Privacy notice

What we hold, and what we never see.

Two separate things are covered here. The Sumsight app runs on your Mac and sends us nothing. This website holds the email address you give us, which is what the rest of this notice is about.

Last updated: 2026-07-30.

Who we are

The controller.

We process personal data under Brazil's LGPD (Lei nº 13.709/2018). Full registered company details on request.

The app

Your recordings stay on your Mac.

Sumsight records, transcribes and summarizes on your own machine. What it produces stays in its own container on your Mac: no account, no cloud copy, and none of it reaches us.

System audio is never written to disk; only the transcript is kept. Transcripts sit in an ordinary local database indexed by Spotlight, protected by your Mac's own security, not by any encryption of ours.

The app sends no analytics and no telemetry. It downloads machine-learning models on demand:

  • Apple's speech assets, 50–200 MB per language.
  • A speaker-labelling model, about 600 MB.
  • A summarization model, about 2.5 GB, from Hugging Face.

Each downloads once, carrying nothing of yours outbound. In-app feedback opens a message in your own email app; send it and we hold what you wrote.

The mailing list

Your email, and the proof you asked for it.

If you join the pre-launch list we store your email address, subscription status, the dates you signed up, confirmed and unsubscribed, the consent wording in force at the time, the IP address and user-agent recorded then, and two tokens that make your links work.

The IP address and user-agent are the proof of consent LGPD Art. 8 §2 requires. We do not geolocate them or profile you, and we collect no names.

Purpose and legal basis

To send you one email.

When Sumsight is released we will send you one message telling you. That is the entire purpose of this list. We do not sell your address or share it.

Our legal basis is your consent: you give it on the form and confirm it by clicking the link we email you — until you click, we do not treat you as subscribed. Giving us your address is entirely voluntary; the only consequence of not giving it is that we cannot tell you when the app is out.

Who else touches your data

Three companies, all named.

  • Resend, Inc. (United States) sends our email. It receives your address, the message and delivery metadata.
  • Railway Corp. (United States) hosts this site and the subscriber database, plus server logs.
  • Google LLC (United States) provides the analytics below, only if you accept. It never receives your email address.

That is the complete list. All three act only on our instructions, under the data processing terms in their agreements.

Transfers

Your address is stored outside Brazil.

All three processors are United States companies, so your address, the consent evidence attached to it and any analytics you accept leave Brazil. We rely on contractual safeguards under LGPD Art. 33, II; write to privacy@sumsight.app for a copy.

Retention

Not longer than the reason we hold it.

  • Unconfirmed signups are deleted 30 days after signup.
  • Confirmed subscribers are kept until the launch email is sent and for up to twelve months after, then deleted.
  • If you unsubscribe, we keep your address on a suppression record so we cannot email you again by accident. Ask us to erase that too and we will.
  • Consent evidence — the wording, IP address and user-agent — is kept for as long as we hold your address.

Your rights

All of them, and how to use them.

Write to privacy@sumsight.app from the address you signed up with. You can ask for a copy of your record, its correction, deletion, anonymisation or portability; ask who we shared it with; and object to direct marketing.

You can withdraw consent at any time, as easily as you gave it: the unsubscribe link works immediately, and so does a message to us. Withdrawal does not affect what was lawful before.

We reply within 15 days. To confirm it is you we send a link to the address on file.

If you live in the EU, EEA or UK, we extend these same rights to you under the GDPR.

Complaints

You can complain to a regulator.

If you think we have mishandled your data we would like the chance to fix it, but you do not need our permission to escalate. In Brazil, complain to the ANPD at www.gov.br/anpd. In the EU, EEA or UK, use your own national authority.

Analytics

This website uses Google Analytics. The app does not.

If you accept, Google Analytics 4 (property G-NBP6METDRF) stores two cookies and tells us how many people visit, which pages they read, roughly where they are and what device they used. That data goes to Google in the United States.

It does not load unless you accept: the tag is injected on acceptance, not merely switched off. Until then no cookie is set and no request goes to Google. Reject and the site behaves identically. Change your mind with Cookie settings, in the footer of every page.

Changes

If this changes, this page changes first.

If we start doing something new with your data we will change this page, and its date, before we do it — not after. If it is significant and you are on the list, we will email you.