Effective date: October 10, 2026 · Last updated: October 10, 2026

These Terms of Service ("Terms") are a binding agreement between you and Suma Labs Inc., a Delaware corporation ("Suma", "we", "us"), governing your use of the Suma mobile applications for iOS and Android, our websites at sumalabs.ai, and related services (together, the "Services"). By creating an account or using the Services, you agree to these Terms and acknowledge our Privacy Policy. If you do not agree, do not use the Services.

IMPORTANT NOTICE FOR US USERS: SECTION 9 CONTAINS A BINDING ARBITRATION AGREEMENT AND CLASS ACTION WAIVER. IT REQUIRES MOST DISPUTES TO BE RESOLVED THROUGH INDIVIDUAL ARBITRATION, NOT IN COURT OR AS PART OF A CLASS. YOU MAY OPT OUT WITHIN 30 DAYS AS DESCRIBED IN SECTION 9.

1. Eligibility and accounts

• Age. You must be at least 13 years old, or the minimum age required in your country to consent to the processing of your personal information, whichever is higher. If you are under 18 (or the age of majority where you live), you may use the Services only with the permission of a parent or legal guardian, who agrees to these Terms on your behalf and is responsible for your use.
• Your account. You must provide accurate information and keep your sign-in method secure. You are responsible for all activity under your account. Tell us promptly at support@sumalabs.ai if you believe your account has been accessed without permission.
• One person per account. Accounts are for individual use and may not be shared or transferred.
• Legal compliance. You may not use the Services if you are barred from doing so under applicable law, including US export control and sanctions laws.

2. Subscriptions, trials and billing

• Free and paid features. Some features are free. Others require a paid subscription ("Suma Pro"). We may change which features are free or paid, and usage limits may apply to any plan.
• Purchases through app stores. Subscriptions bought in the app are sold and billed by Apple (App Store) or Google (Google Play) and are subject to their terms. We do not receive or store your payment card details.
• Automatic renewal. Subscriptions renew automatically at the end of each period (for example, weekly or yearly) at the then-current price, unless you cancel at least 24 hours before the current period ends. Your app store account is charged within 24 hours before renewal.
• Free trials. If your plan includes a free trial, it converts to a paid subscription when the trial ends unless you cancel at least 24 hours before it ends. Trial eligibility is limited to one per person.
• Cancellation. Cancel anytime in your Apple ID or Google Play subscription settings. Cancellation takes effect at the end of the current billing period. Deleting the app or your Suma account does not cancel your subscription.
• Refunds. Except where required by law, payments are non-refundable and we do not provide refunds or credits for partial periods. Refund requests are handled by Apple or Google under their policies. Nothing in these Terms limits any statutory rights you have as a consumer.
• Price changes. We may change subscription prices. Apple or Google will notify you in advance as their rules require, and where required you will be asked to agree before a price increase applies.
• After your subscription ends. You keep access to your account and content, but Suma Pro features stop until you subscribe again.

3. Your Content

"Your Content" means the recordings, files, text and other material you record, import or submit, and the transcripts, summaries, chat responses, Audio Overviews and other outputs generated for you.

• You own Your Content. As between you and Suma, you keep all rights you have in Your Content. To the extent permitted by law, we assign to you any rights we may have in outputs generated for you.
• License to us. You grant Suma a worldwide, non-exclusive, royalty-free license to host, store, copy, process, transmit, display and format Your Content solely to provide, maintain and secure the Services for you, including by sending it to our service providers as described in our Privacy Policy. This license ends when you delete Your Content or your account, except for residual backup copies kept for the limited period stated in the Privacy Policy.
• No training. We do not use Your Content to train or fine-tune AI models, and we do not permit our AI providers to do so.
• Your responsibility for recordings. You are solely responsible for Your Content and for how you collect it. Before recording, uploading or processing any conversation or material involving other people, you must give any required notice and obtain any consent required by applicable law, including laws that require the consent of all parties to a conversation. You must not record anyone in a way that violates their rights or the law.
• Rights you need. You represent that you have all rights, permissions and consents needed to submit Your Content and to let us process it under these Terms, and that doing so does not violate any law or anyone's rights.
• Sensitive information. The Services are not designed for regulated data. Do not submit protected health information, payment card data, government identifiers or similar sensitive information. Suma is not a HIPAA business associate and does not sign business associate agreements.
• Keep your own copies. We work to protect Your Content, but the Services are not a backup service. You are responsible for keeping copies of anything important. Deleted content cannot be recovered after the periods described in the Privacy Policy.

