Privacy Policy

Last updated October 29, 2026

This policy explains how Simbo Technologies ("Simbo", "we", "us") handles personal information when you use simbotech.com, Simbo Speak for Windows, Mac and Chrome, our other products, our support channels and our careers pages (together, the "Services").

1. What you write

• Spelling and grammar checks run on your device. That text isn't sent to us.
• The reply checklist runs on your device without AI.
• Voice typing (Simbo Speak for Windows and Mac): your speech is turned into text on your device by a speech model stored on your computer. Audio is kept in memory only while you're talking and is deleted as soon as the text is ready. It's never saved to disk, and never sent to Simbo or anyone else. The speech model is downloaded once from Hugging Face's servers, which see your network address like any website you visit; nothing you say is sent with that download.
• Simbo AI features (rewrite suggestions, Polish, How will this land, Decode, voice clean-up and translation): the text you choose to send goes through our servers to our AI provider, Anthropic, to produce the result, which comes straight back to you. We don't store that text or the result. We record only that a request happened, which feature it was, the model and the size of the request, so we can count your monthly allowance.
• Your own AI key: if you connect a Claude, ChatGPT or Grok key, your text goes directly from your device to that provider under its terms. It doesn't pass through Simbo, and your key stays on your device.
• Private mode in Chrome runs on your device using the browser's built-in AI, where available.
• Offline mode stops the apps from sending anything you write to any AI service. On-device features keep working.
• Privacy receipt: the apps keep a list of when text was sent to an AI service (the feature, where it went, its length and its first few words) so you can check it. This list stays on your device, is never uploaded, and you can clear it or turn it off in Settings.

We don't use what you write to train AI models, and we don't let our providers do so.

2. Information we collect

• Account: your email address, name, a securely hashed password, when you agreed to our terms, your language, and whether you chose to receive product news. If you turn on two-step sign-in, a secret for your authenticator app.
• Plans and billing: your plan for each product, how you got it (subscription, promo code, student verification, or from our team), dates, and the customer ID our payment processor gives us. Card details are handled by Stripe and never reach Simbo.
• Student verification: that your email address belongs to a school domain, and when you last confirmed it.
• Usage counts: how many AI requests and rewrite suggestions you've used this month, and when you last used the apps.
• Ratings and reviews: if you rate an app from your account, your stars, any comment, and the name you choose to show. We quote a review on our website only if you tick the box allowing it, and you can change or remove your rating at any time.
• Support: the messages you send us and our replies, plus your name and email if you contact us without an account. To turn ideas and problem reports into a list of improvements, we remove email addresses and phone numbers from those messages and send the rest to our AI provider, Anthropic, which groups similar requests together. Only the grouped summary is kept.
• Free trial checks: so each person and each computer gets one free Pro trial, we keep a scrambled (hashed) fingerprint of the email inbox that started a trial and, in the desktop app, a scrambled fingerprint of the computer. The computer fingerprint is made on your device from an ID your operating system already has, scrambled again on our server, and can't be turned back into the email address or anything about your computer. We use them for nothing else. The Chrome extension doesn't send one.
• Security signals: to stop abuse, we briefly keep a scrambled (hashed) version of your network address and counts of recent attempts, and we use Cloudflare's bot check on forms. We don't store your raw IP address in our database.
• On your device only: app settings, roles, words you add to your dictionary, voice shortcuts, your privacy receipt, how many minutes of voice typing you've used today, and AI keys you connect. If you leave it on, the desktop app also keeps your last 10 dictations for 24 hours so you can recover text if a paste fails; you can turn this off. None of these are uploaded.

3. Job applicants

When you apply for a job, we collect what you give us: name, email, phone, location, links, resume, work authorization and your note. Only the people at Simbo who handle hiring can see it. Resumes are stored privately and opened only through short-lived links. We keep applications for 12 months so we can consider you for future roles, then delete them. You can ask us to delete yours sooner at any time.

4. How we use information

To provide and secure the Services; create and run your account and subscriptions; enforce plan limits; verify student eligibility; answer support requests; consider job applications; prevent fraud, spam and abuse; send service emails (like confirmations, receipts and security notices); send product news if you opted in; and meet legal obligations. We don't sell personal information, share it for targeted advertising, or use it to build advertising profiles.

If you're in the European Economic Area, the UK or Switzerland, our legal bases are: performing our contract with you (running your account and the Services), our legitimate interests (security, preventing abuse, improving the Services), your consent (product news, job applications), and legal obligations.

5. Who we share it with

Only service providers that help us run Simbo, under contracts that limit their use of your data. The current list is on our Subprocessors page:

• Supabase: database, sign-in, file storage and server functions
• Anthropic: processes text for Simbo AI features, and groups support feedback (with emails and phone numbers removed) into a list of improvements
• Stripe: payments, invoices and tax
• Cloudflare: website hosting, network security, bot checks and visit counts
• Resend: sending our emails

We may also disclose information when the law requires it, to protect the rights and safety of our users or others, or as part of a merger or sale of the business (in which case this policy continues to apply to your information).

6. Cookies and similar technology

We don't use advertising or analytics cookies. To see which pages are useful, we count visits with Cloudflare Web Analytics, which uses no cookies and doesn't follow you across sites. Our website stores your sign-in session in your browser's storage so you stay signed in, and the bot check may set what's strictly needed to work. Details are on our Cookies page.

7. How long we keep it

• Account information: while your account is open.
• Accounts that never confirm their email: deleted automatically after 7 days.
• Support conversations: up to 3 years after they close, so we can help with follow-ups.
• Job applications: 12 months.
• Security counts: about 2 days.
• Free trial fingerprints: kept after an account is deleted, because their only job is to stop the same inbox or computer from starting another free trial. They contain no email address, name or hardware ID.
• Billing records: as long as tax and accounting laws require (usually 7 years), kept by Stripe and us.

When you delete your account, we delete your personal information within 30 days, except records we must keep for legal reasons.

8. Your choices and rights

In your account you can update your details, download your data, and delete your account. You can also ask us to access, correct, delete, export or restrict your information, or object to how we use it, by contacting us. We'll respond within 30 days (45 for California requests) and won't treat you differently for asking.

California residents: in the last 12 months we collected the categories above (identifiers, commercial information, internet activity limited to usage counts, and, for applicants, professional information) for the purposes described. We don't sell or share personal information as those terms are defined in the CCPA, and we don't use sensitive personal information beyond what's needed to provide the Services.

EEA, UK and Swiss residents: you can also complain to your local data protection authority. We transfer data to the United States using the safeguards our providers offer, such as Standard Contractual Clauses.

9. Security

Data is encrypted in transit; access to our systems is limited to staff who need it and protected by two-step sign-in; passwords are stored only as secure hashes; and every staff action is logged. See our Security page. No system is perfectly secure, so please use a strong, unique password and turn on two-step sign-in.

10. Children

The Services aren't directed to children under 13 (under 16 in the EEA and UK), and we don't knowingly collect their information. If you believe a child has given us information, contact us and we'll delete it.

11. Changes

If we make material changes, we'll update the date above and let account holders know by email or in the app before they take effect.

12. Contact

Simbo Technologies · privacy questions: privacy@simbotech.com · or use our contact form.