Last updated: 1 November 2026.
This policy explains what personal data Tranze collects, why, who it is shared with and what choices you have. Tranze is operated by Ivo Larys, Zadní Mostek 26, 544 75 Mostek, Czech Republic, Company ID (IČ) 75722488 ("we", "us"), who is the controller of your personal data. Contact: hello@tranze.app.
1. The short version
- We collect what we need to create and play your personal trances: your account, your conversations with the AI guide, your intentions, preferences and recordings.
- Your personal trances are private to your account and never published.
- To generate conversations, scripts, voices and covers, we send the necessary parts of your content to AI providers listed below.
- We don't sell your data and we don't use it for advertising.
- We never see your card or bank details. Payments are handled by Paddle on the web and by Apple or Google in the app. We keep only your plan, your trance balance and purchase identifiers.
- You can turn memory off, delete trances, and delete your account yourself in the app.
2. What we collect
Account data. Your email address, the sign-in method you use (email code, Google or Apple) and the email address it shares with us, sign-in times, your role in Tranze and any invitation you received. If you sign in with Apple and choose Hide My Email, we receive an Apple relay address instead of your real email. Tranze doesn't use passwords; an account created before 24 October 2026 may still hold one, stored by our authentication provider in hashed form (we never see it).
Email contact record. When your account is set up, we create a contact for you at our email provider Loops: your email address, your user ID, a label that you are a Tranze app user who signed up in the app, and how many recordings you have made and finished listening to (numbers only). We use it to send you account emails. If you were already on our waiting list, we match you by email address.
News and tips (optional). In the first-run step and later in Account → Privacy you can choose to receive occasional news and tips from Tranze by email. The box is unticked by default and Tranze works the same without it. We store your choice and the time you made it. We send news and tips only to people who opted in, and if you were already subscribed through our waiting list, leaving the box unticked in the app does not unsubscribe you; only switching it off in the app, or the unsubscribe link in a news email, does.
Your content. What you type or dictate to the AI guide, the conversation history, the intention you confirm, your listening choices (length, ending, voice, music), the generated script, cover image and audio recording, and your favorites.
Voice input. If you use dictation, your audio is sent for transcription and turned into text. We use the text in your conversation.
Memory. If memory is on (it is on by default), we keep preferences and boundaries you have confirmed, for example things you'd like the guide to avoid, so future trances fit you better. You can view, edit, reset or turn off memory in Account → Memory.
Personal details you choose to give. How you would like to be referred to (she/her, he/him or neutral wording).
Feedback. Ratings and comments you send about a trance.
Plan and payment data. Your plan (free or Tranze Plus), its status, where you bought it (web, App Store or Google Play), the start and end of the current period, and your balance of personal trances with a history of how it changed (for example monthly trances added, a pack bought, a trance used or returned). From the seller we receive identifiers for the customer, subscription and transaction, and the identifiers of events we have already processed, so that nothing is counted twice. We do not receive or store your card number, bank details or other payment credentials. These are collected by the seller (see section 4). This data doesn't include the content of your conversations.
Listening data. Which recording you played, when, and which parts were played, so we can show where you stopped and understand whether recordings work well. This doesn't include the content of your conversations.
Notifications. If you enable notifications, we store the push subscription for your device to tell you when a recording is ready or couldn't be completed.
Technical data. App version, error and diagnostic information, and records of AI usage (time, operation, model and cost) that don't contain your conversation or audio.
On your device only. Downloads for offline listening, appearance settings and a short queue of listening data waiting to be sent stay in your browser's storage. We can't see them unless they are sent to us.
Sensitive information
Conversations about stress, sleep or how you feel may include information about your health or other sensitive matters. We process this information only to create your trance and keep the service safe, and only because you choose to share it and give your explicit consent under Article 9 of the GDPR. You give this consent separately when you start using Tranze, and you can withdraw it at any time in Account → Privacy. After you withdraw it, you can't start new conversations, but you can still listen to and delete your saved trances. Share only what feels comfortable.
Children. Tranze is for people aged 16 and over. We don't knowingly collect data from children under 16. If we learn that an account belongs to a child under 16, we delete it.