4. AI features and outputs

Suma uses artificial intelligence, including third-party models, to transcribe, label speakers, summarize, answer questions and generate audio.

• Outputs may be wrong. AI outputs can be inaccurate, incomplete, misattributed to the wrong speaker, or out of context, and may not reflect the original content. You are responsible for reviewing outputs before relying on or sharing them.
• Not professional advice. Outputs are not medical, legal, financial, tax or other professional advice and must not be used as a substitute for it. Do not rely on the Services for emergencies or for decisions with legal or similarly significant effects on anyone.
• Speaker labels. Speaker names may be added by you or suggested by AI based on what is said. They can be wrong, and you should check them before relying on who said what.
• Synthetic voices. Audio Overviews use AI-generated voices. They are not recordings of real people, and you must not present them as the voice of a real person.
• Similar outputs. AI may generate the same or similar outputs for other users. Our assignment of rights in outputs to you does not extend to outputs generated for others.
• Feature changes. We may change, replace or discontinue AI models and features, including the third-party providers we use, at any time.

5. Acceptable use, sharing and copyright

Acceptable use

You must not use the Services to:

1. record, monitor or intercept anyone without the notice or consent required by law, or for unlawful surveillance, stalking or harassment;
2. violate anyone's privacy, publicity, intellectual property or other rights;
3. create, store or share content that sexually exploits minors, promotes violence or terrorism, or is otherwise illegal;
4. generate content intended to deceive, impersonate a real person, or commit fraud;
5. reverse engineer, decompile, scrape, or attempt to extract source code, models or data from the Services, except where the law expressly allows;
6. interfere with or disrupt the Services, bypass usage limits or security measures, or access them through automated means we have not authorized;
7. use the Services or their outputs to develop a competing product or to train AI models;
8. resell, sublicense or provide the Services to others without our written permission; or
9. violate the usage policies of the AI providers that power the Services, which we may enforce on their behalf.

Sharing

You control what you share. When you share a note, recording, transcript or summary (for example, through your device's share sheet or, when available, a link), anyone with access may view, copy or forward it. You are responsible for what you share and with whom, and we are not responsible for how recipients use it.

Copyright complaints

We respect intellectual property rights and respond to notices that comply with the US Digital Millennium Copyright Act. If you believe content made available through the Services infringes your copyright, send a notice to our designated agent at support@sumalabs.ai (subject "DMCA Notice") or by mail to Suma Labs Inc., Attn: Copyright Agent, 8 The Green, Ste A, Dover, DE 19901, USA. Your notice must include:

1. your physical or electronic signature;
2. identification of the copyrighted work;
3. identification of the material you claim is infringing and where it is located;
4. your contact information;
5. a statement that you have a good-faith belief the use is not authorized; and
6. a statement, under penalty of perjury, that the information is accurate and that you are the owner or authorized to act for the owner.

We may remove content and, in appropriate circumstances, terminate the accounts of repeat infringers.

