Attunz Cloud Privacy Policy
This English version prevails over any translation.
Last updated: 14 October 2026
1. Who we are
Attunz Cloud is the hosted speech recognition and AI service inside the Attunz Mac app (the edition distributed from attunz.com). It is operated by Attunz, based in the Hong Kong SAR (“Attunz”, “we”, “us”). We are the controller of the personal data described in this policy.
Contact: support@attunz.com.
This policy covers Attunz Cloud only: the app turning it on and claiming the free trial automatically, using it, buying credits and contacting support about it. Local models and your own API keys (BYOK) are covered by the Attunz privacy notice at attunz.com/privacy.
2. What we collect
Attunz Cloud has no user accounts. We do not collect your name or a password.
- Wallet and device records. The first time the app starts, it creates a wallet. We keep the wallet number (a random identifier), the wallet status (for example, whether it is frozen) and, for the Mac linked to the wallet, the public key of the device signing key, device name, macOS version, app version and the date it was last used. The device access key is stored only as a SHA-256 digest. When the wallets of several Macs are merged, we link those Macs’ device records to the same wallet. The credentials needed for the merge travel between your Macs through your own sync folder, end-to-end encrypted; we cannot see the sync folder’s contents.
- Content. Audio, transcripts, prompts, context and AI output pass through Attunz Cloud for real-time processing only. See section 4.
- Usage and billing records. For each request: time, purpose (dictation, meeting, meeting minutes or background memory task), audio seconds, token counts, upstream cost, credits charged and error codes.
- Payment data. See section 3.
- Network data. We use your IP address to derive your country or region, to apply rate limits and to run the region checks required by sanctions law. When a wallet is created, we store the derived country or region code with the wallet record to count users by region. We do not store the IP address.
- Support email. When you email support@attunz.com, we receive your email address and your message, including any receipt or wallet number you send. We use them to answer you and to handle your request, such as a refund, a balance transfer or a deletion request.
3. Payment email and payment data
Stripe collects your payment email and billing address at checkout and sends you a receipt. Card and other payment details go directly to Stripe and we do not see them.
From each completed checkout we receive the payment email, the billing country, the amount and the Stripe checkout and payment references. Our gateway does not store the payment email. The payment email stays in Stripe with your receipts and refund records. We look it up in Stripe only to handle refunds, balance transfers and support requests. We do not use it for marketing.
We use the billing country for the region check required by sanctions law and to set the expiry of credits bought with a Japanese billing address (see the Terms of Service).
4. Your content: real-time processing only
- Attunz Cloud uses automated speech recognition and AI language models provided by third parties. Their output is generated by machines and can contain errors.
- Our gateway processes content in real time and does not record audio, transcripts, prompts or AI output.
- The AI routing provider is configured to use only zero data retention endpoints.
- The speech recognition provider’s real-time interface does not store audio or transcripts.
- Our application logs contain no content. They record only the wallet number, token counts, audio seconds, charges, error codes and upstream error messages cut to 200 characters.
- Identifiers sent to providers: the AI routing provider receives an HMAC of your wallet number. The speech recognition provider receives a random session ID. Neither receives your email address.
5. Who receives your data
| Recipient | Activity | Location | What they receive |
|---|---|---|---|
| Speech recognition provider | Speech recognition | United States | Audio stream, context terms, session ID, your country |
| AI routing provider and its downstream inference providers | AI language model routing and inference | United States; downstream inference may take place outside the United States (section 6) | Text prompts and context, HMAC of your wallet number, your country |
| Cloudflare, Inc. | Network and edge computing; hosts our gateway, wallet ledger and device index | United States; global network | All requests to Attunz Cloud |
| Stripe | Payment processing and receipts | Ireland (Stripe Payments Europe, Limited) | Payment details, payment email, billing address |
| Apple Inc. | DeviceCheck and App Attest only | United States | DeviceCheck tokens and App Attest data from the app (section 7) |
| Email providers | Receive, store and send email for support@attunz.com | United States (Cloudflare Email Routing receives the email; Google Gmail stores and sends it) | Your email address and the messages you exchange with us |
If you make a request under Article 15 GDPR, we will tell you the actual names of these recipients. We will update this policy before we change any of these providers.
6. Where your data is processed
- Speech sessions and the wallet ledger are processed in the United States.
- Your connection first reaches the nearest Cloudflare location, which forwards it without storing it. The device index is cached across Cloudflare’s global network.
