Privacy Policy

This privacy policy applies to the Prisma app (hereby referred to as "Application") for mobile devices that was created by Tiago Prestes and Muchinski Vieira (hereby referred to as "Service Provider") as a Commercial service. This service is intended for use "AS IS".

OVERVIEW

Prisma is an application that transcribes audio recordings and generates AI-powered summaries of the transcribed content. The Application does not require account creation, does not require a signup or login, and does not store user-provided content (such as audio recordings, transcripts, or summaries) on the Service Provider's servers. Content processed by the Application is handled in-session and is not retained by the Service Provider after processing.

INFORMATION COLLECTION AND USE

The Application collects a limited amount of information automatically when you download and use it. This information may include: • Your device's Internet Protocol address (e.g. IP address) • The pages or screens of the Application that you visit, the time and date of your visit, the time spent on those screens • The total time spent on the Application • The operating system you use on your mobile device • Basic diagnostic and crash information used to maintain and improve the Application The Application does not gather precise information about the location of your mobile device. The Application does not require you to create an account, provide an email address, or supply any personally identifiable information in order to function.

AUDIO, TRANSCRIPTS, AND AI PROCESSING

To provide its core functionality, the Application sends audio recordings and related content to third-party services for processing: • Audio transcription is performed by ElevenLabs. When you use the transcription feature, the audio you record or upload is transmitted to ElevenLabs' API for processing and returned as text. • Summarization and other AI-generated content is performed either by Apple's Foundation Models (on-device, when available) or by the OpenAI API. When on-device processing is used, your content does not leave your device. When the OpenAI API is used, the transcribed text is transmitted to OpenAI for processing and a summary is returned. The Service Provider does not store your audio recordings, transcripts, or AI-generated summaries on its own servers. Content is processed in-session and discarded. However, once data is transmitted to a third-party processor (ElevenLabs or OpenAI), it is subject to that provider's own privacy policy, data handling, and retention practices. You are encouraged to review them:

• ElevenLabs Privacy Policy: https://elevenlabs.io/privacy

• OpenAI Privacy Policy: https://openai.com/policies/privacy-policy

• Apple Privacy Policy: https://www.apple.com/legal/privacy/ (applicable when Foundation Models are used on-device)

Any content stored locally on your device (for example, saved transcripts or summaries within the Application) remains on your device and under your control. Uninstalling the Application or clearing its data will remove this content.

THIRD PARTY ACCESS

Only aggregated, anonymized analytics data is periodically transmitted to external services to help the Service Provider improve the Application. In addition, as described above, user-submitted audio and text content is transmitted to third-party AI providers solely for the purpose of delivering the Application's core features. The Application utilizes third-party services that have their own Privacy Policies about handling data. Below are the links to the Privacy Policies of the third-party service providers used by the Application:

• RevenueCat — subscription and purchase management: https://www.revenuecat.com/privacy • ElevenLabs — audio transcription: https://elevenlabs.io/privacy

• OpenAI — AI summarization (when used): https://openai.com/policies/privacy-policy

• Apple — on-device Foundation Models and platform services: https://www.apple.com/legal/privacy/

The Service Provider may disclose automatically collected information: • as required by law, such as to comply with a subpoena, or similar legal process; • when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request; • with their trusted service providers who work on their behalf, do not have an independent use of the information disclosed to them, and have agreed to adhere to the rules set forth in this privacy statement.

PURCHASES AND SUBSCRIPTIONS

The Application may offer paid features or subscriptions managed through RevenueCat and the app store on your device (Apple App Store). The Service Provider does not process or store your payment information. Payment details are handled directly by the applicable app store and by RevenueCat in accordance with their respective privacy policies.

OPT-OUT RIGHTS

You can stop all collection of information by the Application easily by uninstalling it. You may use the standard uninstall processes as may be available as part of your mobile device or via the mobile application marketplace or network. Because the Application does not require an account and does not store user-provided content on the Service Provider's servers, there is no user profile or content to delete on the server side.

DATA RETENTION POLICY

The Service Provider does not retain user-provided audio, transcripts, or summaries. Such content is processed in-session and discarded. Aggregated, anonymized analytics data may be retained for as long as it is useful for improving the Application. Third-party providers (ElevenLabs, OpenAI, Apple, RevenueCat) may retain data in accordance with their own retention policies. Please refer to the linked privacy policies above for details. If you have any questions or requests related to data handling, please contact the Service Provider at tiago.prestes@pucpr.edu.br and gustavomckv@gmail.com and they will respond in a reasonable time.

CHILDREN

The Service Provider does not use the Application to knowingly solicit data from or market to children under the age of 13. The Application does not address anyone under the age of 13. The Service Provider does not knowingly collect personally identifiable information from children under 13 years of age. In the case the Service Provider discovers that a child under 13 has provided personal information, the Service Provider will immediately delete this from their systems. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact the Service Provider (tiago.prestes@pucpr.edu.br) and (gustavomckv@gmail.com) so that they will be able to take the necessary actions.

SECURITY

The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic, and procedural safeguards to protect information the Service Provider processes and maintains. Communication between the Application and third-party services is transmitted over encrypted connections (HTTPS/TLS). However, no method of transmission over the internet or method of electronic storage is 100% secure, and the Service Provider cannot guarantee absolute security.

YOUR RIGHTS (GDPR / LGPD)

Depending on your jurisdiction, you may have rights under data protection laws such as the EU General Data Protection Regulation (GDPR) or the Brazilian General Data Protection Law (LGPD), including the right to access, correct, delete, or object to the processing of your personal data. Since the Application does not store user-provided content or maintain user accounts, most of these rights are satisfied by design. For any questions or to exercise your rights regarding the limited automatically collected data described above, please contact the Service Provider at tiago.prestes@pucpr.edu.br and gustavomckv@gmail.com.

CHANGES

This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes to the Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes. This privacy policy is effective as of 2026-04-13.

YOUR CONSENT

By using the Application, you are consenting to the processing of your information as set forth in this Privacy Policy now and as amended by us.

CONTACT US

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at tiago.prestes@pucpr.edu.br and gustavomckv@gmail.com.