6. Our rights, third parties and termination

• License to use the app. Subject to these Terms, we grant you a personal, limited, non-exclusive, non-transferable, revocable license to install and use the Suma app on devices you own or control, for your own use.
• Our property. The Services, including the software, design, models we build, branding and the "Suma" name, belong to Suma and its licensors. These Terms do not give you any rights in them except the license above.
• Feedback. If you send us ideas or suggestions, we may use them without restriction or compensation to you.
• Third-party services. The Services rely on third parties such as Apple, Google and AI and cloud providers, and may link to third-party sites. We are not responsible for third-party services, and your use of them may be subject to their own terms.
• Changes to the Services. We may add, change, limit or remove features at any time. For material changes that reduce a paid feature, we will try to give you reasonable notice.
• Termination by you. You can stop using the Services and delete your account at any time in Settings.
• Suspension or termination by us. We may suspend or terminate your access, with or without notice, if you breach these Terms, if required by law, if your use creates risk or legal exposure for Suma or others, or if we discontinue the Services. Where reasonable, we will tell you why and give you a chance to export Your Content, unless prohibited by law or necessary to prevent harm.
• Survival. Sections 3 (license ends as stated), 5, 6 (Our property, Feedback), 7, 8, 9 and 11 survive termination.

7. Disclaimers and limitation of liability

Disclaimers

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SERVICES AND ALL OUTPUTS ARE PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT AND ACCURACY. WE DO NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED, ERROR-FREE OR SECURE, THAT CONTENT WILL NOT BE LOST, OR THAT ANY OUTPUT WILL BE ACCURATE, COMPLETE OR RELIABLE.

Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW:

1. SUMA AND ITS AFFILIATES, OFFICERS, EMPLOYEES, AGENTS, SUPPLIERS AND LICENSORS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA, GOODWILL OR CONTENT, EVEN IF ADVISED OF THEIR POSSIBILITY; AND
2. OUR TOTAL LIABILITY FOR ALL CLAIMS RELATING TO THE SERVICES OR THESE TERMS WILL NOT EXCEED THE GREATER OF (A) THE AMOUNT YOU PAID FOR THE SERVICES IN THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM, OR (B) US$100.

These limits apply to any theory of liability and even if a remedy fails of its essential purpose. Some jurisdictions do not allow certain exclusions or limits, so some of the above may not apply to you.

Consumers in the EEA, UK and other countries with mandatory consumer protections: nothing in these Terms limits our liability for death or personal injury caused by our negligence, for fraud, for gross negligence or willful misconduct, or for any other liability that cannot be limited by law, and you keep all statutory rights that cannot be waived.

8. Indemnification

To the extent permitted by law, you will defend, indemnify and hold harmless Suma and its affiliates, officers, employees and agents from any claims, damages, losses and expenses (including reasonable attorneys' fees) arising from: (a) Your Content, including any claim that you recorded or processed someone's communications or personal information without required notice or consent; (b) your use of the Services or outputs; or (c) your breach of these Terms or of law. We may take control of the defense of any such claim at our expense, and you will not settle it without our written consent.

9. Dispute resolution and governing law

9.1 Who this applies to. Sections 9.2 to 9.8 apply if you live in the United States. If you live elsewhere, section 9.9 applies instead.

9.2 Try to resolve it first. Before starting arbitration or a court case, you and Suma agree to try to resolve any dispute informally for at least 60 days. Send a written notice to support@sumalabs.ai with the subject "Notice of Dispute", describing your claim, the relief you want, and the email linked to your account. We will send any notice to the email linked to your account.

9.3 Binding individual arbitration. If the dispute is not resolved informally, any dispute, claim or controversy arising out of or relating to these Terms or the Services will be resolved by final and binding arbitration on an individual basis, administered by the American Arbitration Association ("AAA") under its Consumer Arbitration Rules. The Federal Arbitration Act governs this section. The arbitration will be held by video or phone, or in the US county where you live if an in-person hearing is required. Payment of arbitration fees will be governed by the AAA's rules. The arbitrator may award the same individual relief a court could, but only to you and only to the extent needed for your individual claim.

9.4 Exceptions. Either party may (a) bring an individual claim in small claims court if it qualifies, and (b) seek injunctive relief in court to stop infringement or misuse of intellectual property.

