Legal

Privacy Policy

Last updated: February 25, 2026  ·  CueApp

We collect minimal data, process it transparently, and never sell it. This policy explains exactly what we collect, why, and how you can control it.

1. Who We Are

CueApp ("we", "us", "our") is the developer and operator of this Service. If you have questions about this policy or your personal data, contact us at info@nextpathlabs.eu.

2. What Data We Collect

We collect only the data necessary to provide the Service: Account data • Name, email address, and authentication identifiers provided when you sign in via our authentication provider (Clerk). Usage and billing data • Credit balance, transaction history (credit purchases via Stripe), and session counts. • We do not store your full payment card details. Payment processing is handled entirely by Stripe. Session data • Session logs stored locally on your device, including transcripts and AI-generated suggestions. • We do not automatically upload or store your interview transcripts on our servers unless you explicitly trigger a report. Technical data • Basic application error logs and diagnostics (no personally identifiable information).

3. How We Use Your Data

We use the data we collect to: • Operate and deliver the Service (authentication, credit management, session handling) • Process payments and manage subscriptions • Send transactional communications (purchase confirmations, account notices) • Investigate and fix technical issues We do not use your data to train AI models. We do not sell your data to third parties. We do not use your data for advertising purposes.

4. Audio and Screen Data

CueApp captures microphone audio and screen content during active sessions, solely to provide real-time transcription and AI assistance. This data is: • Processed in real time • Transmitted to third-party AI providers (Google, OpenAI) strictly for generating responses • Not stored permanently on our servers after the session ends By starting a session, you consent to this real-time processing. You can stop processing at any time by ending the session.

5. Third-Party Services

We use the following third-party services: • Clerk — authentication and user management (clerk.com) • Convex — real-time database for account and credit data (convex.dev) • Stripe — payment processing (stripe.com) • Deepgram — speech-to-text transcription (deepgram.com) • OpenAI / Google — AI response generation Each provider operates under its own privacy policy. We encourage you to review their policies. We share only the minimum data required for each service to function.

6. Data Retention

We retain your account data for as long as your account is active or as required by law. Session logs are stored locally on your device and are under your control — you can delete them at any time from within the application. If you delete your account, we will remove your personal data from our systems within 30 days, except where retention is required by law.

7. Your Rights (GDPR)

As a user in the European Union, you have the following rights under the General Data Protection Regulation (GDPR): • Right of access — request a copy of the personal data we hold about you • Right of rectification — correct inaccurate or incomplete data • Right of erasure — request deletion of your personal data • Right to restrict processing — limit how we use your data • Right to data portability — receive your data in a structured, machine-readable format • Right to object — object to processing based on legitimate interest • Right to lodge a complaint — with the Romanian National Supervisory Authority (ANSPDCP) or your local data protection authority To exercise any of these rights, contact us at info@nextpathlabs.eu. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption in transit (TLS), access controls, and secure key management. However, no method of transmission over the internet is 100% secure.

9. Children

CueApp is not directed at or intended for use by individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through a notice in the application. The date at the top of this policy reflects the most recent update.

11. Contact

Data controller: CueApp info@nextpathlabs.eu