3. Why we use it and our legal basis
| Purpose | Legal basis |
|---|---|
| Creating your account, running conversations, creating and storing your trances, playback, downloads | Performance of our agreement with you (Terms of Use) |
| Processing sensitive information you choose to share in conversations | Your explicit consent, which you can withdraw at any time |
| Memory of your confirmed preferences | Your consent (memory is on by default and you can turn it off at any time) |
| Notifications | Your consent, given in your device settings |
| Account emails, and your contact record at Loops that we send them from | Performance of our agreement with you (Terms of Use) |
| Occasional news and tips emails | Your consent (opt-in), which you can withdraw at any time in Account → Privacy or with the unsubscribe link in any news email |
| Safety limits in conversations and support options | Our legitimate interest in protecting you and other users, and your vital interests where needed |
| Your plan, trance balance, purchases and subscription status | Performance of our agreement with you (Terms of Use) |
| Keeping accounting and tax records of payments | Legal obligation |
| Feedback, listening data and quality review of recordings | Our legitimate interest in making Tranze work well |
| Security, preventing abuse, diagnostics and backups | Our legitimate interest in keeping the service secure and available |
| Meeting legal obligations | Legal obligation |
4. Who can see your data
Our team. A small number of authorized people on the Tranze team may access private trances, conversations and feedback when needed to provide support, investigate a problem, keep the service safe or review quality. Access is limited by role and logged.
Service providers. We use these providers to run Tranze. They process data on our behalf and only for this purpose:
| Provider | What they do | Data involved |
|---|---|---|
| Supabase (data stored in the EU, Ireland) | Accounts, sign-in, database, account emails | Account data, your content, listening data |
| OpenRouter, which routes requests to Anthropic (Claude) and OpenAI | AI guide and script writing (Anthropic); script and audio review, transcription of dictation and recordings, and cover images (OpenAI) | Conversation, intention, script, dictated audio, recordings for transcription, trance title |
| ElevenLabs | Turning the script into voice audio | Script text, chosen voice |
| Google LLC and Apple Inc. (only if you choose to sign in with them) | Sign-in with Google or Apple | The email address and account identifier they share with us (with Apple Hide My Email, a relay address) |
| Loops (Loops Inc.), and Apple iCloud Mail until we move account emails to Loops in late October 2026 | Sending your sign-in codes and other account emails, keeping your email contact record, and sending news and tips if you opted in | Your email address and the content of those emails, for example a sign-in code. For the contact record: your user ID, whether you opted in to news and tips, and the number of recordings you have made and finished listening to. Never your conversations or the content of your trances |
| Paddle (Paddle.com Market Limited and its affiliates), for purchases on the web | Seller of Tranze Plus and trance packs (merchant of record): takes the payment, handles VAT and sales tax, sends receipts, handles refunds and fraud checks | Your email address, our user ID, billing country and the payment details you enter at checkout, which go to Paddle. We receive back identifiers and the status of your purchase |
| Apple Inc. and Google LLC, for purchases in the Tranze app (once the app offers purchases) | Seller of Tranze Plus and trance packs in the app: take the payment and handle refunds | They process your payment under their own terms and privacy policies. We receive purchase identifiers and status through RevenueCat |
| RevenueCat (once the app offers purchases) | Checks purchases made in the app and keeps your subscription status in sync | Your Tranze user ID (a random identifier, not your name or email), purchase and subscription identifiers and status, platform |
| Browser push services (Apple, Google, Mozilla) | Delivering notifications | Push subscription, notification text |
| Cloudflare (Cloudflare, Inc.) | Protecting and delivering the service: connections to Tranze pass through Cloudflare, which filters attacks and abuse. When you sign in or create an account, Cloudflare Turnstile checks that a person, not a bot, is signing in | Your IP address, technical data about your browser and device, and the data you send to and receive from Tranze while it passes through. The connection is encrypted between you and Cloudflare and between Cloudflare and our servers |
| Tailscale | Secure network connection to our servers | Technical connection data |
| Slack (Slack Technologies, LLC, a Salesforce company) | Internal notifications to the Tranze team about what happens in the service: new accounts, feedback, purchases and problems while a trance is being created | A shortened form of your email address (for example iv***@gmail.com), your user ID, the rating and text of feedback you send, the type of purchase event and technical error codes. Never your conversations, scripts, recordings or the titles of your personal trances |
| Our own servers in the European Union (Czech Republic and Germany) | Storing recordings, files and backups | All data above |
Cover images are created from the trance title and a fixed art style only. Your conversation is not sent for cover images.
Paddle, Apple and Google act as the sellers of what you buy. They decide how to handle the payment data they collect and use it under their own privacy policies, which also apply when you buy from them: Paddle's privacy notice. We don't send them your conversations, recordings or listening data.
We don't sell personal data and we don't share it with advertisers.
5. Transfers outside the EU
Your account data and the database are stored in the EU (Supabase, Ireland), and our own servers are in the European Union (Czech Republic and Germany). Some providers process data in the United States:
- OpenRouter (United States) relies on the EU Standard Contractual Clauses. OpenRouter does not use your data to train models, and we have configured it not to route requests to providers that train on request data.
- Anthropic (Claude), used for the conversation and script writing, is reached through OpenRouter only via zero-data-retention endpoints (Amazon Bedrock, Google Vertex and Microsoft Azure), so requests are not kept after they are answered.
