Skip to content
Kalima

Privacy Policy

Version 1.0 — Effective February 18, 2026

1. Introduction

Kalima ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our multilingual transcription and translation platform ("Service"). It complies with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is Kalima. For questions or requests regarding your data, contact us at privacy@trykalima.com.

3. Data We Collect

3.1 Account Data

When you register, we collect your name, email address, and authentication credentials. If you sign in via Google, we receive your Google profile information (name, email, profile picture).

3.2 Usage Data

We automatically collect information about how you use the Service, including session durations, features used, and performance metrics.

3.3 Audio Data

Audio streamed for transcription is processed in real time and is not stored permanently unless you explicitly choose to record and save a session. All audio processing occurs on EU-based servers for GDPR compliance.

3.4 Cookies and Similar Technologies

We use essential cookies for authentication and session management. Optional analytics and marketing cookies are only set with your explicit consent. See our cookie consent banner for details and controls.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

  • Contractual necessity - to provide the Service you have signed up for.
  • Consent - for optional cookies, marketing communications, and analytics.
  • Legitimate interest - for security, fraud prevention, and service improvement.
  • Legal obligation - to comply with applicable laws and regulations.

5. How We Use Your Data

  • To provide, maintain, and improve the Service.
  • To authenticate your identity and manage your account.
  • To process payments and manage subscriptions.
  • To send service-related communications (e.g., billing, security alerts).
  • To monitor and analyze usage patterns for performance and reliability (with consent).
  • To detect, prevent, and address technical issues and security threats.

6. Data Sharing and Third Parties

We share personal data only with the following categories of recipients:

  • Speech-to-text provider ((KaliVox Proxy)) - audio data for real-time transcription, processed on EU servers.
  • AI service provider ((OpenRouter)) - text data for summarization, chat, and translation features.
  • Cloud infrastructure ((DigitalOcean)) - hosting and data storage, EU region.
  • Error monitoring ((Sentry)) - anonymized error and performance data (with consent).
  • Authentication provider ((Google)) - only if you use Google sign-in.
  • Payment processor - for subscription billing.

We do not sell your personal data to third parties.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Deleted sessions and associated data are permanently purged within 30 days. You may request account deletion at any time.

8. Your Rights (GDPR)

As a data subject under the GDPR, you have the right to:

  • Access - request a copy of your personal data.
  • Rectification - correct inaccurate or incomplete data.
  • Erasure - request deletion of your personal data ("right to be forgotten").
  • Restriction - restrict processing of your data.
  • Data portability - receive your data in a structured, machine-readable format.
  • Objection - object to processing based on legitimate interest.
  • Withdraw consent - withdraw previously given consent at any time.

To exercise any of these rights, contact us at privacy@trykalima.com. . We will respond within 30 days.

9. International Data Transfers

All primary data processing occurs within the European Union. Where data transfers outside the EU are necessary (e.g., AI processing), we ensure adequate safeguards are in place, including Standard Contractual Clauses (SCCs) or equivalent mechanisms.

10. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), encryption at rest, access controls, and regular security assessments.

11. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notification. The "Effective" date at the top indicates the latest revision.

13. Contact

For privacy-related questions, concerns, or requests, contact our Data Protection Officer at privacy@trykalima.com.