • To send essential service emails, such as password resets and important changes. We'll only send marketing email if you opt in, and you can opt out at any time.
  • To prevent abuse and keep the service secure.
  • To meet legal obligations.

We process this data to perform our contract with you, with your consent (for microphone access and, for meeting notes, system audio access, which you grant on your Mac), for our legitimate interest in running a secure service, and where the law requires.

Who we share it with

We use a small number of service providers who process data on our behalf, under contracts that limit their use of it:

  • Google (Firebase): account sign-in, database, file storage for meeting recordings and transcripts, server functions and website hosting.
  • Deepgram: speech recognition. Receives the audio stream while you hold the shortcut and returns text. For meeting notes, receives the meeting audio and returns the transcript and summary.
  • Payment processor: not in use yet. Once Pro is on sale it will handle payments, and we will name it here. We receive confirmation of payment, not your full card details.

We don't sell or rent personal data. We disclose data to authorities only when legally required.

International transfers

Our providers may process data in countries outside India, including the United States. Where we transfer data, we rely on our providers' contractual and security safeguards and comply with the transfer rules that apply to us.

How long we keep it

  • Account and usage data: while your account is open, and deleted within 30 days after you ask us to close it. Closing your account also deletes any meeting recordings and notes still in it.
  • Billing records: as long as tax and accounting law requires (generally 8 years in India).
  • Support emails: up to 2 years after the conversation ends.
  • Dictation audio and text: not kept by us.
  • Meeting recordings, transcripts and summaries: until you delete the meeting in the app, or until your account is closed.

Security

Data is encrypted in transit (TLS) and at rest by our providers. Access to our database is restricted to server code; the app and website cannot read other users' data. Read more on our Security page.

Your rights

You can ask us to access, correct or delete your personal data, to withdraw consent, or to nominate someone to exercise your rights if you can't. If you're in the EU or UK you also have rights to restrict or object to processing and to data portability. Email us from the address on your account and we'll respond within 30 days.

If you're not satisfied with our response, you can complain to the Data Protection Board of India, or your local data protection authority.

Children

Codi is not intended for anyone under 18, and we don't knowingly collect their data. If you believe a child has created an account, contact us and we'll delete it.

Cookies and local storage

Our website uses your browser's local storage only to keep you logged in. We don't use advertising or analytics cookies. The optional “Try it” demo on our homepage uses your browser's built-in speech recognition, which is provided by your browser maker under their own privacy terms; we don't receive that audio.

Grievance officer

For privacy questions or complaints, contact our Grievance Officer at info@cognifydigital.in with the subject “Privacy”. We will acknowledge within 24 hours and aim to resolve within 15 days.

Changes to this policy

If we change how we handle your data in a meaningful way, we'll email you or show a notice before the change takes effect.

Contact

Cognify Digital Private Limited
New Delhi, India
Email: info@cognifydigital.in