Privacy Policy
Effective date: September 5, 2026 · Last updated: September 1, 2026
BAOKYN, INC. (“BAOKYN,” “we,” “us”) operates baokyn.com and the BAOKYN application. This policy explains what we collect, what we do with it, who else touches it, and what you can do about it.
We have tried to write this so it is true rather than so it is reassuring. Where something might sound better than it is, we say the less flattering version.
1. Who we are
BAOKYN, INC. 2800 E. Enterprise Ave, STE 333, Appleton, WI 54913, United States
Privacy contact: privacy@baokyn.com
For users in the EU, UK, or other jurisdictions with data protection laws, BAOKYN, INC. is the data controller for personal information processed through the service.
2. Age requirements
You must be at least 16 years old to create a BAOKYN account. This applies to every plan, including the free plan.
We ask for your date of birth when you sign up, and we keep it. We use it for three things: to check that you meet the minimum age; to know whether you are a minor, because accounts for 16 and 17 year olds require a parent or guardian to approve them before they become fully active; and to move your account to adult status automatically on your eighteenth birthday, without asking you again.
We could store less, but not without losing the guardian protection or asking you to re-enter your age later. We would rather explain the trade than pretend it isn’t one.
If you are under 16, we do not create an account. To keep that check meaningful, we record a limited technical fingerprint of the device that attempted it, so the same browser cannot immediately retry with a different date.
If you are 16 or 17, a parent or guardian must approve your account. For any paid plan they must also provide the payment method and agree to our Terms of Service — in most places a minor cannot enter a binding subscription agreement alone.
Sign-in with Google is not currently available. When we enable it, it will include the same age check.
3. What we collect
Account information
Your email address, and a password managed by our authentication provider. We never see your password in readable form. Your date of birth, and whether your account is an adult account or a minor account awaiting guardian approval. Section 2 explains why.
Content you create
Documents, drafts, notes, journal entries, and anything you write in BAOKYN’s builders and editors.
Files you upload
Audio, video, images, and PDFs, along with anything derived from them — transcripts, translations, generated documents, and your questions and answers about a file.
Usage records needed to run the service
Which plan you are on, transcription minutes and storage used, and access and audit events used for security and to power version history.
Payment information
Handled entirely by Stripe. We receive a customer reference and subscription status. We never receive or store your card number.
Technical information
Standard web request data — IP address, browser type, timestamps — processed by our hosting provider in the course of serving the site.
What we do not collect
We run no advertising, no behavioral tracking, no analytics service, no session replay, and no third-party marketing pixels. There is no advertising identifier and nothing is sold.
4. What we do with it
We use your information to provide the service you asked for: storing your work, transcribing your media, running the writing tools, processing payments, sending account email, and keeping the service secure.
We do not sell your personal information. We do not share it with advertisers. We do not use your content for behavioral profiling.
Your content and AI models
Your content is not used to train AI models by default. Settings include an option to allow your content to help improve models. It is off unless you turn it on, and no such program is running today. If that changes, we will say so before it does.
Some BAOKYN features send your content to an AI provider in order to answer you — for example, generating a document from a transcript, or answering a question about a file. That is processing your request, not training. We select providers that contractually agree not to train on content submitted through their API.
Some writing tools never leave your browser at all. Proofread, Copyedit, and Brand Check are mechanical — pattern matching, edit distance, and string comparison running on your device. They make no AI call and send your text nowhere. The spell checker downloads a dictionary file from BAOKYN, which is a download to you, not an upload from you.
5. Who else processes your data (sub-processors)
BAOKYN is a web application. Running it means other companies necessarily handle some of your data. We cannot honestly claim your work never leaves BAOKYN. What we can say is that each of these processes it only to deliver the service, and none of them receive it for their own purposes.
| Provider | What they handle | Where |
|---|---|---|
| Supabase | Database, authentication, and file storage. Your documents and uploaded files live here. Supabase Auth also sends account email, including password resets and sign-in links. | United States (Oregon) |
| Vercel | Application hosting. Processes request data and server logs as our infrastructure host. | United States |
| Anthropic | AI features. Receives the prompt and the specific content needed to answer — for example, selected transcript segments or the text of a document you are working on. | United States |
| AssemblyAI | Transcription. Receives a time-limited private link to the audio or video you choose to transcribe, which they retrieve the file through. | United States |
| Stripe | Payments and subscription billing. Card details are entered on Stripe’s own pages. | United States |
| Resend | Delivery of account email such as guardian-approval requests and onboarding messages. Handles your email address. | United States |
If you are in the EU or UK, note that these transfers are to the United States. We rely on the providers’ own transfer mechanisms, including Standard Contractual Clauses where applicable.
