Privacy
In short: your recordings are turned into text on your own device and are not uploaded, unless you choose Quick mode (below). Recordings and transcripts are saved only in your browser. We have no accounts, no ads, no cookies and no third-party analytics; we keep anonymous usage counts, without any ID, to run the service and stay within the N-ATLaS licence. If you choose to translate, the text of that transcript, not the audio, is sent to an AI service, and we ask for your consent first. If you choose Quick mode, the recording is sent to our own server in London, transcribed, and deleted straight away.
1. Who is responsible for your data
The data controller is Extrafemi Labs, which runs Naija Transcribe. For any privacy question or to exercise your rights, use our contact form and choose "Privacy or data request".
2. What we process, why, and on what legal basis
| Data | Where it goes | Why | Legal basis | How long |
|---|---|---|---|---|
| Your audio (recorded or uploaded) | Stays on your device. Never sent to us or anyone. | To transcribe it | Not collected by us | Until you delete it from My recordings |
| Transcripts and translations | Stay on your device | So you can edit, export and reopen them | Not collected by us | Until you delete them |
| Transcript text you choose to translate | Our server, then OpenRouter, then Anthropic (United States) | To translate it | Your consent, asked before the first translation (NDPA s.25(1)(a); GDPR art. 6(1)(a)) | Not stored by us. See section 4 for our providers. |
| What you send through the contact form: your email, optional name, topic and message | Our server, then our email provider Resend, then our inbox | To reply to you | Legitimate interests in answering enquiries, or steps you ask us to take (NDPA s.25(1)(b),(f); GDPR art. 6(1)(b),(f)) | Up to 12 months after the conversation ends, unless the law needs us to keep it longer |
| Anonymous usage counts: which actions happen, the language, Lite or Full, file type, size and length ranges, timings, country, device type, browser, operating system, hour, linking website, and a one-way hash of your IP address and browser | Our server's database (Cloudflare) | To count how many people use the service each 30 days, as the N-ATLaS licence requires, and to see what works and what fails | Legitimate interests in licence compliance and running the service (NDPA s.25(1)(f); GDPR art. 6(1)(f)) | Counts are kept; the hashes and the random value used to make them are deleted after about 60 days |
| Your IP address and basic request details | Cloudflare, our host | To deliver the site, keep it secure, and limit how often one address can translate | Legitimate interests in running a secure service (NDPA s.25(1)(f); GDPR art. 6(1)(f)) | Short-lived, under Cloudflare's policy. Our server keeps only error logs, for a few days, and never logs transcripts or messages. |
Microphone access is used only while you are recording, after you tap the record button and your browser asks your permission. We do not make automated decisions about you, and we do not profile you.
3. Translation, in detail
- Your transcript stays on your device unless you press Translate. The first time, we explain what will happen and ask you to agree. You can withdraw that consent at any time with the "Withdraw consent" link that appears after a translation. Withdrawing does not affect translations already made.
- When you agree, the transcript text is sent over an encrypted connection to our server (a Cloudflare Worker), which passes it to OpenRouter, which sends it to Anthropic's Claude model. The translation comes back to your browser.
- We instruct OpenRouter to use only model providers that do not store or train on the text. Our server does not keep a copy.
- Do not translate anything that includes sensitive personal information, such as health, religious or financial details or ID numbers, about you or anyone else.
3a. The contact form
Messages you send through the contact form go from our server to the Extrafemi Labs inbox so we can reply. We use them only to answer you and to keep a record of requests, such as data-protection requests, that the law requires. We never add you to a mailing list.
3b. Usage statistics
- We count usage ourselves, on our own server. There are no cookies, no device IDs and no third-party analytics, and we do not track you across other websites.
- To count people rather than clicks, our server combines your IP address and browser name with a random value, scrambles them one way (a SHA-256 hash), and stores only the result. The random value changes every 30 days and is then deleted together with the hashes, so nobody, including us, can turn them back into an IP address or link your visits across periods.
- For each action (for example "recording started", "transcription finished" or "exported as PDF") we count: the language, Lite or Full, the type of file (such as voice note or MP3), its size and length rounded into ranges, how long the download and transcription took, and whether it worked.
- We also count general context with each action: your country and state or region, and the name of your network provider (for example "MTN Nigeria"), all worked out by Cloudflare (we do not store your IP address); device type (phone, tablet or computer), browser and operating system, the hour of day, the website that linked you here, and whether a voice pack was already on your device.
