What we collect, in full.

Your recordings and transcripts never reach us. Nothing in Ratproof sends them anywhere. The rest of this page covers the website and the checkout, in full, including the parts that don't flatter us.

Last updated 2026-10-14.

Who holds your data

Sitananda Prasad Josyula, a sole proprietor trading as Ratproof, in Hyderabad, Telangana, India. For anything on this page, email support@ratproof.app.

Ratproof and Ratproof Pro: nothing from your recordings

• Your audio is never uploaded. Your own browser turns it into text, on your own computer. No copy is sent anywhere, including to us.
• Your recordings and transcripts stay on your device, in your browser's storage. Ratproof keeps them there so you can come back to them. You can turn keeping off, and delete them. We have none of them, and can't recover one if you delete it.
• No account. No sign-up, no email, nothing to log in to.
• No telemetry. No usage stats, no crash reports, no tracking. Not in the browser tool, not in the self-hosted copy, and not in Ratproof Pro.
• About one request a month from Ratproof Pro. Pro fetches a fresh licence key once when you add it, then about once a month on either plan, and daily if a renewal is late. That request carries only the licence key, which includes your email address. It tells the licence server which licence is renewing, and when. Nothing you record, keep or ask is ever sent. It goes through the tool's own address, so Cloudflare sees your IP address, as for any page. The licence server does not. The free tool makes no such request.
• Summaries are written on your computer too, by the AI built into Chrome and Edge. The first time, your browser may download that AI model from Google (Chrome) or Microsoft (Edge). Your recording and transcript are not part of that download.

You can check what this version does. Open your browser's network tab and use the tool. Then go offline and use it again. How it works explains the details.

This website

These pages are static files served by Cloudflare. That means, on every page except the one where you pay (see below):

• No cookies. This site sets none, so there is no cookie banner.
• No analytics and no tracking. No Google Analytics, no ad pixels, no session recording, no fingerprinting.
• No outside fonts. The font is served from this domain, so no font service sees who visits.
• Server logs. Cloudflare serves this site and the tool at app.ratproof.app. It records what any web server records: IP address, time, page, browser and referring page. For the tool, that shows when the app and its model files were loaded (about 235 MB the first time), and which optional models were downloaded, such as the more accurate model, the Swedish model or speaker labels. It cannot see what you transcribe. This is used to serve the site and block attacks. We don't build profiles from it or combine it with anything else.
• Error reports to Cloudflare. Cloudflare asks your browser to report failed requests to this site and to the tool (Network Error Logging). If a request fails, your browser may send Cloudflare a report outside the page: the address that failed, the kind of error, your browser, and your IP address. Successful requests are not reported. Nothing from your recordings is in a report.

Subscribing to Ratproof Pro

Ratproof Pro is sold by Paddle.com Market Ltd (Paddle) as the merchant of record. You subscribe through their systems, not this site.

Paddle collects what a sale needs: your name, email address, payment details, billing country, and a tax ID where one applies. They handle all of it under their own privacy notice. They also calculate and pay the tax, including GST in India, under their own registrations.

Which Get Pro button you pressed. A Get Pro button in the app opens the pricing page with one word saying which button it was: speaker labels, search, adding many files, the notice, or Settings. If you then open the checkout, it passes that word to Paddle with your order. It tells us which part of Pro people buy it for. Nothing else is in it, and it reaches Paddle only when you open the checkout. Like the rest of the address, it is in the server logs above.

We do learn who subscribed. Paddle passes us your name and email address, so we can deliver your subscription and support you. We never receive your card details. Those stay with Paddle. Your licence itself holds the email address Paddle has for you, so the app can show which licence it is.

So there is a customer list. It holds names, email addresses and what was bought. It is used to deliver your subscription, reply when you write, and tell you about security fixes. It is not used for marketing, not enriched, and not sold. It is not shared except with the services named on this page, or where the law requires. It holds nothing about what you record or transcribe. We couldn't hold that even if we wanted to.

Your licence is emailed through Resend, an email delivery service. Resend handles your email address and the licence text, which includes that address, and keeps a record of the message under its privacy policy. Licence emails are the only thing sent through them.

"Email me my licence", in the app's Settings, sends the address you type to our licence server. The server asks Paddle whether that address has an active Pro subscription, and if it does, emails the licence to the address Paddle holds. The address you type is not stored, and the answer is the same either way.

