Privacy Policy

Last updated: March 21, 2026

Sotto ("we", "our", "the app") is a real-time speech translation app. This Privacy Policy explains how we handle your information.

Information We Collect

Audio Data

Sotto accesses your device's microphone to capture speech for real-time translation. While a listening session is active, audio is streamed in real time to Soniox, Inc. (United States) for speech recognition and translation. Audio is held in transit only, processed in memory, and discarded immediately after processing — it is not stored on our servers, on Soniox's servers, or on your device.

Account Information

When you create an account, we collect your email address and a securely hashed password. This information is used solely for authentication and account management.

Subscription Data

Payment processing is handled entirely by Stripe. We do not store your credit card number or payment details. We only receive confirmation of your subscription status from Stripe.

Third-Party Services

To deliver real-time translation, Sotto sends audio to Soniox, Inc. (United States), which performs speech recognition and translation. Soniox is contractually required to apply data protection equivalent to ours and is not permitted to retain your audio. Soniox operates under its own privacy policy.

In addition, Stripe handles payment processing on our behalf.

Data Storage

We store only the minimum data necessary to operate the service:

• Account credentials (email and hashed password)
• Subscription status

We do not store any audio recordings, translated text, or session transcripts.

Data Sharing

We do not sell, trade, or share your personal information with third parties, except as required to provide the translation service (as described above) or as required by law.

Data Security

We use industry-standard security measures including encrypted connections (HTTPS/WSS), hashed passwords, and JWT-based authentication to protect your data.

Children's Privacy

Sotto is not intended for children under the age of 13. We do not knowingly collect personal information from children.

Your Rights

You may request to delete your account and all associated data at any time by contacting us, or directly from within the app (see "Account Deletion" below).

Account Deletion

You can permanently delete your Sotto account and all associated data at any time from within the app.

• How to delete: Open Sotto → tap the settings ("...") button → tap the Account cell → tap Delete Account → read the consequences and tap Continue → complete the second-step verification (re-enter your password for email accounts, or re-authorize with Sign in with Apple).
• What gets deleted: your user profile (email, name, password hash, Apple subject), all usage records, subtitle session logs, and identity-group membership. Your active Stripe subscription is canceled immediately (no refund, per Terms of Service) and the Stripe customer record is removed. Your Apple Sign-In refresh token is revoked through Apple's official endpoint.
• What is retained: an anonymous identity-merge audit log and Stripe webhook idempotency event IDs. Neither contains any personally identifiable information.
• Timing: deletion takes effect immediately and is irreversible. Once confirmed, the account cannot be recovered.
• Alternative channel: if you are unable to delete the account from within the app, email us at sotto.app@outlook.com and we will process the deletion on your behalf.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.

Contact Us

If you have questions about this Privacy Policy, please contact us at: sotto.app@outlook.com