Privacy Policy

Last Updated: August 24, 2026

Company: 科創互聯科技有限公司 (TechCreate Connect Limited)

Contact Email: ai@cohear.work

1. Introduction

科創互聯科技有限公司 (TechCreate Connect Limited) ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our mobile application (the "App").

If you are a California resident, our California Resident Privacy Notice includes additional information about your California privacy rights and how we collect, use, and disclose your personal information.

2. Information We Collect

2.1 Information You Provide

• Account Information: Phone number, verification code, username, avatar, and industry and role preferences
• User-Generated Content: Voice recordings, transcriptions, summaries, and generated deliverables (such as PPTs and infographics)
• Imported Materials: Audio files, documents, file names, file formats, file sizes, and parsed text content that you actively upload or import
• Account and Login Information: Phone number, verification results, third-party authorization identifiers, binding status, and account security verification information
• AI Memory and Preference Information: Industry or occupation information that you confirm or modify, personal vocabulary, memory-related terms, speaker names, voiceprint or voice-related identifiers, template favorites, and sharing preferences. Voiceprint or voice-related information is sensitive personal information. We process your voiceprint or voice-related information only after you actively enroll, confirm, or enable the relevant feature, and we provide controls to disable or clear it. We do not use third-party participants' voices to identify them across recordings or to build a voiceprint database.
• Third-Party Information in Reception Recordings: When you use recording, transcription, summarization, or analysis features during sales receptions, customer communications, meetings, or similar scenarios, recordings may contain the voices and conversations of customers, accompanying persons, colleagues, or other participants, as well as information identified or inferred by AI from those conversations.

2.2 Information Collected Automatically

• Device Information: Device type, operating system, and unique device identifiers
• Location Data: Approximate or precise location, depending on your authorization and device settings. We collect and use location data only after you grant the relevant permission, where the App or a related feature requires it.
• Usage Data: How you interact with the App, features used, and recording history, including basic timestamps and record, edit, share, and delete events
• Audio Data: Voice recordings you create, which are processed for transcription and summarization
• Necessary Service Status Records: Notification authorization status, notification sending and click status, service SMS authorization and sending status, task processing status, and similar records used for service delivery, troubleshooting, and frequency control
• Basic Feature Usage Records: Basic operation records generated when you use login, recording, import, generation, sharing, deletion, and similar features. We do not report recording transcripts or full document text as ordinary behavior records.
• Advertising Attribution Information: When you download or use the App through Apple Ads, we may obtain an advertising attribution token through Apple's AdServices and collect the device identifier, App version, operating system version, and account identifier (if you are logged in). We may also obtain attribution results related to the installation, such as the campaign, ad group, keyword, and conversion type.

2.3 Permissions and Data Access

The App requests the following permissions to provide its services:

We access data only within the stated purpose of each permission and only to the extent necessary.

2.4 Google Sign-In

When you use Google Sign-In, the Google Sign-In SDK may make your Google account identifier, name, and email address available to CoHear, together with authentication credentials such as an ID token and server authorization code. CoHear uses the ID token and server authorization code to authenticate your CoHear account with the CoHear backend. The current app sends these authentication credentials as explicit Google login parameters; your name or email address may be used locally as a display-name fallback. The app does not request additional Google API scopes. Google processes authentication and related technical information in accordance with Google's Privacy Policy: https://policies.google.com/privacy

2.5 Firebase Analytics

If Firebase Analytics is enabled in the submitted version, it may automatically collect app-instance identifiers, device and app information, session and usage data, and approximate location derived from network information. On iOS, advertising identifiers such as IDFA require the appropriate Apple framework and user authorization; other device identifiers may still be used. Firebase Analytics is provided by Google and is subject to Google's Privacy Policy: https://policies.google.com/privacy

2.6 Microsoft Sign-In

When you use Microsoft Sign-In, the Microsoft Authentication Library (MSAL) may provide the App with your Microsoft account identifier, username, and authentication credentials, including an ID token and access token. CoHear sends the ID token to its backend to authenticate your CoHear account. Your username may be used locally as a display-name fallback. The App requests the User.Read permission and the OpenID Connect scopes required for sign-in; it does not request additional Microsoft Graph permissions. Microsoft processes authentication and related technical information in accordance with Microsoft's Privacy Statement: https://privacy.microsoft.com/privacystatement

2.7 Amplitude Analytics

We use Amplitude, Inc. to understand how users interact with the App, measure feature usage, diagnose problems, and improve our services.

Depending on the App configuration, Amplitude may receive app-instance or device identifiers, device and App information, operating system information, IP-derived approximate location, session and App lifecycle data, and in-App interaction events. These events may include recording-flow events, page views, feature usage, paywall interactions, purchase-flow events, and technical event properties.