9.5 Class action and jury trial waiver. YOU AND SUMA MAY BRING CLAIMS AGAINST EACH OTHER ONLY IN AN INDIVIDUAL CAPACITY, AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY CLASS, COLLECTIVE, CONSOLIDATED OR REPRESENTATIVE PROCEEDING. YOU AND SUMA WAIVE ANY RIGHT TO A JURY TRIAL. If this waiver is found unenforceable for a particular claim or request for relief, that claim or request will be decided by a court, not an arbitrator, after any individual arbitrable claims are resolved, and the rest of this section still applies.

9.6 Mass arbitration. If 25 or more similar demands are filed by or with the help of the same law firm or coordinated group, the AAA's Mass Arbitration Supplementary Rules will apply, the demands will be administered in batches, and the statute of limitations for unfiled demands will be paused while earlier batches proceed.

9.7 30-day right to opt out. You may opt out of this arbitration agreement by emailing support@sumalabs.ai with the subject "Arbitration Opt-Out" within 30 days after you first accept these Terms. Include your name, the email linked to your account, and a clear statement that you want to opt out. Opting out does not affect any other part of these Terms. If you opt out, section 9.8 still applies.

9.8 Governing law and courts (US). These Terms are governed by the laws of the State of Delaware, without regard to its conflict-of-law rules, except that the Federal Arbitration Act governs section 9. Any claim not subject to arbitration will be brought exclusively in the state or federal courts located in Delaware, and you and Suma consent to their jurisdiction. To the extent permitted by law, any claim must be brought within one year after it arises.

9.9 Users outside the United States. These Terms are governed by the laws of the State of Delaware, but if you are a consumer, you also keep the protection of any mandatory provisions of the law of the country where you live, and you may bring claims in the courts of that country.

9.10 Changes to this section. If we change this section, the change will not apply to any dispute you have already notified us about, and you may reject the change by emailing us within 30 days of it taking effect.

10. App store terms

Apple App Store

If you downloaded the app from the Apple App Store, the following also applies:

1. These Terms are between you and Suma only, not Apple. Suma, not Apple, is solely responsible for the app and its content.
2. Your license to use the app is limited to Apple-branded products you own or control, as permitted by the Usage Rules in the Apple Media Services Terms and Conditions, except that the app may also be accessed by other accounts associated with you through Family Sharing or volume purchasing.
3. Apple has no obligation to provide maintenance or support for the app.
4. If the app fails to conform to any applicable warranty, you may notify Apple, and Apple will refund the purchase price, if any. To the maximum extent permitted by law, Apple has no other warranty obligation for the app.
5. Suma, not Apple, is responsible for addressing any claims by you or a third party relating to the app or your possession or use of it, including product liability claims, claims that the app fails to meet legal or regulatory requirements, and claims under consumer protection, privacy or similar laws.
6. If a third party claims that the app or your use of it infringes their intellectual property rights, Suma, not Apple, is responsible for investigating, defending, settling and discharging that claim.
7. You represent that you are not located in a country subject to a US Government embargo or designated as a "terrorist supporting" country, and that you are not on any US Government list of prohibited or restricted parties.
8. You must comply with applicable third-party terms when using the app.
9. Apple and its subsidiaries are third-party beneficiaries of these Terms and, once you accept them, Apple may enforce them against you as a third-party beneficiary.

Google Play

If you downloaded the app from Google Play, your use is also subject to the Google Play Terms of Service. These Terms are between you and Suma only, and Google is not responsible for the app or its content. If these Terms conflict with the Google Play Terms of Service regarding your use of the app, the Google Play terms control to the extent of the conflict.

