Ouvir generates European Portuguese audio episodes from the requests you write, with a synced transcript and a private podcast feed. This page explains what data we keep, what for, and who it is shared with. The data controller is Colby Thomas, who can be reached at colby@jrnxf.co.
What we keep
- Account: name, email and, if you sign in with email and password, a hash of the password. If you sign in with Google, we keep the name, email and profile picture Google returns to us, plus the tokens needed for that connection.
- Sessions: a session cookie, the IP address and the user agent of the browser you signed in from, to keep you signed in and to detect abuse.
- Episodes: the text of each request, the options you chose (level, format, length, voices), the generated script, the MP3 audio, the word-by-word alignment and the processing status. We also keep a record of how each one was made: how long each step took, which services answered, how much they were used, what that cost and the error message if a step failed.
- Feed: one private token per account that gives access to your RSS feed and the audio files without signing in. You can generate a new one in Settings at any time; the previous one stops working.
- Defaults: the default values for new episodes, kept on your account. Playback settings (speed, text size, theme) stay only in your browser.
- Questionnaire: if you answer the questions we ask after you create your account, we keep your answers: why you are learning, your level and the words you ticked, what you want to be able to do, the topics you like and the ones you want left out, the episode length and format you prefer, and anything you write about yourself. They become part of your learner memory and are used to write your episodes and suggest new ones. Every question is optional, and in Settings you can change the answers, download them with the rest of your memory, or delete them.
- Glossaries: the translations of words looked up in the transcript are cached per word, with no link to your account, so the same request is not repeated.
We do not use analytics or advertising tools, and we do not sell data to anyone.
Third-party services
To generate an episode and keep the app running, part of your data passes through these services:
- Google (Gemini): receives the text of the request and the generated script to check the script, and the script to convert it into speech. When OpenAI does not answer, it also writes the script and looks up the words in its place, and then receives what OpenAI would have.
- OpenAI: receives the text of the request to write the script, together with the notes the app keeps about your learning that shape an episode: your level, the words due for review, the grammar to practise, your interests and goals, and what you wrote about yourself. It also receives the lines of the generated script to look up the meaning of each word and to write the questions asked after a listen.
- ElevenLabs: receives the generated audio and the script to calculate the timing of each word.
- Cloudflare: hosts the app, the database and the audio files, and logs HTTP requests for operation and security purposes.
- Google (sign-in): only if you choose to sign in with your Google account.
- Stripe: only if you start the payment for Ouvir Plus. It receives your email at that moment, even if you never subscribe; it handles the payment and receives the payment details you enter there. Ouvir never sees or stores your card number.
- Resend: sends Ouvir's emails. It receives your email address and the content of each message we send you.
- Sentry: receives a report when an error occurs in the app, so we can fix it: the technical description of the error, the page it happened on, the browser type and the internal identifier of your account. We do not send your name, your email, your requests or the transcripts, and we do not record your session.
Each of these services processes data under its own privacy policy. We do not send your name or your email to the generation services.
Emails
We always send the emails an account needs: confirming your address and resetting your password. There are three more kinds, which you only get if you do not refuse them when you create your account, or if you turn them on in Settings: a note that an episode you asked for is ready, a weekly summary of what you listened to, and occasional reminders (to get started or to come back). Never more than one a day. You can turn each kind off in Settings, and every one of these emails has an unsubscribe link. To write them we use your name, the language and time zone of your account and your listening record. We keep your choice, when you made it and the wording you were shown. We do not track whether you open an email; we do note when you follow a link in one. If an email to you bounces, or you mark one as spam, we stop sending these emails to you.
Cookies
We only use cookies the app needs to work: to keep you signed in, to remember your language and time zone and, while you create an account, to carry your choice about emails. There are no tracking cookies.
How long we keep it
Data is kept for as long as your account exists. When you delete an episode, the script, the audio and the intermediate files are removed immediately; the record of how it was made stays until your account is deleted. Operational logs at Cloudflare expire automatically after a few days.
Your rights
You can ask for a copy of your data, correct it, or delete your account and everything associated with it. Write to colby@jrnxf.co from the account email and we will handle the request within 30 days. If you are in the European Union, you also have the right to lodge a complaint with the data protection authority of your country.
Security
Connections use HTTPS. Passwords are stored hashed and never in plain text. The feed and the audio are only accessible with your account token: treat the feed address like a password and generate a new one if you share it by mistake.
Changes
If this policy changes in a material way, we update the date at the top and, where appropriate, notify you by email.