Bivio — Service Providers and Subprocessors

Bivio is operated by Eugeniu Cozlenco, an individual based in Prague, Czech Republic. The providers below process personal data to run Bivio, each for the purpose stated and no other. We update this page when providers change; material changes are announced in the app or by email first. Questions: hello@getbivio.app.

Supabase (Supabase, Inc.)

• Purpose: account authentication (email/password, Sign in with Apple, password reset), database storage, and the server functions that power Bivio's features.
• Information processed: account details (email address, display name, timezone); decision records — content stored in client-side-encrypted form, with operating metadata (record status, review dates, Private flag, timestamps) readable; feedback you submit; short-term technical logs.
• Processing location: Supabase hosts projects on major cloud regions; support access may occur from other countries under its data-processing terms.
• Privacy: https://supabase.com/privacy · DPA: https://supabase.com/legal/dpa

OpenAI (OpenAI, L.L.C.)

• Purpose: turning your dictation into the authoritative transcript.
• Information processed: the temporary audio clip of a dictation, sent through Bivio's own server function; no name, email, or account identifier accompanies it. Under OpenAI's current published API policy, audio sent to its transcription endpoint is not retained for abuse monitoring and API content is not used to train its models unless a customer explicitly opts in.
• Processing location: United States.
• Privacy: https://openai.com/policies/privacy-policy · API data controls: https://developers.openai.com/api/docs/guides/your-data

Anthropic (Anthropic, PBC)

• Purpose: Smart Capture (arranging your dictated words into a decision record) and Lens (suggesting one possible thinking pattern for reflection).
• Information processed: for Smart Capture, the final transcript and the names of context signals you track; for Lens, a snapshot of the decision text, expected result, and alternatives. No name, email, or account identifier accompanies the text. Under Anthropic's current published commercial API policy, inputs and outputs are deleted within 30 days and are not used to train its models by default.
• Processing location: United States.
• Privacy: https://www.anthropic.com/legal/privacy · Data retention: https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data
• Note: Bivio's servers can route Smart Capture and Lens to either Anthropic or OpenAI; both providers are listed here for that reason. Voice transcription is served by OpenAI.

PostHog (PostHog, Inc.)

• Purpose: product usage analytics — understanding which parts of the app are used and where it fails.
• Information processed: pseudonymous, installation-scoped usage events (screens, feature usage, coarse duration buckets, app and OS version), identified only by a random per-installation identifier that is not linked to your Bivio account. No decision content, transcripts, names, emails, or account identifiers, and no Session Replay. The project is configured to discard the client IP address rather than store it with events; PostHog may use the IP transiently (for example for bot detection) before discarding it. Events are retained under the project's PostHog Cloud retention settings and reviewed periodically. You can turn analytics off in You → Privacy & Analytics.
• Processing location: selected primary hosting region is PostHog Cloud EU (Frankfurt, Germany); PostHog's own operations and support are governed by its privacy terms and data-processing agreement.
• Privacy: https://posthog.com/privacy · DPA: https://posthog.com/dpa

Resend (Resend, Inc.)

• Purpose: delivering Bivio's transactional email — the welcome email and copies of feedback you submit.
• Information processed: recipient email address and the content of those emails.
• Processing location: United States.
• Privacy: https://resend.com/legal/privacy-policy

Apple (Apple Inc.)

• Purpose: App Store and TestFlight distribution, Sign in with Apple, and the live speech-recognition preview while you dictate (on-device where your device supports it; otherwise Apple's servers may assist under Apple's terms).
• Information processed: per Apple's own privacy policy — Apple acts independently for these services rather than on Bivio's instructions.
• Privacy: https://www.apple.com/legal/privacy/

What no provider receives: your Recovery Key or any encryption material, and the sealed (encrypted) content of your records in readable form. AI providers receive only the specific text or audio of the individual request described above, at the moment that feature runs.