Legal
The app, the website, Earwig Sync and live transcription all connect over encrypted connections (HTTPS and secure WebSockets).
Transcript text is encrypted with AES-256-GCM, using a separate key for each user, before it is written to the database. A copy of the database on its own shows only scrambled text. The secret those keys come from is kept in our host’s protected settings, apart from the database. Audio, video and subtitle files are stored on Cloudflare R2, which encrypts stored files.
Your sessions are tied to your account. Media is reached only through short-lived, signed links, and there is no public index of anyone’s files. A share link works only with its PIN, until you reset the link or delete the session. Admin access is limited to Earwig’s owner, needs a password and a one-time code [confirm the code is switched on] as well as the owner’s account, expires, and every admin action is logged. We look at a customer’s content only to give support they asked for or to restore a lost session.
| AI on | AI off | Private mode | |
|---|---|---|---|
| Audio sent for transcription | Speechmatics or Soniox | Speechmatics or Soniox | No, words are made on the phone |
| Audio stored | Cloudflare R2, until you delete it | Cloudflare R2, until you delete it | Not kept at all |
| Transcript stored | Encrypted in our database | Encrypted in our database | On the phone only, until you upload it |
| Sent to Anthropic | Yes, for the AI features | No | No |
The database is backed up every night to a private storage bucket, kept for [retention period]. Deleting a session removes its audio, video, subtitles and transcript. Deleting your account removes everything tied to it, and asks our analytics and email providers to delete their records about you.
If a breach affects personal data we control, we will tell the ICO within 72 hours where the law requires it, and tell you without undue delay if you are at high risk. Business customers whose content we process will hear from us without undue delay, so they can meet their own duties.
Found a security issue? Email privacy@earwig.io. Our security.txt says the same.