Privacy Policy

Last updated: May 6, 2026

1. Overview

Takus ("we", "us", "the app") is a client-side web application that captures knowledge from screen recordings, documents, and meetings directly in your browser. We do not operate any backend servers that process or store your data. All recording, processing, and storage happens entirely within your browser or your own cloud storage account.

2. Data We Collect

We collect no personal data. Takus runs entirely in your browser. Specifically:

• No analytics or tracking — We do not use Google Analytics, Facebook Pixel, or any tracking scripts.
• No cookies — We do not set any cookies.
• No server-side storage — There is no backend server. All data stays in your browser's IndexedDB.
• No user accounts — We do not create or manage user accounts.

3. Your Recordings

Screen recordings are captured using your browser's built-in MediaRecorder API and stored temporarily in your browser's memory. They are never transmitted to any server operated by Takus.

If you choose to upload a recording, it is sent directly from your browser to your own cloud storage account (Google Drive or Microsoft OneDrive) using the respective provider's APIs. Takus never has access to your cloud credentials — authentication is handled entirely by the provider's OAuth 2.0 / OpenID Connect flow.

4. Google API Usage

When you connect Google Drive, Takus requests access to the following scopes:

• drive.file — Create and manage files that Takus creates in your Drive.
• drive.appdata — Store app configuration in a hidden app folder in your Drive.
• documents — Create Google Docs for meeting transcription reports.
• calendar — Read your calendar to match recordings with meeting events.

Takus's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Your Google access token is stored only in browser memory and is never persisted to disk or transmitted to any third party.

5. Microsoft Graph API Usage

When you connect Microsoft OneDrive, Takus uses the Microsoft Authentication Library (MSAL.js, loaded from alcdn.msauth.net) and requests the following Microsoft Graph scopes:

• User.Read — Read your basic profile (display name, email) for the connected-account UI.
• Files.ReadWrite — Upload recordings and store app configuration in your OneDrive.
• Calendars.ReadWrite — Read Outlook calendar events to match recordings, and append the recording link to the matching event's description.
• Notes.Create, Notes.ReadWrite — Create OneNote pages for meeting transcripts.

Microsoft access tokens are stored in your browser's sessionStorage via MSAL and are cleared when you disconnect or close the tab. Tokens are never sent to any server other than Microsoft's.

6. AI Providers (Optional)

If you provide an AI API key in Settings, Takus sends data directly from your browser to the AI provider's servers for transcription and summarization. Takus supports two providers:

OpenAI (GPT-4o-mini + Whisper):

• Audio — extracted from your recording and sent to OpenAI's Whisper API for speech-to-text.
• Full transcript — sent to OpenAI's Chat Completions API (model gpt-4o-mini) to generate the summary, action items, and sentiment analysis. This includes all spoken content of the recording, which may be sensitive.

Google Gemini (Gemini 2.0 Flash):

• Audio — extracted from your recording and sent to the Gemini API for transcription and summarization in a single request.
• Embeddings — transcript chunks are sent to the Gemini Embedding API (text-embedding-004) for semantic search indexing.

Takus does not relay or store this data. Retention and use on the provider's side are governed by their respective data usage policies: OpenAI API data usage policies and Google AI Terms of Service.

Your API key is stored in your browser's IndexedDB and is never sent to any server other than the selected AI provider.

7. Local Storage

Takus uses your browser's IndexedDB to store:

• Recording and document history (metadata — title, date, duration, file size, cloud link)
• Application settings (video quality, audio quality, keyboard shortcuts, watermark text)
• AI transcription and summarization results, if you’ve configured an OpenAI or Gemini API key
• Goals, tasks, and people detected from your recordings (stored as graph nodes)
• Preference signals used to adapt AI suggestions to your patterns
• Crash-recovery snapshots — temporary chunks of an in-progress recording, kept up to 24 hours so you can recover from a tab crash

This data never leaves your browser. You can clear it at any time through your browser's developer tools or by clearing site data.

8. Third-Party Services

Takus loads the following external resources at runtime:

• Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — The Inter typeface.
• Google Identity Services (accounts.google.com) — OAuth authentication.
• Google API Client (apis.google.com) — Drive, Calendar, and Docs API access.
• Microsoft Authentication Library (alcdn.msauth.net) — OAuth + token refresh for Microsoft sign-in. Loaded only if you connect a Microsoft account.
• Microsoft Graph (graph.microsoft.com) — OneDrive uploads, Outlook calendar, OneNote.
• FFmpeg.wasm (unpkg.com) — Client-side video processing (runs in your browser).
• OpenAI API (api.openai.com) — Optional, used only when you select OpenAI and provide an API key.
• Google Gemini API (generativelanguage.googleapis.com) — Optional, used only when you select Gemini and provide an API key.

Each of these services has its own privacy policy. We encourage you to review them.

9. Children's Privacy

Takus is not directed at children under 13. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected on this page with an updated "Last updated" date.

11. Contact

If you have questions about this Privacy Policy, please open an issue on our GitHub repository.

---