Chuyi Voice: Privacy & Data Disclosure

Scope

This page applies only to the separate Chuyi Voice Chrome extension. It does not cover the text translation extension or replace its /privacy policy.

Purpose and user choice

The purpose of the voice feature is to transcribe and translate one received WhatsApp Web voice message selected by the user after a separate explanation. No microphone permission is requested. A received voice message remains personal communication.

The extension locally locates received voice controls to show a button; this lookup does not read message text or upload audio. The first click shows a notice. Cancel does not play, read or upload audio, or save that choice. Confirmation stores the notice version and time locally and requests voice capability information. If capability and independent paid entitlement are not confirmed, audio is not played, read or uploaded and email or a verification code is not sent.

Data flow

After an independent paid voice entitlement is verified, a user-selected note plays muted through WhatsApp controls. WhatsApp may mark it as played.

The voice feature processes data as follows: audio is sent over HTTPS to the voice API at translate.chuyi.ai; audio is processed only in request memory (base64) and sent to Cloudflare Workers AI model @cf/openai/whisper-large-v3-turbo (task fixed to transcribe). After transcription, the server reuses the existing text-translation channel and sends only the transcript text over HTTPS to Anthropic for translation; transcript and translation are returned to the client in the same HTTP response. Transcript and translation stay only in that request’s memory and that response; they are not written to the database.

Direction summary: audio client → translate.chuyi.ai voice API → Cloudflare Workers AI Whisper; transcript text → Anthropic (text-translation channel) → translation; transcript and translation → client (that response only). Metering metadata goes to ledgers (below) without audio, transcript or translation body.

Processing regions and retention rules are governed by the respective policies of Cloudflare and Anthropic: Cloudflare Workers AI data-usage docs at developers.cloudflare.com/workers-ai/platform/data-usage; Anthropic commercial API retention at privacy.claude.com and API retention docs.

Data disclosure: local storage and transmission

Notice acknowledgement (version and time), target language and installation id are stored in extension local storage. Audio, transcripts and translations are not written to extension storage. A session token, email and user id are stored locally after the separate verification interface succeeds; the token is used on voice-product routes. Clearing extension data or uninstalling removes this local data, not necessarily server records.

Backend: login codes store only a salted hash, are valid for 10 minutes, and are deleted on successful verification; sessions store only a hash of the token, default to 180-day expiry, and are deleted on sign-out or account deletion; installation ids are removed with the session or account deletion; rate-limit keys are salted hashes (no raw email or IP) and windows older than about 2 days are cleaned. Outbound calls (checkout, email, translation) use HTTPS; the extension’s host permission is https://translate.chuyi.ai/*. The server stores only a hash of the session token; Creem webhooks are checked with creem-signature (HMAC-SHA256).

Login data stored locally by the extension is cleared when you sign out or uninstall the extension.

Providers and payment data

Speech-to-text provider: Cloudflare Workers AI, model @cf/openai/whisper-large-v3-turbo. Purpose: transcription. Data received: audio in request memory. The call is synchronous AI.run, with no AI Gateway, and audio is not written to R2/KV.

Translation provider: Anthropic (reusing the live text-translation channel). Data received: transcript text over HTTPS. The translation is returned only in that response. Transcript and translation are not written to the database.

The extension does not collect card details. Payment is handled through website checkout and Creem; ledgers do not store card numbers or webhook secrets. Minute grants follow Creem product-id mapping and related events.

Voice subscription billing rules: after a refund, remaining minutes are reclaimed and voice is disabled; on failed charge, voice is suspended and restored after payment succeeds; multiple subscriptions may be purchased at once, with minutes stacked.

Payments are processed by Creem, which handles payment data under its privacy policy.

Server logs, caches, ledgers and retention

Server side: audio only in request memory; transcript and translation are not written to the database; voice responses use Cache-Control: no-store. The Worker has no separate KV, R2, Cache API or AI Gateway cache layer for voice content.

App metering logs allow fields including evt, opId, state, seconds, bytes, costMicro, container, providerState; they do not include email, transcript body or translation. Translation-failure logs record event and HTTP status; usage logs record counts/characters/tokens/cost only, not body text.

Runtime logs are retained by Cloudflare under its policies.

Account deletion: in the three voice-related tables (including voice_sec_ops, voice_paid_grants, voice_paid_blocks), email is replaced with an anonymous marker and unbound from the user. Payment-audit fields are kept: subscription id, product id, tier, minutes, period, event id, status, refunded time; seconds and cost are also kept. Automatic timed cleanup is not implemented yet.

The retention period for those ledger and audit fields is determined by us based on our financial and legal obligations.

This policy does not promise that servers or providers never store data.

Purpose limits, operator and contact

Voice data is not used for advertising and is not sold.

Operator: 初译 chuyi.ai. Privacy contact: [email protected]. To request access to, correction of, or deletion of your data, email that address. You can also withdraw your consent by emailing [email protected].