When you are signed in, analytics events may be associated with your CoHear account identifier. We do not send your recordings, transcripts, summaries, or document contents to Amplitude through these analytics events.

Amplitude processes this information as a service provider under its own privacy notice, available at https://amplitude.com/privacy.

2.8 Meta App Events and Attribution

We use Meta Platforms, Inc.'s Facebook SDK for iOS to measure App usage, registration, content engagement, checkout and purchase events, and to support SKAdNetwork and other attribution measurement.

The SDK may automatically collect App lifecycle and technical information. Depending on the event, we may send selected event information to Meta, including registration and tutorial events, content or recording identifiers, product identifiers, checkout events, purchase or subscription events, purchase failures, transaction or order identifiers, quantities, amounts, currencies, and related App and device information.

We do not send recordings, transcripts, summaries, or document contents to Meta through these App Events. In the current iOS configuration, collection of Apple's advertising identifier (IDFA) is disabled and the App does not request App Tracking Transparency authorization.

Meta processes information in accordance with its privacy policy, available at https://www.facebook.com/privacy/policy/.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our services
• Process voice recordings for transcription and summarization
• Generate deliverables (such as PPTs and infographics) based on your content
• Generate transcriptions, analysis, summaries, and deliverables based on audio, documents, and text input that you upload or provide
• Distinguish speakers, assign roles, analyze content, and generate summaries in sales receptions, customer communications, meetings, and similar scenarios
• Use industry or occupation information, personal vocabulary, and speaker information that you confirm or edit to improve subsequent recognition, speaker attribution, and content generation
• If you actively enroll in the relevant feature, use your personal voiceprint or voice-related identifier to recognize your own voice in later recordings. This feature is not used to identify third-party participants across recordings.
• Use location data, when you authorize location access, to provide more accurate location-related services and service experiences that use your location. Location data is not used to create advertising profiles.
• Manage your account and preferences
• Send necessary service notifications, including system notifications, in-App message center notifications, and Android service SMS notifications after your authorization
• Conduct account security verification, abnormal login detection, device management, phone number binding or change, and account cancellation processing
• Measure installations and conversions from Apple Ads and other promotional channels, identify installation sources, and evaluate and optimize promotional strategies. This information is not used for cross-App tracking and is not combined with user data from other companies to create advertising profiles.
• Respond to your inquiries and provide customer support
• Comply with legal obligations

4. AI and Speech Recognition Service Processing

When you use recording, audio import, document import, transcription, summarization, PPT or infographic generation, or similar features, we process the necessary content that you provide or that is generated by those features, including recorded audio, imported audio, parsed document text, text input, transcriptions, meeting content, summaries, and generation requests.

To provide these features, we upload necessary content to CoHear servers for processing by the speech-recognition and large-language-model services that we integrate. The relevant data is not used for advertising, advertising profiles, or marketing purposes unrelated to the App's features. We do not use your recordings, transcriptions, summaries, imported materials, or generated deliverables to train general-purpose or CoHear models. We do not provide this content to data-labeling providers for training or evaluation datasets.

Before you first use a relevant AI feature, we will display an AI data-processing authorization notice in the App. After you agree, you may continue to use recording, import, transcription, summarization, and content-generation features. You may also turn off this authorization in Me > Account & Security Management > AI Permission Management in the App. After you turn it off, the relevant features may no longer be available, but historical content that has already been generated will not be automatically deleted.

We require relevant service providers to process data under protection standards no lower than those described in this Privacy Policy and not to use the data for purposes unrelated to the App's features.

To provide the App's core features, we send necessary data to the following third-party service providers. We restrict their processing to the purposes we specify through data-processing agreements, terms of service, or other reasonable means, and require security measures no less protective than those described in this Policy.

5. Special Notice About Third-Party Information in Reception Recordings

The App's recording, transcription, summarization, and analysis features may be used during sales receptions, customer communications, meetings, or similar scenarios. These recordings generally come from real conversations between you and customers, accompanying persons, colleagues, or other participants and may therefore contain third-party personal information, including:

• The voices and conversation content of customers, accompanying persons, or other participants;
• Information identified or inferred by AI from the conversations; and
• Speaker distinctions and role labels based on voice characteristics for transcription and analysis.

Speaker distinctions and role labels are used only to complete the transcription, summarization, and analysis of the current recording. They are not used to build a voiceprint database or to identify customers, accompanying persons, colleagues, or other third-party participants across recordings. If you actively enroll in a personal voiceprint feature, the resulting voiceprint or voice-related identifier is used only for the enrolled user's own subsequent recognition features and may be disabled or cleared through the App.

