Consent to the Processing of Sensitive Information
Effective 19 September 2026 · Version 1.0
The Company does not offer the Service in order to collect sensitive information. But what you record or upload may contain sensitive information as defined in Article 23 of Korea’s Personal Information Protection Act, and cloud storage, transcription and AI processing handle that content. Under Article 23(1)(1) the Company asks for this consent separately from every other consent. It is optional: you can sign up and record on your device without it.
1. Sensitive information processed, purposes and retention
| What is processed | Purpose | Retention |
|---|---|---|
| Information about health contained in what you record or upload (a consultation, mentions of symptoms or medication, and the like) | Encrypted cloud storage and sync across devices, speech recognition (transcription), and summaries, organized notes, translation, chat and study materials produced with generative AI | Until you delete the data or your account. How long a copy sent to a processor for transcription or AI processing remains with that processor is stated, processor by processor, in the Consent to the Cross-Border Transfer of Personal Data. |
| Information about beliefs, political opinions, trade-union or party membership, sex life and the like contained in what you record or upload | As above | As above |
| Information about race or ethnicity, or criminal records, contained in what you record or upload | As above | As above |
The Company uses this information only to carry out the processing you ask for. It does not use your content to train its AI models, does not analyse content to extract or classify sensitive information, and does not profile you. Stored content is encrypted on your device before it is sent and kept, and the Company does not hold the decryption key in readable form, so it does not read stored copies. Transcription and AI processing, however, need readable text at the moment they run; at that moment the Company’s servers and the overseas processors named in the Consent to the Cross-Border Transfer of Personal Data handle the content in readable form.
2. Genetic and biometric information
The Company does not collect genetic information.
The Company does not generate biometric information from voices in order to identify or authenticate anyone. Speaker separation tells voices apart within a single recording, as “Speaker 1” and “Speaker 2”, and until you name them that distinction means something only inside that recording. The Company does not compare voices across recordings to find the same person, and does not create or keep voiceprints for that purpose.
A voice can nevertheless be personal information in itself, and what is said may contain the sensitive information described in section 1.
3. Other people’s sensitive information
This consent is about you. Where other people appear in a recording and it contains their sensitive information, your consent does not stand in for theirs.
When you record, send or share content containing other people’s personal or sensitive information, you must obtain whatever authority, notice or consent the law that applies to you requires (Terms, Article 10).
The Company applies the safeguards in section 1 to such content as well. If a person who appears in a recording asks the Company for access to or deletion of their information, the Company will, so far as the recording can be identified, tell you and handle the request as the law requires. Nothing in this section shifts the Company’s own obligations as a data controller onto you.
4. Your right to refuse, and what refusing means
You have the right to refuse this consent. It is optional, so refusing does not limit signing up, or recording, playing back and exporting on your device.
The Company cannot know in advance which recordings contain sensitive information, so while you have not consented, “AI features” in the app and on the web stay off. In that state cloud storage, sync and backup of recordings, cloud transcription, and AI summaries, organized notes, translation, chat and study materials are not provided.
You can withdraw this consent at any time in Settings in the app or on the web, or by writing to hello@recnovo.com. “AI features” turn off as soon as you do. Withdrawal does not reach back to processing already done, but you may also ask for that content to be deleted.
5. Contact
Privacy Officer: Junmee You (Representative Director) · Contact: hello@recnovo.com
You can ask for access to, correction or deletion of, or a stop to the processing of sensitive information, and withdraw consent, at that address or in Settings. How the Company explains a refusal or partial action, and how to object, is set out in the Privacy Policy.