Last updated: September 16, 2026 · Version 1.9
This Data Usage Policy provides a detailed guide to how your conversation data is collected, processed, stored, and shared within the Closer AI application. This policy supplements our Privacy Policy and is designed to give you full transparency into our data flows.
When you record a conversation, the following process occurs:
Audio is captured on your device using your device's microphone. Before any recording can begin, both partners must each enter their own private consent PIN on the device (dual consent). Recording requires a linked partner — there is no solo or single-person recording mode — so every recording carries the active, on-device consent of both partners. It remains your responsibility to ensure all parties consent as required by the recording laws in your jurisdiction.
The recorded audio file is uploaded to Supabase Storage using an encrypted connection (TLS). Audio files are stored with encryption at rest and are protected by Row Level Security (RLS) policies, ensuring only you and your linked partner (if applicable) can access them.
A Supabase Edge Function sends the audio recording to Deepgram for speech-to-text transcription. The resulting transcript text is stored in the database, associated with your recording. Deepgram processes the audio solely to produce the transcript, and we send the request with model-training opt-out enabled so your audio is not used to train Deepgram's models.
When a recording is created, its audio receives a fixed deletion date 90 days later. Existing recordings already assigned a 7-day or 30-day deadline keep that shorter date. Before the deadline, both original participants may approve additional time — 30, 60, 90, or 180 days, chosen by whoever requests it. A later agreement replaces the previous one rather than adding to it, the deadline never moves more than 180 days past the original, and either participant may end it. The full transcript is stored separately and receives its own fixed 12-month deletion date. Audio files are never sent to AI analysis providers — only transcript text is used for AI analysis.
After transcription, your conversation is analyzed by AI:
Only the conversation transcript (text) is sent to the AI language model provider for analysis. Your original audio recording is NOT sent to the AI provider.
The AI produces a conversation summary highlighting key topics and themes, relationship insights based on communication patterns, and personalized coaching suggestions. These generated outputs are stored in the database and associated with your recording.
Our AI provider, Anthropic (Claude AI), processes your transcript solely to generate the requested analysis. Anthropic does not use this data to train its models, and retains API inputs and outputs for up to 30 days solely for safety and security purposes, after which they are deleted.
Closer AI supports partner account linking for shared access to relationship data:
Partners are linked by email invitation. When both partners have created accounts and their email addresses match the invitation records, accounts are automatically linked.
When accounts are linked, AI-generated conversation summaries are automatically visible to both partners. This allows both partners to benefit from insights without requiring full transcript access.
Full conversation transcripts are only shared when both partners approve. Either partner may decline to share a transcript, and that decision is respected. This ensures both partners have control over the level of detail shared.
Closer AI implements multiple layers of consent to ensure you maintain control over your data:
During onboarding, you are asked to acknowledge three consent checkboxes: consent to conversation analysis and AI processing, consent that both parties agree to recording and analysis, and agreement to the Terms of Service, Privacy Policy, and Data Usage Policy.
Before each recording begins, both partners must each enter their own private consent PIN on the same device. Recording requires a linked partner and is not available solo, so every conversation captured carries the active, on-device consent of both partners. You remain responsible for complying with the recording-consent laws in your jurisdiction.
Sharing full transcripts between partners requires explicit approval from both parties on a per-transcript basis.
Either participant may request additional time for a specific audio recording, choosing 30, 60, 90, or 180 days. The extension takes effect only if both original recording participants approve that specific length before the original deadline. A later agreement replaces the previous one rather than adding to it, and the deadline can never move more than 180 days past the original. Changing the requested length withdraws any approval already given for the previous length, and a pending request does not pause deletion. Either participant may later withdraw their own approval, returning the audio to its original schedule; if that date has passed, the cleanup service removes it.
To be clear about our data practices, we want to explicitly state what we do NOT do: we do NOT sell your data to any third party; we do NOT use your conversations to train AI models, and none of our providers use your data to train theirs; we do NOT access your data without proper authentication and authorization; we do NOT use your conversation content for advertising or marketing purposes; and we do NOT share your data with third parties for their own purposes.