- For voice-pack downloads we also record the download speed, how long the first byte took, and which Cloudflare data centre sent the files, so we can find and fix slow networks. To warn people when a network is having problems, we keep the network provider name, the time, whether a download finished, was slow or failed, and the speed of a small test download your device makes before a voice-pack download, for 48 hours (no IP address or other identifier). If the app fails to start, we record a short technical error message (never anything you entered).
- We never record what was said, the transcript, file names, translations or what you write in the contact form.
- If your browser sends Global Privacy Control or Do Not Track, it sends us no usage counts at all.
3c. Quick mode (transcription on our server)
- By default everything happens on your device. Quick mode is optional: it lets you transcribe without downloading a voice pack. You choose it each time on the transcribing screen, after reading what it does.
- In Quick mode your recording is sent over an encrypted connection (HTTPS, through Cloudflare) to our own server at Oracle Cloud in London, United Kingdom, transcribed there with the same N-ATLaS model, and the text is sent back to you.
- The recording is held only in the server's memory while it is transcribed and is deleted straight after. We do not keep the audio or the text on the server, do not log what was said, and never use it for training or share it.
- Legal basis: your consent (NDPA 2023 s.25(1)(a); GDPR Art. 6(1)(a)), given when you choose Quick mode. The United Kingdom has an adequacy decision from the EU; for Nigeria we rely on your consent for this transfer (NDPA s.43). You can always choose the on-device mode instead.
- The transcript is saved on your device like any other, in My recordings.
4. Who else handles data
- Oracle Cloud (London, UK) runs our Quick mode server, only if you choose Quick mode. Recordings are deleted after transcription.
- Cloudflare hosts the site and stores the voice packs. It processes IP addresses to deliver pages and protect the service.
- Resend delivers contact-form messages to our inbox (sent through Amazon's email service in Ireland, EU).
- Zoho hosts our email inbox, where contact-form messages arrive.
- OpenRouter and Anthropic process transcript text only when you choose to translate.
We do not sell or share your data with anyone else, and we do not use advertising or third-party analytics services. The site's fonts and software are served from our own hosting, so your browser does not contact Google or other third parties when you use it.
5. Transfers outside Nigeria, the UK and the EU
Cloudflare operates worldwide, and OpenRouter and Anthropic are in the United States. Where data leaves Nigeria, the UK or the EU, we rely on your explicit consent for translation (NDPA s.43; GDPR art. 49(1)(a)) and on our providers' contractual safeguards, such as standard contractual clauses, for hosting. You can ask us for details of these safeguards.
6. What is stored in your browser
- Your recordings, transcripts and translations, in your browser's own database, so you can reopen them from My recordings.
- The language you last chose, which voice packs you have downloaded, and whether you agreed to translation.
- The voice packs and speech software themselves, in your browser's cache.
These are needed for features you ask for, so no cookie banner is required, and none of it is sent to us. Delete any recording from My recordings, or remove everything by clearing this site's data in your browser settings. Anyone who uses this browser on this device can open My recordings, so use a private device for sensitive recordings.
7. Recording other people
If you record or upload other people's voices, you are responsible for having a lawful reason to do so and for telling them, and for getting their consent where the law requires it. Because, in on-device mode, the audio never leaves your device, we do not process it.
8. Your rights
Under the NDPA (sections 34 to 38) and the GDPR (articles 15 to 22) you have the right to be informed, to access your data, to correct it, to have it erased, to restrict or object to processing, to data portability, and to withdraw consent at any time. Because we do not keep your audio, transcripts or account details, there is usually nothing for us to return or delete; your data is on your device, under your control. Contact us with any request and we will respond within one month.
9. Complaints
If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Nigeria Data Protection Commission, the UK Information Commissioner's Office, or the data protection authority in your EU country.
10. Security
The site is served only over encrypted HTTPS, with strict browser security settings that stop other sites from loading or framing it and stop it from loading code from anywhere but our own hosting. Translation runs through a server that only accepts requests from this site and limits how often each address can use it. Our secret keys are kept on the server, never in the page.
11. Children
Naija Transcribe is not directed at children. If you are under 18, please use it with the consent of a parent or guardian.
12. Changes
If we change how data is handled, we will update this page and the date at the top before the change takes effect. If the change affects translation, we will ask for your consent again.