11. General

• Changes to these Terms. We may update these Terms. We will post the new version with a new "Last updated" date and, for material changes, notify you in the app or by email at least 7 days before they take effect, unless the change is required by law or addresses a new feature. If you continue using the Services after changes take effect, you accept them. If you do not agree, stop using the Services and delete your account.
• Entire agreement. These Terms, the Privacy Policy and any terms you accept for specific features are the entire agreement between you and Suma about the Services.
• Assignment. You may not transfer these Terms without our consent. We may transfer them in connection with a merger, acquisition, reorganization or sale of assets.
• Severability and waiver. If any provision is found unenforceable, it will be limited to the minimum extent necessary and the rest will remain in effect. Our failure to enforce a provision is not a waiver.
• Force majeure. We are not liable for delays or failures caused by events beyond our reasonable control, including outages of third-party providers.
• No agency. These Terms do not create any partnership, employment or agency relationship.
• Language. If these Terms are translated, the English version controls in case of conflict.
• Notices. We may send notices to the email linked to your account or in the app. Legal notices to us must be sent to support@sumalabs.ai and by mail to the address below.

12. Contact

Suma Labs Inc. · 8 The Green, Ste A, Dover, DE 19901, USA · support@sumalabs.ai

Effective date: October 10, 2026 · Last updated: October 10, 2026

This Privacy Policy explains how Suma Labs Inc. ("Suma", "we", "us") collects, uses, shares and protects personal information when you use the Suma mobile applications for iOS and Android, our websites at sumalabs.ai, and related services (together, the "Services"). It forms part of our Terms of Service.

Suma Labs Inc. is a Delaware corporation located at 8 The Green, Ste A, Dover, DE 19901, USA. For personal information about you as a Suma account holder, Suma is the data controller. You can contact us at support@sumalabs.ai.

Our commitments at a glance

• We do not train AI models on your content. Your recordings, transcripts, notes and chat messages are not used to train our models or our AI providers' models.
• Your content is used to deliver Suma to you. We process it only to provide features you request, such as transcription, summaries, AI chat and Audio Overviews.
• Your content never goes to advertising or analytics tools. Advertising, measurement and analytics partners receive app events (such as an install, a trial start or a purchase), never your recordings, transcripts or notes.
• We do not create voiceprints. Speaker labels separate voices within a single recording. We never build or store voice-based identifiers or recognize people by their voice.
• We do not sell your content. See section 4 for how advertising partners are used and how to opt out.
• You stay in control. You can delete individual notes or your entire account from Settings at any time.

1. Information we collect

We collect information you give us, information created when you use Suma, and limited information from partners.

We do not collect payment card details. Purchases are processed by Apple or Google under their own privacy policies.

Microphone access. Suma records audio only when you start a recording, and only with the microphone permission you grant on your device. You can revoke it in your device settings at any time.

Sensitive information. Suma is a general-purpose note-taking service. Please do not use it to record or store health information, financial account numbers, government identifiers or other sensitive information unless you are comfortable with it being processed as described in this policy. Suma is not designed to comply with HIPAA or similar sector-specific laws.

2. How we use information

We use personal information for the purposes below. If you are in the EEA, UK or Switzerland, the right column shows our legal basis.

How AI processing works

When you use an AI feature, the relevant parts of Your Content are sent to third-party AI service providers that perform transcription, language-model, and text-to-speech processing for us. For example, when you ask a question in AI chat, the note you are asking about, including its transcript, is sent as context so the model can answer.

• No account identifiers. We do not send your name, email address or account ID along with AI requests. Your Content may still contain personal information you or others included in it.
• No training. We do not use Your Content to train or fine-tune AI models, and our agreements and settings with AI providers do not permit them to train their models on it. AI providers may keep requests for a limited period solely to provide the service and detect abuse.
• Your permission. Before Your Content is first sent to AI providers, the app asks for your permission. AI features cannot work without it.
• AI output can be wrong. Transcripts, speaker labels, summaries, chat answers and Audio Overviews are generated automatically and may be inaccurate or incomplete. Audio Overviews use AI-generated synthetic voices, not recordings of real people.

No automated decisions. We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.

