Privacy policy

SitePa Voice (Android keyboard, web app and website) · operated by AIBOS · last updated 10 November 2026

This explains what SitePa Voice collects, why, who else handles it, how long it is kept and how to have it removed. We follow Malaysia's Personal Data Protection Act and Singapore's Personal Data Protection Act as they apply to us.

What we collect

• Account: your email address and a password (stored only as a salted one-way hash), when you created the account, your sign-in times and the names of the devices you signed in on.
• Your voice recordings: when you press Record in the keyboard or web app, the audio is sent to our server and on to an AI service to turn it into text and to write the message. Dictation audio is not kept after the message is made.
• Meeting notes: a recording you make with the meeting recorder is sent for transcription, telling voices apart and writing the minutes. The recording is deleted when the minutes are ready (or after at most 48 hours if something failed, so you can retry). The transcript, minutes, speaker names you type, meeting title and place are kept in your account until you delete them or your account.
• Location (optional, Android only): if you tap "Use my current location" or agree when asked before a meeting, the app reads where the phone is once, on the phone, and asks Android's address service to turn it into a place name such as "Tun Razak Exchange, Kuala Lumpur". Only that place name, which you can change, is saved with the meeting. Your coordinates are not sent to our server and are not saved with the meeting. The phone remembers places you have named, with their coordinates, on the phone only, so the same site gets the same name next time. The app never reads your location in the background.
• Feedback: if you send the feedback form, what you write, the optional name and contact you give, the app version and, if you were signed in, your account. We use it only to improve the service and to reply to you. Feedback from an account is deleted with the account.
• Usage: when you dictated or recorded, the length of audio, the cost of processing it, and the minutes left in your plan.
• Plan and payments: whether you have a plan, its status and dates. Card details go straight to our payment provider (Stripe) and never reach us; we keep Stripe's customer and subscription identifiers.
• Security records: rate-limit and abuse records, which use a one-way hash of your network address rather than the address itself, and server logs that may contain network addresses for a short time.

The keyboard does not record what you type in other apps, does not read your chats and has no access to password fields. When you press delete it looks at no more than the last 16 characters before the cursor, only to know how much to remove; nothing it sees is stored or sent.

Why we use it

To run the service you asked for: sign you in, turn speech into text and minutes, count your minutes, take payment, send the confirmation email, keep the service safe from abuse and answer your questions. We do not sell your data and we do not use it for advertising. We do not use your recordings to train our own models.

Who else handles it

• OpenAI (United States): transcribes your audio and writes the text and meeting minutes. Under its API terms it may keep inputs for a limited time for abuse monitoring.
• Fly.io (server in Singapore): hosts the service and its database.
• Stripe: payments and invoices.
• Brevo: sends the confirmation and invitation emails.

This means your audio and text are processed outside Malaysia. We only share what each provider needs for its job.

Recording other people

Meeting notes record everyone who speaks near the phone. Only record people who know and agree. You are responsible for telling the people you record that the audio goes to a cloud AI service.

How long we keep it

Account data and your meetings: until you delete them or your account. Deleting your account removes your sign-ins, usage history, meetings, transcripts and minutes. A few things stay: (1) a one-way hash of your email address with the free minutes used that month, so deleting and signing up again does not restart the free allowance (removed after the month ends); (2) invoices and payment records held by Stripe, which the law requires to be kept; (3) security records with your name removed.

Your choices

• Delete a meeting on its page, or your whole account in the app (Settings → Delete my account) or on this page.
• Ask to see, correct or export what we hold about you by writing to us.
• You can use the keyboard for dictation without recording meetings.

Children

SitePa Voice is for working adults and is not meant for anyone under 18.

Contact

AIBOS · feedback@aibos.my. If we change this policy we will update the date above.