LOMA - Privacy Policy
Last updated: April 12, 2026
1. Introduction
LOMA ("we", "our", "the app") is a voice-to-text transcription application with AI enhancement, developed by Sortia IT Consulting (Jozef Kapicak). LOMA is available as an Android app, Web app (PWA), and Chrome Extension. This privacy policy explains how we collect, use, and protect your personal data across all platforms.
2. Data We Collect
Account Data
- Email address (for authentication via email/password or Google Sign-In)
- Subscription status (free/pro plan)
Audio & Transcription Data
- Voice recordings (temporarily processed for transcription, not permanently stored on servers)
- Transcribed text from voice recordings
- AI-enhanced text variants (corrected text, style variants)
- Translated text (when translation is enabled)
- Recording metadata: duration, language, detected language, device name, source (android/web/chrome-extension), model used, cost
Usage Data
- Daily recording count and duration (for plan quota enforcement)
- Daily enhance and translate usage counts
Preferences
- Language preferences (speak language, translate-to language)
- Theme preference (dark/light)
- Transcription model selection
- Variant style selection
- Auto-copy and enhance settings
3. How We Use Your Data
- Convert your voice recordings to text using OpenAI Whisper API
- Translate transcribed text using OpenAI GPT-4o-mini
- Generate AI-enhanced text variants (correction + style variants) using OpenAI GPT-4o-mini
- Store your transcriptions and variants for later access
- Synchronize data across your devices (Android, Web, Chrome Extension)
- Enforce plan quotas (daily recording limits, max duration)
- Copy transcribed text to your clipboard
4. Third-Party Services
OpenAI (Whisper API & GPT-4o-mini)
- Voice recordings are sent to OpenAI's Whisper API for transcription
- Transcribed text is sent to OpenAI's GPT-4o-mini for translation and AI enhancement
- OpenAI processes the data and returns results
- OpenAI's data usage policy applies: openai.com/policies/privacy-policy
- Audio and text are not permanently stored by OpenAI when using the API
Supabase
- Transcriptions, variants, and account data are stored in Supabase (cloud PostgreSQL database)
- Authentication is handled by Supabase Auth (email/password + Google OAuth)
- Edge Functions handle API proxying (Whisper, Translate, Enhance, Quota)
RevenueCat (Subscriptions)
- Subscription management is handled by RevenueCat
- Payment processing via Google Play (Android) and Stripe (Web/Chrome Extension)
- We store only subscription status (plan type, expiry date) — no payment card data
5. Data Storage & Security
- Your data is stored securely in Supabase (cloud database with PostgreSQL)
- All data is protected by Row Level Security (RLS) — each user can only access their own data
- Communication is encrypted via HTTPS/TLS
- Passwords are hashed and never stored in plain text
- Voice recordings are processed in memory and not permanently stored on our servers
- Authentication tokens are stored locally on your device (SharedPreferences on Android, chrome.storage on Chrome Extension, localStorage on Web)
- OpenAI API keys are stored only on the server (Supabase Edge Functions) — never in client code
6. Chrome Extension
The LOMA Chrome Extension uses the following permissions:
- activeTab — to paste transcribed text into the active page's text field
- storage — to persist authentication tokens and settings
- tabs — to open the recorder window and handle OAuth
The extension communicates only with Supabase backend (wbgxbisoqxncqjpprors.supabase.co). No browsing data, web history, or page content is collected.
7. Data Sharing
We do not sell, share, or transfer your personal data to third parties.
- Your data is never shared with advertisers
- Your data is never used for profiling or targeted advertising
- We do not use analytics services that track individual users
- Voice recordings and text are sent only to OpenAI for transcription, translation, and enhancement
8. Your Rights
- Access — You can view all your transcriptions in the app at any time
- Copy — You can copy any transcription to your clipboard
- Delete — You can delete individual transcriptions or request full account deletion
- Portability — Your transcriptions are accessible as plain text
- Consent withdrawal — You can stop using the app and delete your account at any time
9. Microphone Access
LOMA requires microphone access to record audio for transcription. Microphone access is requested only when you tap the record button and is used exclusively for voice-to-text conversion. You can revoke microphone permission at any time in your browser, Chrome Extension settings, or device settings.
10. Subscriptions & Payments
- LOMA offers a Free plan and a paid Pro plan
- Payments are processed by Google Play (Android) or Stripe (Web/Chrome Extension) via RevenueCat
- We do not store credit card numbers or payment details
- Subscriptions can be cancelled at any time through the respective platform
11. Children's Privacy
LOMA is not intended for children under 13. We do not knowingly collect data from children under 13.
12. Changes to This Policy
We may update this privacy policy from time to time. The updated version will be indicated by the "Last updated" date at the top.
13. Contact
If you have questions about this privacy policy, contact us at: