ONDA

Privacy Policy

Effective date: October 9, 2026

1. Overview

ONDA is a meeting recorder and transcriber made by Tuval AI ("Tuval AI", "we"). Tuval AI is the controller for this policy and can be reached at harel@tuval-ai.co.il.

ONDA is designed so that your data stays on your device. Tuval AI runs no server for ONDA and never receives your recordings, transcripts, or Google account data.

ONDA's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

2. Information ONDA processes

  • Recordings, transcripts and summaries. Created and stored on your device, as ordinary files (audio, transcript, Markdown summaries, standalone HTML player) in a location you choose.
  • Google user data. If you choose to connect your Google account: Google Drive file data limited to files ONDA creates, Google Calendar event data, and your Google account email address. See section 3.
  • Speaker voiceprints. Stored only on your own Mac, used only to recognise speakers in your recordings, and deletable by you.
  • API keys. The AI provider API key (for Google Gemini) that you configure in the app is kept on your device and used to send requests directly from your device to the provider.

3. How we use Google user data

Connecting a Google account is optional. ONDA accesses Google user data only to provide the features you use, and only through these scopes:

  • Google Drive (drive.file). ONDA creates one folder in your Drive, uploads your recordings into it, and renames those files when you rename a recording. It can access only files and folders ONDA itself created and cannot see anything else in your Drive.
  • Google Calendar (calendar.events.readonly, read-only). ONDA reads your calendar events to show upcoming meetings and attendees and to associate recordings with the meeting they belong to. ONDA cannot create, change or delete calendar events. Calendar data is used only inside the app on your device.
  • openid and email. Used only to show you which Google account is connected.

4. Storage and security

Your files are stored on your own devices, or in your own Google Drive if you connect it. Sign-in tokens are stored only on your device (on iPhone, in the iOS Keychain) and are deleted when you disconnect. Because Tuval AI operates no server for ONDA, we hold no copy of your data. You are responsible for securing your own devices and accounts.

5. Sharing

  • Google user data is not sold.
  • Google user data is not shared or transferred to third parties, except as needed to provide the user-facing feature you requested.
  • Google user data is not used for advertising.
  • Google user data is not used to train AI models.
  • Humans do not read Google user data.

6. AI processing

Audio and transcripts are sent to the Google Gemini API only when you choose to transcribe or summarise a recording, or when you enable automatic or live transcription. These requests go directly from your device to Google using the API key you configured; they do not pass through Tuval AI. Processing by Gemini is governed by Google's terms. On-device transcription with ONDA Engine does not send audio to an AI provider.

In the ONDA for Chrome extension, the live draft transcript can fall back to Chrome's built-in speech recognition, which is provided by Google. Privacy Mode turns this off.

7. Retention and deletion

  • Disconnecting. When you disconnect your Google account in ONDA, the stored sign-in tokens are deleted from your device.
  • Revoking access. You can also revoke ONDA's access at myaccount.google.com/permissions.
  • Local files. You can delete recordings, transcripts, summaries and speaker voiceprints at any time by deleting them on your device.
  • Google Drive. Files already uploaded to your Drive remain there under your control until you delete them.

8. Children

ONDA is not directed to children under 13 (or under 16 in the European Economic Area), and we do not knowingly collect their information.

9. Recording consent

You are responsible for informing meeting participants that they are being recorded and for obtaining their consent where the law requires.

10. Changes

We may update this policy. The effective date above shows the latest version; material changes will be reflected on this page.

11. Contact

Tuval AI, harel@tuval-ai.co.il.