Sabiamo privacy notice
DRAFT — counsel review required before public launch. Operator: [LEGAL NAME]. Address and jurisdiction: [FOUNDER TO CONFIRM]. Privacy contact: [VERIFIED SUPPORT EMAIL]. Effective date: [LAUNCH DATE].
Conversation processing
When you enable the microphone, Sabiamo streams nearby speech through Cloudflare to Alibaba Cloud Model Studio (Qwen), using the Singapore endpoint. Audio, transcripts and translations are processed in relay memory; Sabiamo does not persist them on its servers. Alibaba Cloud is based in China; processing and cross-border transfers depend on its applicable terms. Provider retention and training terms must be verified before launch; we do not promise vendor zero retention. Saved conversation history is on your device by default; disable saving or delete history in Settings.
Accounts and payments
When sign-in is enabled, Apple or Google verifies your identity. Sabiamo stores a product-specific account ID, provider identifiers, email when supplied, verification state, account/sign-in dates, revocable sessions and usage totals. Tokens required for provider revocation are encrypted. Linking is explicit; accounts are not shared with other products. When paid plans are enabled, Stripe processes web payments and Apple processes App Store purchases. Sabiamo and its commerce service keep purchase status, entitlement and accounting records; card details are handled by payment providers. Creating an account does not purchase a plan.
Processors and purposes
Cloudflare hosts the site, relay, accounts, usage and abuse controls, and Turnstile where enabled. Alibaba Cloud processes audio and text for translation. Apple and Google provide sign-in; Apple and Stripe process their respective purchases. Content-free events and waitlist emails are pulled to our private core service for operations and early-access administration. These providers have their own privacy terms; counsel must confirm contractual roles, regions and transfer safeguards.
Retention
Usage rows normally retain the current UTC month; active paid-period totals may carry forward until the entitlement expires. Device/IP identifiers used for abuse protection are hashed. Consumed tokens expire and alarms remove expired state. First-party visitor metadata and its cookie expire after one year. Waitlist emails remain while the list is active and can be removed on request. Accounts remain until deletion. Pending provider-revocation jobs retain encrypted tokens until successful. Content-free event outboxes currently have no automatic deletion; retention limits are a launch requirement. Payment and tax records may require separate lawful retention, to be specified by counsel.
Deletion and export
Account & usage supports export and deletion when accounts are enabled. Deletion removes product account data and schedules provider-token revocation. Clear device history on each device separately. Account deletion does not cancel a subscription; use Stripe billing controls or App Store subscription settings. Contact [VERIFIED SUPPORT EMAIL] to remove waitlist records and request help. Content-free aggregate counts and service cost remain. Backups and Cloudflare recovery history may contain prior records: recovery must reapply deletion requests before service resumes. Cloudflare SQLite recovery history lasts up to 30 days; core encrypted snapshots retain 14 daily copies under the proposed operational policy. Founder must activate and verify that policy and determine statutory retention.
Your choices
Obtain participants’ consent before starting. You can stop the microphone, withdraw AI processing consent, clear local history and remove the visitor cookie. Privacy rights and complaint authority: [COUNSEL TO SPECIFY FOR LAUNCH MARKETS]. No conversation-based advertising or model training by Sabiamo.