주식회사 ECDS ("we") operates SubQuick (the "Service") and handles your personal information as described here.
1. Information we process
- Account: email address and a hash of your password (email sign-in), phone number (phone sign-in), Google user ID and name (Google sign-in), display language
- Device: install ID, device name, operating system, app version, a device marker (a keyed hash of the Windows machine ID)
- Usage: transcription length, translated characters, number of AI feature uses, request times, a keyed hash of your IP address
- Processed briefly: audio extracted from your video and caption text. These are not kept after processing.
We never receive your video files. Editing and exporting happen on your PC.
2. Purposes
Sign-in and account management, providing transcription, translation and AI features, counting usage and applying plan limits, preventing abuse, and answering inquiries. We do not sell your information or use it for advertising.
3. Transfers abroad
To provide the Service we entrust information to the companies below. We ask for your consent when you sign up. If you do not consent, features that require sign-in (transcription, translation, AI) are unavailable; editing and exporting still work.
| Recipient | Country | Items | Purpose | Retention |
|---|---|---|---|---|
| Groq, Inc. | USA | Audio, caption text | Transcription, translation, AI features | Not retained (zero data retention) |
| Google LLC (Google Cloud) | Singapore | Request contents (while processing) | Running the server | While processing |
| Neon, Inc. | Singapore (AWS) | Account, device, usage records | Database | Until you delete your account |
| Resend, Inc. (US company) | Japan (Tokyo) | Email address, sign-in code | Sign-in code emails | Delivery logs 30 days |
| Twilio Inc. | USA | Phone number, sign-in code | Phone sign-in text messages | Per Twilio's policy |
| Google LLC | USA | Sign-in requests | Google sign-in | Per Google's policy |
For users in Japan: information on the personal data protection systems of these countries is available from the Personal Information Protection Commission, and the recipients protect personal data under contract.
4. Retention
- Account and device information: until you delete your account. On request, sign-in stops immediately and the data is deleted after 30 days.
- Usage records: 13 months, after which only monthly totals remain; deleting your account removes the link to you.
- Sign-in requests and email codes: 1 day
- Security logs: 1 year
5. Your rights
In the app's "My account" you can view your information, sign out other devices and delete your account. You can also request access, correction, deletion, restriction of processing or withdrawal of consent at privacy@subquick.app; we respond without delay.
6. Security
Encryption in transit (HTTPS); passwords stored only as argon2id hashes; session tokens and codes stored only as hashes; device markers and IP addresses stored only as keyed hashes; least-privilege access; sessions on your PC protected with OS encryption (Windows DPAPI).
7. Breaches
We notify the relevant authorities within 72 hours of becoming aware of a breach and inform affected users.
8. Children
People under 14 may not sign up.
9. Contact and changes
Privacy officer: 주식회사 ECDS, privacy@subquick.app
We announce changes in the app and on this page 7 days before they take effect, and ask for consent again for changes that are less favourable to you.