Privacy policy
Your meetings belong to you. This page explains in plain language which data Koldash processes for which purposes, who it is shared with, and how you can delete it.
Last updated:
This English version is a courtesy translation. The Turkish version is legally binding; where the two differ, the Turkish text prevails. Read the Turkish version
Koldash is a macOS app provided by Mehmet Konukçu in Türkiye. In this policy, “we” means Koldash and “you” means the person using the app or this website. The data controller for your personal data is Mehmet Konukçu. For the detailed notice required under the Turkish Personal Data Protection Law No. 6698 (KVKK), see the KVKK privacy notice.
What data we process
We process only the following data, and only to provide the service.
- Account information: name, email address, email verification status and password. Your password is stored only in hashed form. Sign-in works only with email and password.
- Session information: the session key is kept in your Mac’s Keychain. On the server we keep the session record, IP address, browser/device information (user agent) and session lifetime.
- Meeting content: the meeting’s title and purpose, the transcript, AI suggestions, the end-of-meeting summary, and any context, custom terms and file text added to the meeting. These are stored in your account.
- Screenshots: a single image, taken only when you use Look at Screen during a meeting. It is not stored and is deleted from memory when the meeting ends.
- Templates: name, purpose, languages, custom terms, additional context text and up to 10 context files you add (PDF or plain text). We store the file’s text, not the file itself.
- Usage and entitlement information: free trial, purchased minute packs and subscriptions, minutes used and AI usage (tokens).
- Error reports: when an error or crash occurs in the app, on the website or on the server, the error type, stack trace, the route involved, environment and version information, and your internal user ID. Meeting content, your email address and screenshots are never included in these reports.
We use this data to manage your account, produce live transcription and suggestions, prepare summaries, keep track of your usage entitlements, detect and fix errors, keep the service secure and meet our legal obligations. We do not sell your data and we do not share it for advertising.
Audio is not recorded
During a meeting, Koldash listens to your microphone and your Mac’s system audio on two separate channels. This audio streams live from your Mac to our server and from there to the speech recognition provider. Audio is not recorded, not stored and cannot be played back later; only the transcribed text remains. The Audio Test in Settings does not send audio to the server. The “Test Template” feature works with typed text and is not saved to History.
The app does not join the meeting as a bot and is not integrated with services such as Zoom, Meet or Teams; it only processes the audio you hear on your Mac. Because transcription and AI suggestions run on the server, an internet connection is required.
Screenshots (Look at Screen). When you use Look at Screen during a meeting (⌃⌥S), a single image is taken of the screen your pointer is on at that moment; the Koldash window is not included in it. The image is sent to our AI provider only to generate answers and suggestions in that meeting. The latest screenshots stay in that meeting’s AI context until the meeting ends, so they are sent again with later AI requests in the same meeting, including automatic suggestions. Screenshots are not stored on your device or our servers, are not saved to History, and are deleted from memory when the meeting ends. History keeps only the “Look at Screen” line and the AI’s answer. The app does not watch your screen continuously or take images on its own. macOS Screen Recording permission is requested only when you use this feature, and macOS may ask for it again from time to time. If your screen shows information about other people, keep that in mind before using this feature.
Where your data is stored
Your account, meeting, template and usage data are stored on servers and in a PostgreSQL database operated by our hosting providers. Your session key exists only in your Mac’s Keychain. The website’s theme preference stays in your browser and is never sent to us.
Third-party service providers
We use the following providers as data processors to deliver the service. They process your data only on our instructions to provide their service, not for their own purposes.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Soniox | Speech recognition (transcribing audio) | Live audio stream and custom terms | USA |
| OpenAI | AI suggestions, summaries and custom term extraction | Transcript, template and preparation content, text of context files, screenshots taken with Look at Screen | USA |
| Hosting and database providers | Running the servers and the PostgreSQL database | Account, session, meeting, template and usage data | Depends on the provider’s data center location; may be outside Türkiye |
| Polar (payments and invoicing as merchant of record) | Collecting and invoicing purchases made in the app and on the website | Email address, account ID, IP address at checkout, order and payment details; we do not store card details | Depends on the provider’s location; may be outside Türkiye |
| Resend | Sending account emails (email verification and password reset) | Email address and the email’s content (verification or password reset link) | Depends on the provider’s location; may be outside Türkiye |
| Sentry (Functional Software, Inc.) | Processing error and crash reports from the API, the website and the macOS app | Error type, stack trace, route, environment, version and internal user ID. Transcripts, AI text, request bodies, cookies, email addresses, screenshots and session replays are never sent | Sentry’s EU data region |
AI and speech recognition providers process the data they receive through their APIs under their own API terms; under OpenAI’s API terms, this data is not used for model training by default.
Error monitoring runs only when we have enabled it; while it is disabled, no reports are sent to Sentry.
Transfers abroad
Because some of the providers above are located abroad, particularly in the USA, your data is transferred outside Türkiye. These transfers are made under Article 9 of Law No. 6698 on the basis of the standard contracts announced by the Turkish Personal Data Protection Authority, one of the appropriate safeguards provided for in the Law. Error reports sent to Sentry are processed in Sentry’s EU data region; this also counts as a transfer outside Türkiye and relies on the same safeguard. For details, see the KVKK privacy notice.
Retention and deletion
Retention period
We keep your data for as long as your account is open. You can permanently delete your meetings and templates from the app at any time; deleted meetings and templates are removed permanently.
When you delete your account, the data linked to it (account information, meetings, transcripts, summaries, templates and payment records) is kept for 90 days and permanently deleted at the end of that period.
Deleting your account
You can delete your account yourself at any time. Sign in on the website and confirm with your password in the “Delete account” section of your account page. In the macOS app, Settings → Account → “Delete Account…” takes you to that section. When you delete your account:
- Your account is closed, your open sessions (including the Mac app) end, and the account can no longer be signed in to.
- Your active subscription is canceled immediately with our payment provider Polar, without waiting for the end of the billing period; no refund is given for the remaining time. Your remaining minutes and AI allowance also expire.
- Your customer record at Polar is anonymized and deleted. As merchant of record, Polar may keep the order records it issued, without your email address, to meet its own obligations.
- The data linked to your account is kept for 90 days and then permanently deleted.
If your subscription cannot be canceled at that moment (for example, if the payment provider cannot be reached), your account is not deleted and you are asked to try again a little later. If you need help deleting your account, write to gizlilik@koldash.app.
Security measures
We take reasonable technical and organizational measures to protect your data: TLS encryption in transit, hashed password storage, keeping the session key in your Mac’s Keychain, and limiting access to data to authorized persons. No system is entirely without risk; in the event of a breach, we meet our legal notification obligations.
Cookies and local storage
This website uses no analytics, tracking or advertising cookies, which is why we do not show a cookie banner. The site only keeps your theme preference (system, light or dark) in your browser’s local storage (localStorage, the mc-theme key). This stays on your device, is never sent to the server, and can be deleted at any time in your browser settings.
Children
Koldash is not designed for people under 18. If we learn that an account belongs to someone under 18, we delete the account and the related data. Please let us know if you become aware of such a case.
Your rights
Under Article 11 of Law No. 6698, you have rights such as learning whether your data is processed, requesting information, and requesting correction or deletion, as well as the right to object. The full list of your rights and how to exercise them is in the KVKK privacy notice.
Changes
We may update this policy as the product or the law changes. The current version is always published on this page, and the “Last updated” date at the top of the page changes. We try to announce significant changes in an appropriate way.
Contact
For questions about privacy and personal data, write to gizlilik@koldash.app; for general support, write to destek@koldash.app.