- OpenAI (United States), used for script and audio review, transcription of dictation and recordings, and cover images, receives requests through OpenRouter at OpenAI's own API. OpenAI does not train on API data and may keep it for up to 30 days for abuse monitoring.
- ElevenLabs (EU entity ElevenLabs Poland sp. z o.o., data stored in the United States) relies on the EU–US Data Privacy Framework and the Standard Contractual Clauses. We have opted out of ElevenLabs using our data to train its models.
- Google LLC and Apple Inc. (United States), used only if you choose to sign in with them, are both certified under the EU–US Data Privacy Framework. Signing in with them is also covered by their own privacy policies.
- Supabase relies on the Standard Contractual Clauses for any access from outside the EU.
- Loops (United States), which sends account emails and, if you opted in, news and tips, processes only your email address, the content of those emails and the contact details described in section 2, under a data processing agreement and appropriate transfer safeguards. Apple iCloud Mail, used for these emails until the move, is provided by Apple Inc., which is certified under the EU–US Data Privacy Framework.
- Cloudflare (United States, with a global network) is certified under the EU–US Data Privacy Framework and also relies on the Standard Contractual Clauses. It uses the data only to deliver and protect Tranze, not for advertising.
- Paddle (United Kingdom, with affiliates in other countries, including the United States) processes payment data under its own transfer safeguards, which are described in its privacy notice.
- Slack (United States), which delivers our internal team notifications, is certified under the EU–US Data Privacy Framework and processes only the notification data listed above, under its data processing addendum.
- RevenueCat (United States), once we use it, processes only the identifiers and purchase status listed above, under a data processing agreement and appropriate transfer safeguards.
6. How long we keep data
- Account and your content: while your account exists. When you delete a trance, it is removed from your library, together with its listening data.
- When you delete your account: you can do it yourself at any time in Account → Privacy. Deleting is immediate: we remove your account, trances and recordings, conversations, memory, favorites, listening data, plan and trance balance, and notification subscriptions from the service at once, and we ask Loops to delete your contact record, and we can't restore them. Downloads saved in a browser stay on that device until you remove them; the device where you delete your account clears them. If you can't use the app, ask us at hello@tranze.app and we'll delete your account within 30 days.
- Backups: encrypted backups are kept for up to 12 months and then overwritten. Deleted data may remain in backups until then, but we don't restore it into the service.
- AI usage records (without content): 24 months.
- Team notifications in Slack: up to 12 months, then deleted. They are not removed when you delete your account, but they contain only the shortened email address, user ID, feedback and event details described in section 4.
- Plan and payment data: your plan, balance and its history, and the purchase identifiers we hold are kept while your account exists and deleted with it. Paddle, Apple and Google keep their own payment records, such as receipts and tax documents, for as long as the law requires and under their own policies. Deleting your Tranze account doesn't delete those records and doesn't cancel a subscription (see the Terms of Use, section 9).
- Providers: AI providers may keep request data for a limited time under their own policies, for example OpenAI for up to 30 days for abuse monitoring. We use settings that prevent providers from training on requests, and zero-data-retention endpoints for Anthropic.
7. Your rights
You have the right to:
- access your data and get a copy,
- correct data that is wrong,
- delete your data,
- restrict or object to some processing,
- receive your data in a portable format,
- withdraw consent at any time, without affecting processing before you withdrew it.
You can do much of this in the app: delete trances, delete your account, edit or reset memory, change personal details, turn off notifications and turn news and tips emails on or off. For anything else, contact us at hello@tranze.app. We reply within one month.
You can also complain to a data protection authority, in particular in the country where you live. In the Czech Republic, this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.gov.cz).
8. Cookies and local storage
Tranze uses only what is needed for the app to work: a sign-in session cookie and your browser's local storage (for downloads, appearance and similar settings). We don't use advertising or analytics cookies. Cloudflare may set cookies that are strictly necessary for security, for example to tell people from bots, and Cloudflare Turnstile runs a check in your browser when you sign in. If you open the checkout on the web, Paddle's checkout runs on our page and may use cookies or similar technologies that Paddle needs to process the payment and prevent fraud. They come from Paddle, not from us.
9. Security
We use encrypted connections, role-based access, private storage of recordings that checks the owner, and encrypted backups. No system is perfectly secure. If a breach affects you in a way the law requires us to report, we will tell you.
10. Changes
We may update this policy. If a change is significant, we will tell you in the app before it takes effect.
11. Contact
Ivo Larys, Zadní Mostek 26, 544 75 Mostek, Czech Republic
Company ID (IČ): 75722488
Email: hello@tranze.app