Privacy Policy

Last updated: October 2026

Tamlil ("we", "our", "the service") is a WhatsApp-based voice transcription service. This policy explains what data we collect and how we use it.

Data We Collect

• Phone number - Your WhatsApp phone number, used to identify your account
• Voice messages - Audio you send for transcription (processed and deleted immediately)
• Text you send - Text you ask us to read aloud, used only to generate that audio
• Transaction history - Records of minutes purchased and used
• Payment info - Handled by PayPal; we only receive confirmation of payment, not card details
• Access requests - Tamlil is currently invite-only. If a number that has not been invited messages us or tries to buy minutes, we record that number, whether it came through WhatsApp or our website, how many times it tried, and when

How We Use Your Data

• Transcribe your voice messages, including separating and labelling different speakers
• Read text you send back to you as spoken audio
• Track your minute balance
• Send you transcriptions and service messages via WhatsApp

We do not use your audio, transcripts or text to train any model, and our providers are contracted not to either.

Third-Party Services

We use the following services to operate, and each receives only what it needs:

• Gladia - Transcription and speaker labelling. Your audio is sent to their API and deleted as soon as we receive the transcript. See their privacy notice.
• OpenAI - Text-to-speech only. Text you ask us to read aloud is sent to their API. Your voice messages are not sent to OpenAI. See their privacy policy.
• Twilio - WhatsApp messaging, in both directions
• PayPal - Payment processing
• xhostd - Hosting and database. See their privacy policy.

Where Your Data Is Processed

Our transcription provider processes audio in the EU and, for speaker labelling, may also process it in the United States through its own sub-processors. Such transfers are covered by the European Commission's Standard Contractual Clauses under our data processing agreement with them. Their current sub-processor list is published at trust.gladia.io/subprocessors.

Our hosting provider, xhostd, runs the service and stores its database, which holds phone numbers, transaction history and access requests. It does not publish where its servers are located, and its privacy policy states that some of its own providers process data outside the European Economic Area.

We enable transcription and speaker labelling only. We do not enable translation, summarisation, sentiment analysis or entity extraction, so your data is not passed to the additional providers those features would involve.

Data Retention

• Voice messages - Deleted from our servers as soon as they are transcribed. Our transcription provider's copy of the audio and transcript is deleted as soon as we receive the result, and we confirm that it is gone. In the rare case that our service is interrupted before it can do so, the provider's own retention policy applies to their copy.
• Transcripts - Never stored by us. They are sent to you on WhatsApp and exist only in your chat.
• Generated speech - Audio we create from your text is held briefly so WhatsApp can fetch it, and deleted within an hour.
• Phone number & transactions - Retained while your account is active
• Access requests - Kept so we can see who has asked to use the service, until you ask us to delete them
• Backups - Our hosting provider backs up the database, so deleted records can remain in a backup for a short time before it expires

Your Rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. To delete, contact us and we will remove your account, transaction history and any access requests from your number. Since we do not keep your audio or transcripts, there is nothing further of yours for us to erase.

Contact

Questions? Email us at tamlil@backslasher.net