We will update this list before adding a new sub-processor.
6. Cookies and browser storage
We use no advertising or analytics cookies. Everything below is necessary or a preference you set.
| Name | Purpose | Lifetime |
|---|---|---|
| Supabase authentication session | Keeps you signed in. Strictly necessary. | Session-based |
| appLanguage | Remembers the interface language you chose. | Persistent |
| viewAsPlan | Lets an account owner preview the app as a different plan. Administrative only. | 8 hours |
| baokyn_share_ok_… | Records that a visitor entered the correct password for a password-protected share link. Strictly necessary for that access. Set even for visitors without an account. | 30 minutes |
Stored on your device only
These never leave your browser and are not transmitted to us:
- Theme choice (light or dark)
- Reading preferences such as font size
- Which library sections you have collapsed
- Whether you have dismissed the backup reminder
- Focus Writer autosave — draft text you are writing is saved locally so you do not lose it
- Your personal dictionary — words you added to the spell checker
Two consequences worth knowing: your Focus Writer draft and your personal dictionary live on that device, so clearing your browser data will remove them, and they do not follow you to another computer. A copied media edit is also held for the length of your browser session.
7. Security, stated plainly
In transit: all traffic is encrypted with TLS.
At rest: your data is stored on infrastructure with provider-managed disk encryption.
What this is not. BAOKYN is not zero-knowledge and not end-to-end encrypted. Encryption keys are managed by our infrastructure providers, not held only by you. Our systems can read your content in order to process it. Anyone claiming otherwise about a service of this kind is usually overstating.
Access controls. Uploaded files, transcripts, generated documents, and file conversations are private to the person who uploaded them. Even inside a shared organization, other members cannot read, edit, or delete them. Notes, journal entries, and personal documents are visible only to you.
Public share links. If you create one, anyone with the link can view what you shared. Password protection is available. Please treat share links as public.
No web application can prevent someone from screenshotting or copying what they can see. We pair watermarking and access logging with these controls rather than promising something we cannot deliver.
8. How long we keep things
Deletion works two ways, depending on what you delete. We would rather show both than average them into one sentence that is wrong for half of what you do.
| Data | Retention |
|---|---|
| Account and content | Until you delete it or close your account |
| Deleted drafts (documents, notes, letters, scripts — anything written in BAOKYN’s builders) | Moved to Trash and kept there until you delete them permanently. Nothing automatic, no timer. Delete forever removes the draft and its version history. |
| Deleted uploads and projects (audio, video, files, and anything derived from them) | Recoverable for a grace period, then permanently removed — including the underlying files — after at least 14 days, run by a daily process. |
| Closed accounts | Content and files permanently removed after the same grace period |
| Billing records | Retained as long as tax and accounting law requires, typically seven years |
| Security and audit events | Retained for security investigation and to power version history |
| Blocked sign-up attempts | The device fingerprint from a failed age check is kept only long enough to make the check meaningful |
Backups held by our infrastructure providers may persist briefly after deletion, on those providers’ own cycles.
9. Your rights
Wherever you live, you can:
- See what we hold. Most of it is visible in the app.
- Correct it. Edit your content and account details directly.
- Delete it. Delete individual items or close your account entirely.
- Export it. Request a copy of your content.
- Opt out of AI training. It is off by default; you can confirm this in Settings.
If you are in the EU or UK, you also have the right to restrict or object to processing, to data portability, and to complain to your national supervisory authority. Our lawful bases are performing our contract with you, our legitimate interest in operating and securing the service, and your consent where we ask for it.
If you are in California, you have the right to know, delete, correct, and to opt out of sale or sharing — we do neither. We will not discriminate against you for exercising these rights.
To exercise any of these, email privacy@baokyn.com. We aim to respond within 30 days.
10. If something goes wrong
If a breach affects your personal information, we will notify you and the relevant regulators as the law requires.
11. Changes
We will post any change here and update the date at the top. For a change that materially affects your rights, we will notify you before it takes effect.
12. Contact
BAOKYN, INC. 2800 E. Enterprise Ave, STE 333, Appleton, WI 54913
Our Terms of Service govern your use of BAOKYN.