Legal
These are the companies that handle personal data for Earwig, what each one does, and where. Private mode uses none of them: words are made on your phone and nothing is sent. With AI off, nothing from that shoot goes to Anthropic.
We will give business customers 30 days’ notice of a new sub-processor. To be told, email privacy@earwig.io.
| Provider | What for | Data | Where | Transfer safeguard | Kept for | Role |
|---|---|---|---|---|---|---|
| Speechmatics | Live and batch speech to text | Audio as it is recorded | UK company; live audio uses its EU endpoint | UK Addendum to the EU Standard Contractual Clauses | Up to 7 days; never used to train AI | Processor |
| Soniox | Live speech to text, where used instead of Speechmatics | Audio as it is recorded | EU Sovereign Cloud [to confirm in use] | Standard Contractual Clauses and the UK International Data Transfer Addendum | Zero retention; never used to train AI | Processor |
| Anthropic | AI features when AI is on: marker summaries, summaries and titles, fact checks, questions, research, Pickup Reports, rough cuts, B-roll names; also briefs you upload, timecode photos in the web app, the Ask Earwig chat and support ticket sorting | Transcript text, or parts of it; one still frame per B-roll marker; the text or image you send | United States | Data Processing Addendum with Standard Contractual Clauses and the UK International Data Transfer Addendum | Up to 30 days for safety review; not used to train AI | Processor |
| Render | Application hosting and the database | Everything the service stores, with transcript text encrypted | Database in Frankfurt (EU); web service [region to confirm] | [UK-US Data Bridge / IDTA / UK Addendum] | As long as the account and its sessions exist | Processor |
| Cloudflare R2 | Media storage and the nightly database backup | Session audio, uploaded video and subtitle files; database backups | Stored in Western Europe (Cloudflare’s location setting, not a guaranteed EU-only jurisdiction); Cloudflare is a US company | Standard Contractual Clauses [UK mechanism to confirm] | Until you delete the session or account, or auto-delete after 30 days if on; backups [retention period] | Processor |
| GitHub | Runs scheduled jobs, including the nightly backup | A backup passes through on its way to storage; nothing kept | United States | [UK-US Data Bridge / IDTA / UK Addendum] | None: the machine is destroyed after each run | Processor |
| Resend | Sign-in, account and update emails | Email address, the email sent, delivery events | United States | [UK-US Data Bridge / IDTA / UK Addendum] | [retention period] | Processor |
| PostHog | Product analytics, only with your agreement on the web and the Help improve Earwig switch in the app | Which pages and features are used, linked to your account ID when signed in | EU | Not needed: EU hosted | [retention period] | Processor |
| Calendly | Booking a call with Harry | Name, email and the time you pick | United States | [UK-US Data Bridge / IDTA / UK Addendum] | Calendly's own terms | Processor |
| Stripe | Web payments | Email, payment method, billing records | United States and others | Stripe's own terms | Stripe's own terms; billing records [6 years] | Independent controller |
| Apple | App Store payments, Sign in with Apple, push notifications | Subscription status, Apple sign-in identity, push token | United States | Apple's own terms | Apple's own terms | Independent controller |
| Optional Sign in with Google | Name, email and Google profile identifier | United States | Standard Contractual Clauses | Google's own terms | Independent controller |
More detail is in our privacy policy.