Aggregated data. We may create aggregated or de-identified statistics (for example, how many notes are created per day) that cannot reasonably identify you, and use them for any lawful purpose. These never include the substance of Your Content.

3. Recordings and other people's information

Suma is a tool you control. You decide what to record, import, keep and share, and we process that content on your behalf and only to provide the Services to you.

• Your responsibility for consent. Recording laws differ by place, and some require the consent of everyone being recorded. You are responsible for telling people and getting any consent required before you record them or upload content about them. The app reminds you of this when you start a recording.
• Our role. For personal information about other people contained in Your Content, we act as your service provider (a "processor" under GDPR) and process it only on your instructions as set out in this policy and our Terms.
• Speaker labels. Transcripts may separate speakers within a recording (for example, "Speaker 1"). Names may be added by you or suggested by AI from what is said in the recording. These labels are text only. We do not create, store or use voiceprints or any other biometric identifier, and we do not recognize individuals across recordings.
• Requests from other people. If someone who appears in your content contacts us, we may refer them to you, as you control that content, unless the law requires us to act directly.
• Sharing your notes. When you share a note, recording, transcript or summary (for example, through your device's share sheet or, when available, a link), you choose what to share and with whom. Anyone with access to shared content can view it and may copy or forward it. We are not responsible for how recipients use content you share.

4. How we share information

We share personal information only with the recipients below. Our current infrastructure and AI service providers are listed at sumalabs.ai/subprocessors.

Our service providers may use personal information only to provide services to us, under contracts that require them to protect it.

Advertising and your choices

Suma does not show ads in the app. We advertise Suma on other platforms and share limited app events with the partners above to see which campaigns work. We do not sell Your Content and do not receive money for personal information. However, some US state laws treat this kind of advertising measurement as "selling" or "sharing" personal information, or as "targeted advertising". You can opt out at any time:

• By email: write to support@sumalabs.ai with the subject "Do Not Sell or Share", and we will stop sharing your information with advertising and measurement partners.
• On iOS: we access your advertising identifier only if you allow tracking in the App Tracking Transparency prompt. You can change this in iOS Settings → Privacy & Security → Tracking.
• On Android: you can delete or reset your Advertising ID in your device settings.
• In the EEA, UK and Switzerland: advertising measurement runs only if you consent in the app's privacy choices, and you can withdraw consent at any time.
• Browser signals: on our websites we honor the Global Privacy Control signal as an opt-out request.

5. Retention and deletion

We keep personal information only as long as needed for the purposes in this policy.

How to delete. Delete a note from the note's menu. Delete your account in Settings → Account → Delete Account, even if you are not subscribed. You can also request deletion on the web at sumalabs.ai/delete-account or by emailing support@sumalabs.ai, including if you no longer have the app installed.

Subscriptions are separate. Deleting your account does not cancel a subscription purchased through Apple or Google. Cancel it in your App Store or Google Play subscription settings to avoid further charges.

6. Your rights and choices

Depending on where you live, you may have the right to:

• access and receive a copy of your personal information, including in a portable format;
• correct inaccurate information;
• delete your information;
• object to or restrict certain processing, including processing based on legitimate interests;
• withdraw consent at any time, without affecting earlier processing;
• opt out of the "sale" or "sharing" of personal information and of targeted advertising (see section 4).

Many of these you can do yourself in the app. Otherwise, email support@sumalabs.ai with the subject "Privacy Request". We will verify your request using information linked to your account and respond within the time required by law (generally 30 days in the EEA/UK and 45 days in the US). We will not discriminate against you for exercising your rights.

EEA, UK and Switzerland

You may lodge a complaint with your local data protection authority. You can contact us about any privacy matter at support@sumalabs.ai.

United States

This section applies to residents of California and other US states with comprehensive privacy laws.

