Privacy Policy
Last updated: February 2026
1. Introduction
Vis.Works Media Inc. ("Reprog", "we", "our", "us") operates a voice AI application that helps you explore and clarify your goals. We are incorporated in Ontario, Canada.
This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website at reprog.me and our mobile application. By using Reprog, you agree to the practices described in this policy.
2. Information We Collect
a) Account Information
- Email address (provided at signup or via Google Sign-In)
- Name (if provided through Google OAuth)
- Authentication credentials (managed securely by our authentication provider, Supabase)
- User ID (automatically assigned to your account)
b) Goal & Session Data
- Goals you create: title, description, dimensions, status, and phase
- Memories: descriptions and sensory details you provide
- Session transcripts: text records of your voice conversations (stored as text, not audio)
- Session metadata: duration, AI-generated insights, and summaries
c) Voice & Audio Data
- Voice audio is captured by your device microphone during sessions
- Audio is transmitted in real time to OpenAI via our secure server relay
- Raw audio is NOT stored by Reprog — only text transcripts are retained
- OpenAI processes audio transiently in accordance with their API data usage policy
d) Payment Information
- Purchases are processed by Stripe — we do not store your credit card number
- We store: transaction type, amount, token balance, and Stripe reference ID
- Stripe receives: your email address and payment details directly
e) Usage & Device Data
- Pages visited and features used
- Browser type, operating system, and device type
- IP address (collected by our infrastructure providers for security and operational purposes)
f) Cookies & Local Storage
- Cookie consent preference (stored in localStorage)
- Authentication session tokens (managed by Supabase)
- Google Analytics cookies (set only with your consent)
3. How We Use Your Information
We use your information to:
- Provide and operate the service, including voice sessions and goal tracking
- Process payments and manage your token balance
- Improve the service and diagnose technical issues
- Communicate with you about your account, transactions, and service updates
- Comply with legal obligations
- Prevent fraud, abuse, and unauthorized access
4. How We Share Your Information
We share your data with the following service providers who act as data processors on our behalf:
| Provider | Purpose | Data Shared |
|---|---|---|
| OpenAI | Voice AI processing | Voice audio (real-time), conversation context |
| Supabase | Auth, database, hosting | Account data, goals, sessions, credits |
| Stripe | Payment processing | Email, payment details, user reference |
| OAuth authentication | Email, profile info (at your choice) | |
| Google Analytics | Website analytics | Anonymized usage data (consent-based) |
| Vercel | Web hosting | Standard server logs |
We do NOT:
- Sell your personal information
- Use your data for advertising
- Share your data with data brokers
- Use your conversations to train AI models (OpenAI's API data usage policy prohibits using API inputs for model training)
5. Your Rights & Choices
All Users
- Access your data — goals, sessions, and memories are visible in-app
- Request deletion of your account and all associated data
- Withdraw cookie consent at any time
- Opt out of Google Analytics
EU/UK Users (GDPR / UK GDPR)
- Rights of access, rectification, erasure, restriction, portability, and objection
- Right to withdraw consent at any time
- Right to lodge a complaint with your local supervisory authority
Legal bases for processing: consent (voice processing, analytics), contract (service provision), legitimate interest (security, fraud prevention).
California Users (CCPA / CPRA)
- Right to know what personal information is collected
- Right to delete your personal information
- Right to opt out of sale of personal information (we do not sell your data)
- Right to non-discrimination for exercising your rights
Canadian Users (PIPEDA)
- Right to access personal information held about you
- Right to challenge accuracy and request correction
- Right to withdraw consent (subject to legal or contractual restrictions)
How to exercise your rights: Email privacy@reprog.me and we will respond within 30 days.
6. Data Retention
- Account data: retained while your account is active
- Goals, memories, and sessions: retained while your account is active
- Voice audio: not stored — real-time processing only
- Session transcripts: retained while your account is active
- Payment records: retained for 7 years for tax and legal compliance
Upon account deletion, all user data is permanently deleted. Payment records are retained only as required by law.
7. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption in transit (TLS/HTTPS) for all communications
- Row Level Security ensuring users can only access their own data
- Server-side API keys — sensitive credentials (OpenAI, Stripe) are never exposed to client applications
- Rate limiting on sensitive endpoints
- Regular security reviews
8. International Data Transfers
Your data may be processed in the United States and other countries where our service providers operate. Transfers from the EU/UK are protected by Standard Contractual Clauses. Transfers from Canada are governed by PIPEDA cross-border provisions.
9. Children's Privacy
Reprog is not intended for anyone under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn that we have collected data from a child under 16, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at privacy@reprog.me.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. Material changes will be communicated via email or in-app notice. Your continued use of the service after changes are posted constitutes acceptance of the updated policy.
11. Contact
For privacy-related inquiries: privacy@reprog.me
For general inquiries: hello@reprog.me
Vis.Works Media Inc., Ontario, Canada