Privacy Policy of Assistant Recorder
Last updated: 02/03/2026
This privacy notice is provided pursuant to Regulation (EU) 2016/679 (“GDPR”) and applicable Italian data protection law. It describes how DEF STUDIO srl (hereinafter the “Controller” or “we”) processes the personal data of users who use the mobile application Assistant Recorder (the “App”) and the related services, also accessible via the website https://assistant.defstudio.dev.
At a glance
Data Controller
DEF STUDIO srl
Trav. Sergio Pansini 1/b -- 70124 Bari (Italy)
Contact for privacy
Email: [email protected]
What Assistant Recorder does
Recording of audio, transcription through AI systems, and generation of summaries and notes based on your meetings.
1. Data Controller
- Controller: DEF STUDIO srl
- Registered office: Trav. Sergio Pansini 1/b -- 70124 Bari (Italy)
- Contact email: [email protected]
For any questions or to exercise your rights, you can contact us at [email protected].
2. Types of data processed
When you use the App, we may process the following categories of personal data:
2.1 Account data and identifiers
- First name and last name (if provided)
- Email address
- Login credentials (stored in encrypted form or via identity providers)
- Internal user ID
2.2 Audio data and generated content
Since Assistant Recorder is an app for recording audio and transcribing it through artificial intelligence systems, we process in particular:
- Audio recordings made through the device’s microphone
- Any associated metadata (recording title, date, duration, meeting type, notes)
- Text transcripts generated from the audio
- Summaries, extracts, analyses and other content automatically generated based on the recordings (e.g. meeting summaries, lists of key points, etc.)
Recordings may contain personal data concerning both you and third parties who speak during the meeting.
2.3 Technical and usage data
- Device information (model, operating system, App version)
- Technical logs, IP address, request timestamps, pseudonymised identifiers
- Information about how you use the App’s features (e.g. number of recordings created, errors, crash logs)
2.4 Data collected through cookies or similar technologies (website)
If you use the website https://assistant.defstudio.dev, we may collect additional data through technical cookies and, if configured, analytics or profiling cookies. More information is available in the relevant Cookie Policy.
3. Permissions required by the App
The App may request the following permissions:
Microphone (android.permission.RECORD_AUDIO)
Used exclusively to record the audio of meetings or voice notes, in order to:
- Save the recording on the device and/or on our server
- Perform automatic transcription
- Generate summaries and analyses
We do not use the microphone for purposes other than those described above (for example, we do not listen in the background without your consent and explicit action), and we do not use it for targeted advertising.
Other permissions that may be requested (for example, access to storage to save files) will be used exclusively to enable the related technical features of the App.
4. Purposes and legal bases of processing
Your data are processed for the following purposes and on the following legal bases:
-
1. Provision of the App’s core service
- Recording audio, generating transcripts, summaries and related content.
- Managing your account and allowing you to access your recordings.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
-
2. Technical management and security of the App and services
- Preventing fraudulent use or abuse.
- Monitoring and improving stability, performance, scalability and security.
Legal basis: legitimate interest of the Controller (Art. 6(1)(f) GDPR).
-
3. Service improvement and statistical analysis
- Aggregated analyses and usage statistics, in pseudonymised or anonymised form.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
-
4. Compliance with legal obligations
- Managing requests from authorities or fulfilling legal obligations.
Legal basis: legal obligation (Art. 6(1)(c) GDPR).
-
5. Optional communications (e.g. newsletter, updates) – if applicable
- Sending informational or promotional communications about Assistant Recorder or related services.
Legal basis: consent (Art. 6(1)(a) GDPR), which can be withdrawn at any time without affecting the lawfulness of processing before withdrawal.
5. Methods of processing and security measures
Data are processed using electronic and telematic tools, in a manner strictly related to the purposes indicated and in compliance with the principles of minimisation, integrity and confidentiality.
We adopt appropriate technical and organisational measures, including:
- Encrypted transmission of data (e.g. HTTPS/TLS)
- Internal access controls and role-based permissions
- Backups and logging systems
- Encryption and pseudonymisation, where appropriate
However, no system is completely secure; we encourage you to use the App responsibly, avoiding recording highly sensitive content unless strictly necessary.
6. Data retention
We retain your personal data for no longer than is necessary for the purposes for which they were collected.
In particular, unless otherwise configured within the App:
- Audio recordings, transcripts and summaries are retained as long as you keep your account or until you delete them manually.
- Technical logs are retained for a maximum of 12 months, unless longer retention is required in case of security incidents or legal disputes.
- Data processed on the basis of consent (e.g. newsletters) are retained until consent is withdrawn.
You can request deletion of your account and the associated data as described in the section “Data subject rights”.
7. Data recipients and service providers
Your data may be disclosed to:
- IT service providers, hosting providers and server/database maintenance providers
- Providers of audio processing and artificial intelligence services
- Consultants and professionals (e.g. legal, accounting)
- Competent authorities, where required by law
These parties process data as:
- Processors pursuant to Art. 28 GDPR, on the basis of specific data processing agreements, or
- Independent controllers, in the cases provided for.
We do not sell your personal data to third parties.
8. Transfers of data outside the European Economic Area
Some service providers may be located in countries outside the European Economic Area (EEA). In such cases:
- The transfer takes place in compliance with Arts. 44–49 GDPR, for example through:
-
• adequacy decisions of the European Commission; or
• standard contractual clauses (SCCs).
You can request additional information on the mechanisms of data transfer by writing to [email protected].
9. Data subject rights
Under the GDPR, you have the right to:
- Obtain confirmation as to whether or not personal data concerning you are being processed;
- Access your personal data;
- Request rectification or updating of your data;
- Request the erasure of your data (“right to be forgotten”), in the cases provided for;
- Obtain restriction of processing;
- Object, in whole or in part, to processing based on legitimate interest;
- Receive your data in a structured, commonly used and machine-readable format (data portability);
- Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
- Lodge a complaint with the Italian Data Protection Authority or the competent supervisory authority.
To exercise your rights, you can contact us at [email protected].
10. Children
The App is not intended for children under 18 years of age (or a lower age limit that may be provided for by the law of your country).
We do not knowingly collect personal data from children without the consent of their parents or legal guardians. If you believe that data relating to a child have been collected, please contact us so that we can delete them.
11. Changes to this Privacy Policy
We reserve the right to update this privacy notice from time to time, in order to reflect regulatory changes or modifications to our processing activities.
Updated versions will be published on https://assistant.defstudio.dev and/or within the App. We encourage you to review this page regularly.