Who is responsible
Ciakko, Rimini, Italy, is the data controller for the personal data described on this page. Write to support@ciakko.com for anything about your data.
What stays on your computer
Everything you record. The screen, the webcam, your voice, the system sound, the cursor track, the captions written from your voice, the edits, the exported videos, the project brief and documents, and the instructions you write or dictate for Claude. None of it is sent to us, ever. The captions and the dictation are written by a speech model (Whisper) that runs on your PC, and so is the blurred copy of the webcam track when you ask for it. The app works without an internet connection for recording, editing and export.
What we receive, and why
Your email address. You give it to download the app and to sign in. We use it to send the sign-in code, to attach your trial and your license to you, and to write to you about your purchase (a receipt, a change to the terms, a security notice). We do not send newsletters unless you ask for them.
License and device data. When the app activates the trial or the license it sends a one-way hash of your computer's identifiers (the hash cannot be turned back into the identifiers), the name Windows gives the computer, the Windows version, the app version, and the time. We use them to count the computers on a license and to show you which ones they are. We keep them while the license exists.
Purchase data. Payment is handled by Stripe. We receive the fact that you paid, the amount, the country used for tax, and Stripe's identifiers for the payment. We never see your card number. Stripe's own privacy policy applies to what Stripe holds.
Voice over text. Only when you generate a voice over. The text of the lines you wrote, the voice and the pace you chose, and the words of your pronunciation list go through our server to Microsoft Azure Speech, in its European data centre in Sweden, which turns them into speech. The audio comes back to your PC and is saved only in your project. Our server keeps neither the text nor the audio: for each request it records the voice, the pace, the number of characters and the time, to count the monthly allowance of your license.
Update checks. The app asks our server from time to time whether a newer version exists, sending the version it runs, the environment, whether it was installed from the Microsoft Store, and your license identifier so the answer respects your updates period. Nothing else.
Automatic error reports. When the app meets an unexpected error it sends us a report by itself, so we can fix it. The report holds the error message and its technical trace, the app and Windows versions, the name Windows gives the computer, the location of the app's log file on your PC (which includes your Windows user name), and a description of the hardware: processor, memory, graphics cards and their drivers, screens and their scaling. When the error happens inside an app window, the report also carries the address of that screen, which can include the name of the project and of the take open in it. No video, no audio, no captions, no log file. We keep these reports as long as the server logs.
Support reports. Only when you press the report button in the app. The report contains the description you write, the app and Windows versions, the main graphics card and, if you leave the option on, the log files of the app's last sessions together with the same description of the hardware. Log files describe what the app did, not what you recorded: they contain no video, no audio, no captions. They do contain your email address and the names of files and folders, which include your Windows user name and the titles of your projects. We read reports to fix the problem and delete them once it is solved, at the latest twelve months after they were sent.
Server logs. Like every server, ours records the address a request came from, the time and the page or endpoint requested. We use these logs for security and to keep the service running and rotate them within ninety days.
Claude and the Ciakko connection
Ciakko can be driven by Claude, the assistant made by Anthropic, through Claude's app on your PC (Claude for Windows or Claude Code). You decide whether to connect it. The connection is local: Claude's app talks to Ciakko through a channel that only your Windows user can open, and Ciakko itself sends nothing to Anthropic and nothing to us. What Claude reads through it, such as the details of a take, frames of the video, the transcript, the project brief and documents, reaches Anthropic through your own Claude account, under the terms you accepted with Anthropic.
Other services the app reaches
- Hugging Face. The speech models for captions are downloaded from Hugging Face, once, when you ask for a model. Hugging Face receives the request like any download.
- Google Fonts. The app's windows and the sign-in pages load their fonts from Google Fonts, which receives the address of your connection and the information a browser sends with any request.
- The sites you open in the Ciakko browser. The browser window made for recording websites works like any browser: the sites you visit receive what a browser sends, and their cookies and sign-ins stay in that browser's own folder on your PC. Ciakko does not send what you browse to us. Saved passwords and form autofill are turned off in it.
- Microsoft. If you installed Ciakko from the Microsoft Store, the Store handles the installation and the updates under Microsoft's terms.
What we do not do
- No analytics, no tracking pixels, no advertising networks, on this website or in the app.
- No selling or sharing of your data with anyone for their own purposes.
- No profiling and no automated decisions about you.
- No AI provider receives your screen, your webcam or your voice: the models for captions and for the webcam blur run on your PC. The only text that goes to an AI service is the voice over you choose to generate, sent to Microsoft Azure Speech.
The legal basis, in plain terms
We process your email, your license data, your purchase data and your voice over text because we need them to deliver what you asked for (a contract). We keep server logs, receive error reports and handle support reports because we have a legitimate interest in a working, secure service, and because you asked us to look at the report. Where the law requires it, we keep purchase records for tax purposes.
Who else sees the data
Four kinds of companies help us run the service: Stripe for payments, the provider that hosts our servers, the service that delivers our transactional email, and Microsoft Azure Speech for the voice over. They act on our instructions and see only what their job requires. The current list is on the subprocessors page. Our servers and Azure Speech are in the European Union. Stripe and Purelymail, the service that sends our email, may process data outside the European Union under their own approved safeguards.
How long we keep it
Your account and license data: for as long as the license exists, and we delete them when you ask us to delete the account. The voice over counts: as long as the license exists. Purchase records: for the period Italian tax law requires. Support reports: until solved, at most twelve months. Server logs and error reports: rotated within ninety days.
Your rights
You can ask us what we hold about you, ask for a copy, have it corrected, have it deleted, ask us to limit what we do with it, or object to processing based on our legitimate interest. Write to support@ciakko.com from the email address on your account and we answer within thirty days. Deleting the account ends the license attached to it; we tell you that before doing it. If you think we handled your data badly, you can complain to the Italian data protection authority, the Garante per la protezione dei dati personali, or to the authority of the country where you live.
Security
Connections to our servers are encrypted. The license cache on your PC is encrypted with Windows' own data protection so it cannot be read on another machine, and the sign-in token is kept in the app's own folder under your Windows user. Access to our servers is limited to the people who run them. If a breach ever affects your data, we tell you and the authority without delay.
Children
Ciakko is not aimed at children under sixteen and we do not knowingly keep their data. If a child gave us an email address, write to us and we remove it.
Changes
When this page changes we update the date at the top. If a change affects what we do with your data in a way that matters, we write to the email address on your account before it takes effect.