As an App user, before recording, uploading, or submitting relevant content, you are responsible for:

• Providing the customers, accompanying persons, or other participants being recorded with the notices required by applicable laws and obtaining any necessary consent;
• Ensuring that you have a lawful basis to collect, upload, and submit the relevant third-party information for processing by the App; and
• Not using analyses, summaries, or deliverables generated by the App for unlawful, discriminatory, or otherwise harmful purposes.

We process these recordings and derived information only as a technical service provider acting on your instructions. If you cannot obtain the required consent or do not have a lawful basis, do not record, upload, or submit the relevant content.

6. Data Storage and Security

• Your data is stored on secure servers and cloud storage (such as OSS) with appropriate encryption
• We implement industry-standard security measures to protect your information
• Voice recordings and transcriptions are associated with your account and accessible only to you, unless you choose to share them. Speaker labels, role labels, and any personal voiceprint or voice-related identifier are treated as part of the related recording or AI memory and are not used for unrelated identity profiling.
• After you confirm sharing, an external share page may be stored as an independent snapshot. Please confirm that the content is appropriate for external sharing before you share it.

7. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With third-party vendors that assist in operating the App, such as cloud storage, speech recognition, authentication, analytics, attribution, and push notification providers
• Third-Party Capability Providers: To implement login, SMS, push notifications, cloud storage, speech recognition, AI generation, WeChat/DingTalk/Feishu login or sharing, and similar functions, we may provide the relevant service providers with the minimum information necessary to complete the function. Processing by speech-recognition and large-language-model services is governed by the AI and Speech Recognition Service Processing section of this Policy.
• Legal Requirements: When disclosure is required by law, court order, or government request
• Protection of Rights: To protect our rights, your safety, or the safety of others

8. Data Retention

• We retain your account information and user-generated content for as long as your account remains active
• Audio, documents, transcriptions, summaries, and generated deliverables are stored with your account unless you delete them or cancel your account
• Deleted audio and deliverables may first enter a recycle bin and be retained for a certain period, by default 30 days. Once permanently deleted or expired, they cannot be recovered.
• Share pages that have already been generated and shared externally may remain as share snapshots. Deleting the source audio or deliverable does not necessarily revoke an existing share page unless the product provides a closing or revocation capability.
• You may request deletion of your data by contacting us at ai@cohear.work
• We may retain certain information as required by law or for legitimate business purposes

9. Your Rights and Choices

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate information through the App or by contacting us
• Deletion: Request deletion of your account and associated data, including recordings, transcriptions, summaries, generated deliverables, and any personal voiceprint or voice-related identifier, subject to legal exceptions and technical deletion schedules
• Data Portability: Request a copy of personal information that you provided to us in a structured, commonly used, and machine-readable format, where required by applicable law
• Restriction or Objection: Request that we restrict or stop processing where applicable, including processing based on consent or legitimate interests
• Withdraw Consent: Withdraw consent previously provided to us. Withdrawal applies going forward and does not affect processing that occurred before withdrawal.
• Appeal: Appeal a decision we make about your privacy request by contacting us at ai@cohear.work
• Opt Out of Notifications: Disable system notifications in your device settings, or disable or refuse service SMS authorization in the App
• Revoke Permissions: Revoke microphone, camera, photo library, system notification, and similar permissions at any time through your device settings
• Revoke Location Permission: Revoke location access at any time through your device settings. If you do so, location-based features or more accurate location-related services may no longer be available.
• Turn Off AI Data-Processing Authorization: Turn off authorization in Me > Account & Security Management > AI Permission Management in the App. After you turn it off, recording transcription, imported-material parsing, summarization, and content generation may no longer be available.
• Manage AI Memory: View, edit, or delete your personal vocabulary; disable or clear your personal voiceprint or voice-related identifier; and modify related display names
• Manage Sharing: Confirm that content is appropriate for external sharing before you share it. Generated share snapshots may exist independently from the source content.

10. Children's Privacy

The App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected such information, we will delete it in accordance with applicable law or obtain authorization from the child's guardian.

11. International Data Transfers

Your data may be processed and stored on servers located in the People's Republic of China or other jurisdictions. Where applicable law requires a transfer mechanism or additional safeguards, we will use an appropriate mechanism and provide additional information upon request. By using the App, you acknowledge that such transfers may occur.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the App or by other reasonable means. Your continued use of the App after such changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Email: ai@cohear.work
Company: 科創互聯科技有限公司 (TechCreate Connect Limited)