One clarification, because it is an exception to how this section used to read. Apart from your linked partner, the only parties that receive identifiable conversation content are the processors listed in the Privacy Policy, acting solely on our instructions: Supabase (storage), Deepgram (transcription), Anthropic (analysis), and — for accounts created on or after this policy's effective date — PostHog, which receives session replays of the App's screens. Because those screens display your own conversation material, a replay can contain transcripts, summaries, insights, and AI chat messages. We review these replays ourselves to find and fix usability problems. Consent PIN entry and images are masked and never recorded, and your audio is never sent to PostHog. See Privacy Policy sections 2.5 and 5.6.
We follow the principle of data minimization. We only collect information that is necessary to provide the service. Audio recordings are only created when you actively initiate a recording with consent. Audio is time-limited, and full transcripts are generated solely to enable AI analysis and your review before their 12-month deletion date. When the transcript is deleted, source-heavy intermediate analysis is also removed and the retained insight history is reduced to summaries, patterns, and no more than ten short excerpts. Account information collected during onboarding is limited to what is needed for the service to function.
You have full control over your data:
Raw audio is automatically deleted 90 days after recording unless both participants approve an extension of 30, 60, 90, or 180 days, which can never move the deadline more than 180 days past the original. Existing recordings already assigned a 7-day or 30-day deadline keep that shorter date. Full transcripts are automatically deleted after 12 months. Transcript deletion also removes speaker samples and source-heavy intermediate analysis; summaries, patterns, and no more than ten short transcript excerpts remain while the relationship history is active. Either participant may delete sooner. Conversations and retained history are also deleted through full deletion, unlinking, account deletion, or after both participants have been inactive for 24 months. Advance notices before scheduled audio and transcript deletion may state only the recording’s calendar date and deletion date; they never include a time, title, participant, topic, quote, transcript, or analysis. A narrow, expiring legal hold may temporarily delay automatic deletion when legally required.
You may remove available components from the Conversations screen. Audio-only deletion is immediate for the recording owner and leaves the transcript and analysis. Transcript-only deletion removes the verbatim transcript, transcript-derived speaker samples, legacy analysis, and source-heavy intermediate pipeline data for both participants. The retained insight snapshot may still contain summaries, patterns, and up to ten short excerpts. Either partner may unilaterally schedule full deletion; no approval from the other is required. Full deletion uses a 7-day undo window and then permanently removes the audio, transcript, summaries, insights, short excerpts, and consent evidence, subject only to a documented legal obligation.
Deleting your account removes all of your data, including your profile, AI chat history, recordings, transcripts, summaries, and insights. If you are linked to a partner, deletion also unlinks the relationship and withdraws consent to retain shared recordings as described below: every recording attributed to the two of you is permanently deleted, regardless of which partner started it. Your partner's account and recordings not attributed to your relationship are not deleted. This action is permanent and cannot be undone.
Keeping shared recordings requires both partners' consent. When either partner unlinks, that consent is withdrawn: all recordings the two of you made together — including audio, transcripts, and AI-generated analyses — are permanently deleted from both accounts. This deletion is immediate and cannot be undone. If you both want to keep a copy, use the partner-approved data export in Settings before unlinking. Unlinking also revokes all ongoing access to each other's data.
We implement comprehensive security measures to protect your data: all data is transmitted using TLS (Transport Layer Security) encryption; stored data, including audio files and transcripts, is encrypted at rest; Supabase Row Level Security (RLS) ensures users can only access their own data and authorized shared data; authentication is required for all data operations; our service providers maintain their own security certifications and practices; and we conduct regular security reviews and monitoring.
Our third-party service providers process your data under their standard terms and applicable data-protection obligations. Where required, we enter into Data Processing Agreements (DPAs) with our providers, and Standard Contractual Clauses (SCCs) or equivalent safeguards are relied upon for international data transfers where applicable. Each provider is obligated to process your data only as needed to perform its service and to maintain appropriate security measures. We review our providers' security practices and compliance.
For questions about how your data is used, please contact us at privacy@getcloserai.com.