Last updated: April 21, 2026
BufferMind is a real-time AI copilot for lectures and meetings. This policy explains what data we collect, how we use it, and your rights regarding that data.
BufferMind requests microphone access solely for live transcription. The microphone is activated only when you tap the "Record" button and is immediately stopped when you tap "Stop." We never access the microphone in the background, and no audio is captured outside of an active recording session.
You may use BufferMind as a guest without providing an email address. Guest accounts receive a temporary anonymous identifier for session management. Guest recordings are stored under this identifier and are subject to the same deletion policies as registered accounts. If you later create an account, your guest data is not automatically linked to it.
Cloud storage. When you are signed in, your sessions are stored on Supabase (PostgreSQL database + object storage) hosted on servers in the United States. Audio files and transcripts are tied to your user account and are not accessible to other users. All cloud data is encrypted in transit (TLS) and at rest, and access to production systems is restricted to authorized personnel only.
Local storage on your device. To support offline playback and fast session history, BufferMind also keeps a copy of your sessions and audio on the device itself — in IndexedDB (browser / iOS WebView) or the application's data directory (macOS desktop app). This local copy is stored as plaintext JSON and audio files and relies on your operating system's user-account protections rather than client-side encryption. Anyone with physical or administrator access to your device may be able to read it, so please secure your device accordingly. You can delete local sessions at any time from the app's session history.
Service usage varies by platform. iOS uses Soniox only for transcription and translation. The desktop (macOS) and web versions additionally use Google Translate and Anthropic Claude for advanced features.
ZCC Labs LLC operates from the United States, and BufferMind's servers and third-party processors are located in the United States. When you use BufferMind from any other country, your personal data is transferred to, stored, and processed on servers in the U.S.
Recipients of transferred data (all based in the U.S.):
For users located in jurisdictions with data localization or cross-border transfer laws (including but not limited to the People's Republic of China under the Personal Information Protection Law (PIPL), and the European Economic Area / United Kingdom under the GDPR), this cross-border transfer is made on the legal basis of your explicit consent obtained when you sign in or create an account (via the consent checkbox on the login screen) and confirmed when you first start a recording. You may withdraw consent at any time by deleting your account in Settings, which will cause us to cease processing and delete your data.
For transfers of personal data originating in the European Economic Area, the United Kingdom, or Switzerland, ZCC Labs LLC's approach is to combine your explicit consent with contractual safeguards modeled on the European Commission's Standard Contractual Clauses (SCCs), supplemented by the technical measures described in the "Data Storage & Security" section above.
English: BufferMind is operated by ZCC Labs LLC, a United States entity. When you use BufferMind from mainland China, your personal data (audio, transcripts, email) is transferred to and processed on servers located in the United States by the recipients named above. Under the Personal Information Protection Law of the PRC (PIPL), voice recordings may constitute sensitive personal information; your explicit consent obtained at sign-in is the legal basis for this transfer under PIPL Article 38(3). You retain all rights granted by PIPL, including the right to access, correct, delete, or port your data, and the right to withdraw consent. To exercise these rights, contact support@buffermind.com.
中文：BufferMind 由美国实体 ZCC Labs LLC 运营。当您在中国大陆使用 BufferMind 时， 您的个人信息（音频、转录文本、邮箱）将被传输至美国，并由上文列出的接收方在美国境内处理。 根据《中华人民共和国个人信息保护法》（PIPL），语音录音可能构成敏感个人信息； 您在登录时通过勾选同意的方式提供的单独同意，构成本次跨境传输在 PIPL 第三十八条第（三）项下的合法性基础。 您保留 PIPL 赋予的所有权利，包括查阅、更正、删除、可携权及撤回同意的权利。 行使权利请联系 support@buffermind.com。
Voice recordings may constitute biometric or sensitive personal information under certain laws, including PIPL Article 28, GDPR Article 9, and the Illinois Biometric Information Privacy Act (BIPA, 740 ILCS 14). We take this seriously and disclose our practices below.
What we do not do. BufferMind does not perform speaker recognition or voice-based identification against a database of known individuals, does not use voice for authentication, does not perform emotion or health analysis from voice, and does not use Your Content to train AI models.
Speaker diarization and transient voiceprints. When speaker diarization is enabled (to label "Speaker 1," "Speaker 2," etc. within a session), our transcription provider Soniox, Inc. generates transient voiceprints for the sole purpose of separating speakers within that session. These voiceprints are:
Your consent and opt-out (Illinois BIPA & similar laws). By using the Service with speaker diarization enabled, you expressly consent in writing to the transient processing of voiceprints as described above. This Policy, together with our Terms of Service Section 9, serves as our written notice and record of your written consent under BIPA. You may opt out at any time by disabling speaker identification in the Service's settings; the Service will continue to function without speaker labels. Our retention schedule for voiceprint data is: not retained by ZCC Labs LLC at any point; destroyed by Soniox at session end. We will update this schedule and notify users if our practices change.
Raw audio handling. Raw audio is streamed to Soniox for real-time processing and is not retained by Soniox beyond the active session. Only the transcribed text and any recording you choose to save are stored in our systems.
Audio recordings: Audio is streamed to Soniox for real-time transcription; Soniox does not retain the audio stream beyond the active session. BufferMind saves a copy of the recording locally on your device (browser IndexedDB on web, application data directory on desktop/iOS) so you can replay sessions offline, and uploads it to our Supabase cloud storage so you can access sessions across devices. Audio persists in both locations until you delete the session — there is no automatic expiration.
Transcripts and metadata: stored on Supabase until you delete the session or your account.
Deletion: You can delete individual recordings at any time from the home page or session history. Deleting a session removes the audio blob from both your device and our cloud storage. You can permanently delete your entire account and all associated data from the Settings page; account deletion removes all recordings, transcripts, courses, and personal information.
BufferMind does not use cookies, advertising identifiers, or any cross-app/cross-site tracking technologies. We do not participate in ad networks or data brokers. The web version uses Vercel Analytics and Vercel Speed Insights to collect aggregate, cookie-less page-view and performance metrics; these tools do not track users across sites and do not collect personal identifiers. No other analytics providers are used.
We do not sell, rent, or share your personal data with third parties for marketing purposes. Data is only shared with the third-party services listed above as necessary to provide our core features.
Depending on your location, you may have the right to access, correct, or delete your personal data. California residents (CCPA): you have the right to know what data we collect, request deletion, and opt out of the sale of personal information — we do not sell your data. To exercise any of these rights, contact us at support@buffermind.com or use the account deletion feature in Settings.
BufferMind is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
If you have questions about this privacy policy or your data, contact us at support@buffermind.com.