Outside code runs on exactly one page of this site: /buy/, where you pay. No other page loads anything from anyone else. Opening /buy/ loads Paddle's script from their servers. That script at once loads a second one from public.profitwell.com, Paddle's subscription analytics service (ProfitWell, which Paddle owns). Both see your IP address and the address of the page. Paddle uses your IP address to show the right price and tax for where you are. A Cloudflare cookie (__cf_bm) is set on paddle.com, not on this site, to filter out bots. Pressing Subscribe opens their checkout over the page. That checkout also contacts Stripe (which processes the card and runs fraud checks), Sentry (their error reporting), Google's font and file servers, a translation service, and Paddle's own checkout analytics. All of it is theirs, under their privacy notice, and none of it runs until you open that page.

If you email us

We keep the email thread, so a follow-up doesn't start from scratch. That is all it is used for. There is no mailing list. Mail to support@ratproof.app is forwarded by Cloudflare to our inbox, which is held by Google (Gmail). Your address is not shared except with the services named here, or where the law requires.

People we contact about Ratproof

Sometimes we email someone whose work address is published online, such as a library, research office, editor or professional association. We tell them about Ratproof and ask if they would list it, review it or try it. Each email is written and sent by hand, one at a time. There is no mailing list, no tracking pixel and no link tracking.

• What we keep: your name, work email address, job title and organisation, the public page where we found your address, and our emails with you.
• Why: to tell people whose work it fits about Ratproof. Under the GDPR and UK GDPR, our legal basis is legitimate interests.
• Who handles it: Sitananda Prasad Josyula, Resend (which sends the email, in the United States), Cloudflare (which forwards replies to support@ratproof.app, in the United States) and Google, whose Gmail holds our inbox (in the United States).
• How long: if you don't reply, we delete your details after 12 months. If you reply, "If you email us" applies.
• You can object at any time. Reply "stop", or email support@ratproof.app. We stop at once and delete your details. We keep only your email address on a do-not-contact list, so we never write to you again.

Your other rights, including complaining to a data protection authority, are under "Your rights".

Our role and legal basis

Sitananda Prasad Josyula is the controller for the customer list and for email threads: we decide why and how they are used. Paddle is a separate controller for the payment and billing data it collects.

• Contract. Your name and email are used to deliver your subscription and your licence.
• Legitimate interests. Server logs keep the site working and block attacks. Email threads let us answer you and follow up. Emailing people whose work it fits about Ratproof lets us tell them it exists (see People we contact).
• Legal obligation. Tax records for each sale are kept by Paddle, as merchant of record.

How long we keep it

• The customer list: while you are subscribed, then as long as the law needs it for tax and accounting.
• Email threads: while we are helping you, and for as long as a follow-up is likely.
• People we contact: 12 months without a reply. A do-not-contact entry is kept for good.
• Server logs and error reports: for as long as Cloudflare keeps them, under its own retention rules. We don't copy them anywhere else.

When we no longer need something, we delete it. You can ask us to delete it sooner.

Security

Only Sitananda Prasad Josyula has access to the customer list and the inbox. The only other services that handle your data are the ones named on this page. This site and the tool are served only over encrypted connections (HTTPS). Your recordings and transcripts are not ours to protect: no copy of them exists anywhere but your own device.

What we never do

• We never sell or rent personal data. To anyone, for anything.
• We never train AI on your content. The speech model was trained before you ever used it, and it learns nothing from your recordings. Your recordings never reach us anyway.
• We hold no copy of your recordings, so there is nothing to hand over. Not to an advertiser, not to a buyer of this business, not to a court. That comes from how the product is built, not from a promise about how we behave.

Your rights

You can ask what we hold about you, and ask us to correct it, delete it, send you a copy, or stop using it. Email support@ratproof.app and we will reply within 30 days. It's free, and there usually isn't much to send.

These rights apply wherever you live, including under the GDPR in the EU and UK, and the Digital Personal Data Protection Act in India. If you subscribe to Ratproof Pro, your name and email are the main things we hold, and we can send or delete them on request. Payment and billing data sits with Paddle under their notice. Ask them for it. We never had it.

If you think we've handled your data badly, tell us first. Then you can complain to your data protection authority: the Data Protection Board in India, the ICO in the UK, or your national supervisory authority in the EU.

Children

Ratproof is not made for children, and Ratproof Pro is not sold to them. We don't knowingly collect data from anyone under 18.

Changes

If this page changes in a real way, the date at the top changes too. Weakening the first section of this page wouldn't be a small policy edit. It would take a different product, and you can check how this one is built yourself.