• Categories collected in the last 12 months: identifiers, commercial information (subscriptions), internet or electronic network activity, audio and electronic information (Your Content), and inferences limited to aggregate product analytics. Sources and purposes are described in sections 1 and 2.
• Disclosed for business purposes to service providers: all categories above, as described in section 4.
• "Sold" or "shared" for advertising measurement: identifiers and internet or electronic network activity, to the advertising and measurement partners in section 4. We do not knowingly sell or share the personal information of consumers under 16.
• Sensitive personal information: we do not use or disclose it to infer characteristics about you or for purposes that would require offering a right to limit.
• Authorized agents and appeals: an authorized agent may submit a request on your behalf with proof of authorization. If we deny your request, you may appeal by replying to our decision; if the appeal is denied, you may contact your state Attorney General.

Canada and Australia

You may access and correct your personal information and complain to us at support@sumalabs.ai. If you are not satisfied, you may contact the Office of the Privacy Commissioner of Canada or the Office of the Australian Information Commissioner.

7. Children

Suma is not directed to children under 13, and you must be at least 13 years old, or the minimum age required in your country to consent to data processing (up to 16 in some EEA countries), to use it. If you are under 18, you may use Suma only with the permission of a parent or guardian. If we learn that we have collected personal information from a child below these ages without required consent, we will delete it. Parents can contact us at support@sumalabs.ai.

8. Security

We protect personal information with measures such as encryption in transit and at rest, access controls limited to personnel who need access, and monitoring. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please keep your sign-in credentials and device secure. If a breach affects your personal information, we will notify you and authorities as required by law.

9. International transfers

We are based in the United States and store data in the United States (Google Cloud region us-central1). Our service providers and team members may process information in other countries. When we transfer personal information from the EEA, UK or Switzerland to countries without an adequacy decision, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, or rely on recipients' certification under the EU-US Data Privacy Framework.

10. Changes to this policy

We may update this policy from time to time. We will post the new version with a new "Last updated" date and, for material changes, notify you in the app or by email before they take effect. If this policy is translated, the English version controls in case of conflict.

11. Contact us

Suma Labs Inc. · 8 The Green, Ste A, Dover, DE 19901, USA · support@sumalabs.ai

Your notes are yours. Here is how Suma protects what you record and write.

Our commitments

• No training on your content. We never use your recordings, transcripts, notes or chats to train AI models, and our AI providers are not permitted to either.
• Your content is used only to serve you. It is processed solely to deliver the features you use.
• No content to advertisers. Advertising and analytics tools receive app events only, never your recordings, transcripts or notes.
• No voiceprints. Speaker labels separate voices within one recording. We never build voice-based identifiers or recognize people by their voice.
• Delete anytime. Delete a note or your whole account in the app at any time. Deleted accounts are permanently erased after 30 days.

How we protect your data

• Encryption: in transit with TLS, and at rest on Google Cloud infrastructure.
• Data location: stored in the United States (Google Cloud, us-central1).
• Access control: access to production data is limited to team members who need it to operate the service.
• Minimal data to AI providers: requests to AI providers do not include your name, email or account ID.
• Trusted providers: see our subprocessor list.

Recording responsibly

Recording laws differ by place, and some require everyone's consent. Let people know before you record them, and pause or delete recordings when a conversation turns sensitive.

Compliance status

Report a security issue

Found a vulnerability? Email support@sumalabs.ai with the subject "Security". Please give us reasonable time to fix it before disclosing it publicly. We will not take legal action against good-faith research that avoids privacy violations and service disruption.

Read the full Privacy Policy and Terms of Service.

Last updated: October 10, 2026

Suma Labs Inc. uses the service providers below to host, process and deliver the Suma Services. Each one processes personal information only on our instructions and under a written agreement that requires it to protect that information. None of them may use your content to train AI models.

Infrastructure

AI providers

Analytics, advertising and measurement partners are described in section 4 of our Privacy Policy. They never receive Your Content.

We update this page before a new subprocessor starts processing personal information. Questions: support@sumalabs.ai.