Continuum
Privacy policy
Effective date: 14 October 2026
Who we are
Continuum is operated by Nebula Innova Ltd, based in Leeds, United Kingdom. We are the controller responsible for the personal information described in this notice. This notice covers the Android and iOS app and its supporting services. For privacy questions or requests, email hello@nebulainnova.co.uk.
Information we handle
Continuum stores voice recordings, waveform information, drafts, transcripts, summaries, recording identifiers, dates, durations, processing status and the time and notice version of your AI consent on your device. Google sign-in provides a Google account identifier and, where provided, your verified email address. Our backend stores account identifiers and authentication/session records. Signed-in accounts synchronize transcripts, summaries and recording metadata. We also handle information you send in support correspondence. Hosting services process technical request and diagnostic information, which may include IP addresses, request times, response status and error details. We do not use voice recordings for biometric identification.
Local mode and microphone access
Microphone permission lets you record messages. You can decline or revoke it in your device settings, but recording will then be unavailable. In local mode, recordings and associated content stay on this installation and are not uploaded for AI analysis or account synchronization. Local recordings are not automatically imported when you sign in. Audio files and the recording database are excluded from the app’s configured operating-system cloud backup.
Optional AI processing and your consent
Before you submit a recording for AI analysis, we ask for your explicit consent to send its content to Google Gemini, generate a transcript and summary, and store and synchronize the results through Neon. This includes health or other sensitive personal information you choose to include about yourself. You can instead choose “Save without AI”, which saves the audio on this device without submitting it for analysis. Retrying analysis also asks for consent. Only include information about other people if you have the necessary permission, including their explicit consent for sensitive information. You can withdraw consent by deleting the recording or contacting us. Withdrawal does not affect processing already carried out lawfully. Keep sensitive recordings on the device if you do not want them processed in the cloud.
How transcription and synchronization work
Audio submitted for analysis passes through our Google Cloud Run backend to Google Gemini. The backend does not persist uploaded audio or deliberately log audio, prompts or transcript content. Google may retain submitted content for a limited period for service safety, security and legal purposes under its Gemini API terms. For the paid Gemini service used by Continuum, Google states that submitted prompts and responses are not used to improve its products. Transcripts, summaries and recording metadata are stored in Neon through our authenticated backend and synchronized while the app is active. Audio and waveforms remain on the device; another device can retrieve text but cannot play the original recording. AI output may contain errors. We do not use this processing to make decisions with legal or similarly significant effects about you.
Why we use information and our legal bases
We use account information to provide the sign-in and account services you request, relying on performance of our contract with you (Article 6(1)(b) UK GDPR). Optional cloud processing and synchronization of your recording content rely on your consent (Article 6(1)(a)); processing special-category information in that content additionally relies on your explicit consent (Article 9(2)(a)). We use limited security and operational information, and respond to support requests, for our legitimate interests in protecting and maintaining the service and helping its users (Article 6(1)(f)). Where a legal obligation requires processing, we rely on Article 6(1)(c). Microphone permission is a device control, separate from consent to cloud processing. We retain a consent receipt with the recording on that installation until the recording is deleted. You do not have to provide data by law; account information and audio submission are needed for the corresponding cloud features. Local mode remains available.
Who receives information
Google provides sign-in, cloud hosting and Gemini processing. Neon, part of Databricks, provides the database for account/session information and synchronized recording text and metadata, using AWS infrastructure. These providers use authorized subprocessors to deliver their services. Authorized personnel may access information where needed for support, service operation or security. We may disclose information where required by law. We do not sell personal information or use it for advertising. The app does not include a separate advertising, analytics or crash-reporting SDK; infrastructure diagnostics still operate as described above. Google also handles information for its own sign-in and service purposes under its privacy policy.
International processing
Our backend runs in Google Cloud’s US central region, and our Neon database is hosted in AWS’s US East (Ohio) region. Google Gemini and provider support or subprocessors may process information in other countries where they operate. Data therefore leaves the United Kingdom. The applicable provider data-processing terms set out international-transfer safeguards, including standard contractual clauses and their UK adaptations for restricted transfers, or an applicable recognized adequacy mechanism. Contact hello@nebulainnova.co.uk to request information or a copy of the safeguards relevant to your data.
Retention and deletion
You decide how long to keep your recordings and transcripts. We retain synchronized transcripts, summaries and recording metadata until you delete them or request account deletion. Local audio and content remain until you delete them or remove the app’s local data. Removing the app does not delete synchronized account data. Deleting a signed-in recording queues deletion of its synchronized text; this reaches the server when synchronization succeeds. We retain a minimal deletion marker, with identifiers and version metadata but no transcript or summary, while the account exists so an offline device cannot restore deleted content. Signing out does not delete recordings or close your account. Account information remains while the account exists. Refresh credentials expire after 30 days unless renewed, and access credentials after 15 minutes; expiry stops their use but does not itself delete stored session records. Session records are retained for account security and removed with account deletion. Ordinary service logs are kept for no more than 180 days; our current Google Cloud application-log setting is 30 days. Mandatory Google Cloud audit logs have a fixed 400-day retention period. Deleted database information may remain recoverable in backup history for up to 180 days; our current Neon recovery-history setting is six hours. Provider-managed safety, security and legal records are governed by the applicable provider terms. We keep support correspondence while handling your enquiry and for up to 180 days after closure, unless needed longer for an ongoing dispute or a legal obligation.
Security
The app uses HTTPS for backend communication and account-scoped authorization. Session credentials use iOS Keychain or Android Keystore-backed encrypted storage. Local recordings use app-private storage, with native file protection on iOS. Access to synchronized content is checked against the authenticated account. These measures reduce risk, but no storage or transmission system can guarantee absolute security.
Your rights and choices
Depending on the circumstances, you can request access, correction, erasure, restriction and portability of your personal information. You can object to processing based on our legitimate interests. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing. To request account deletion or a data export, email hello@nebulainnova.co.uk from the email associated with your account where possible. We may ask for proportionate information to verify your identity. Requests are handled by our team; there is currently no in-app account-deletion or export tool. Cloud exports cover information we hold, including synchronized text and metadata; original audio exists only on your device. Account deletion removes cloud account information and associated records but cannot remotely erase your device’s local files. Delete those within the app or remove its local data. We normally respond within one month; where the law permits an extension for a complex request, we will explain it. You can complain to the UK Information Commissioner’s Office or the relevant supervisory authority where you live.
Children
Continuum is intended for adults aged 18 and over and is not directed at children. Do not use its cloud AI features if you are under 18. If you believe a child has provided personal information to us, contact hello@nebulainnova.co.uk so we can investigate and arrange appropriate deletion.
Changes to this notice
Effective date: 14 October 2026. We will update this notice when our data practices change and show the updated date here. We will communicate significant changes through the app or another appropriate channel.