- Downstream inference providers may process your text outside the United States.
- We pass your country or region to the speech recognition and AI providers. They see Cloudflare’s IP address, not your IP address.
7. Device information for the free trial
When the app claims the free trial for your Mac, we process the following to prevent duplicate trials and trial abuse:
- the public key of the device signing key;
- an App Attest key and its attestation, created on your Mac through Apple’s App Attest service (macOS 27 and later);
- a one-time DeviceCheck token, and the two bits of state that Apple stores for your device through DeviceCheck;
- your macOS version;
- whether the Mac reports that it is a virtual machine.
We use these signals to give each Mac only one trial and to refuse trials on virtual machines. The claim record does not contain your IP address.
We keep trial claim records for 12 months and then delete them.
8. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Provide Attunz Cloud, charge credits, process purchases and refunds, transfer balances, answer support requests | Performance of a contract (Article 6(1)(b) GDPR) |
| Prevent fraud and trial abuse, freeze wallets, enforce limits, protect the service | Our legitimate interests in preventing fraud and keeping the service available (Article 6(1)(f) GDPR) |
| Read device information for the trial checks in section 7 | Our legitimate interest in preventing trial abuse and fraud (Article 6(1)(f) GDPR) |
| Count users by country or region and by payment status | Our legitimate interest in understanding who uses the service and improving it (Article 6(1)(f) GDPR) |
| Keep order and ledger records | Legal obligation (Article 6(1)(c) GDPR) |
9. International transfers
- Cloudflare is certified under the EU-U.S. Data Privacy Framework.
- For the speech recognition and AI routing providers, transfers rely on the Standard Contractual Clauses or the Data Privacy Framework, as set out in each provider’s data processing agreement.
- For Stripe, Apple and Google, transfers rely on the safeguards in each company’s published data processing terms, such as the Standard Contractual Clauses or the Data Privacy Framework.
10. Users in mainland China
Under Article 39 of the Personal Information Protection Law of the People’s Republic of China, we tell you the names and contact details of the recipients outside mainland China. We ask for your separate consent before we transfer your personal information to them.
| Recipient | Role | Contact |
|---|---|---|
| Soniox, Inc. | Speech recognition | https://soniox.com/policies |
| OpenRouter, Inc. | AI language model routing | https://openrouter.ai/privacy |
| Together AI | AI language model inference | https://www.together.ai/privacy |
| CoreWeave | AI language model inference | https://docs.coreweave.com/policies/terms-of-service/privacy-policy |
| Fireworks AI | AI language model inference | https://fireworks.ai/privacy-policy |
| Venice.ai | AI language model inference | https://venice.ai/legal/privacy-policy |
| Cloudflare, Inc. | Network, edge computing and support email routing | https://www.cloudflare.com/privacypolicy/ |
| Stripe Payments Europe, Limited | Payment processing | https://stripe.com/privacy |
| Apple Inc. | DeviceCheck and App Attest | https://www.apple.com/legal/privacy/contact/ |
| Google LLC | Support email (Gmail) | https://policies.google.com/privacy |
11. Retention
- Content: not retained by our gateway (section 4).
- Unpaid wallets: we may delete a wallet that has no payment record and no requests for 12 consecutive months.
- Wallet and device records: kept until the wallet is deleted at your request or under the rule above.
- Trial claim records: 12 months, then deleted. If your wallet is deleted, the record is unlinked from the wallet and kept until the 12 months end, so a deleted wallet cannot be used to claim the trial again.
- Order and ledger records: kept for 7 years, as required by Hong Kong law.
- Support email: kept for 3 years after the last message, then deleted.
- Operational logs: kept for up to 90 days.
12. Deleting your wallet and your rights
To delete your wallet, email support@attunz.com. We may ask for your wallet number and a Stripe receipt to confirm that the wallet is yours. We then delete all device access keys, the wallet, its device records and the wallet data. Trial claim records and order and ledger records are kept as described in section 11. Remaining credits are forfeited (see the Terms of Service).
Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, the right to data portability and the right to withdraw consent. To use these rights, email support@attunz.com. Because we hold no names and do not store your payment email, we may ask for your wallet number or a Stripe receipt. You may also complain to your data protection authority.
13. Changes to this policy
We will publish changes on this page and update the date above. We will update this policy before we change any provider listed in section 5.