Privacy policy
Version of 27 October 2026
Beta: the company details at the bottom are placeholders until the company is registered.
Varve turns what you say into text. This page says what we keep about you, why, where it is, how long we keep it, and what you can do about it — in plain words.
Who is responsible
Varve is made by the company named at the bottom of this page. We are the data controller for what is described here.
Write to us about your data at the address below. We answer within a month.
What we keep, and why
- Your account: name, e-mail address and how you sign in (a password, stored only as a hash, or a passkey). So you can sign in. Legal basis: our agreement with you (GDPR art. 6(1)(b)).
- What you record: the audio, the text made from it, titles, summaries, tasks and reminders. That is the service. Legal basis: our agreement with you (art. 6(1)(b)).
- What a recording may reveal: what you say can include health, CPR numbers or other sensitive details. We do not look for them or use them; we only keep them for you, because you explicitly agreed to that at first use (GDPR art. 9(2)(a); for CPR numbers the Danish Data Protection Act § 11(2)(2)).
- Your settings: language, time zone and theme, so every device shows the same — and, while you have not chosen a time zone, the one your phone or browser is in, so that “tomorrow at ten” in a recording means ten o’clock where you are. Legal basis: art. 6(1)(b).
- Your consent: which version of the text you accepted, and when, so we can show that you did (art. 7(1)).
- Usage: how much audio you sent and how much the language model worked for you, to keep within your plan's limits. Legal basis: art. 6(1)(b).
- A service you link yourself: if you choose to let Varve fetch your recordings from another service you use, we keep the key you give us, encrypted, and a list of which recordings we fetched, so none comes twice. The recordings are then kept like your own. Legal basis: art. 6(1)(b). Unlinking deletes the key at once.
- Security: sign-in events with IP address and browser, to stop anyone guessing their way into an account. Legal basis: our legitimate interest in keeping accounts safe (art. 6(1)(f)).
- Error reports from the app and the web: only if you turn them on in settings, under Privacy (off until you do). A report holds the app's version, your phone's model and Android version (from the web: the page's address without what you searched for), and where in the code it failed. It holds nothing you said, and no name, e-mail, IP address or ID. Legal basis: your consent (art. 6(1)(a)), which you withdraw by turning it off.
- Error reports from our servers: which part of Varve failed, and where in the code, with nothing you said and no name, e-mail, IP address or cookie. Legal basis: our legitimate interest in a service that works (art. 6(1)(f)).
Where it is
Everything is stored and processed in the EU. During the beta our servers are in Denmark.
Summaries, tasks and reminders are made by a language model at Scaleway in Paris, which works for us as a processor. So are the answers when you ask across your recordings, and the search behind them: each piece of your text is sent to Scaleway to be turned into numbers we can search by meaning. Scaleway does not train models on the text and keeps it only when something goes wrong in operation, for at most two weeks.
Our e-mails (invitations, confirmations, a new password) are sent through Scaleway in France.
Error reports, if you turned them on, are kept on our own server in the EU for 30 days.
When you write to us about your data, your e-mail sits in a mailbox at One.com, a Swedish company, on servers in Copenhagen.
If you link another service to fetch your recordings from, we only ask that service for your recordings, with the key you gave us; where it keeps them is between you and it, and it is not our processor.
Nothing is sent outside the EU and EEA, and we never sell your data or use it for advertising.
How long
- Recordings, text, summaries, tasks and reminders: until you delete them. Nothing is deleted by itself.
- Your account: until you delete it in settings. Then all of the above goes at once, and the copies in our backups are gone within 14 days.
- Usage records are kept for our accounts, without anything that points to you once the account is deleted.
- Sign-in events: up to a year. Error reports: 30 days.
Other people in your recordings
When you record a meeting or a conversation, other people's voices and words are recorded too. Tell them that you are recording. Varve always shows that it is recording and never records in secret.
If someone asks you to delete a recording they are in, you can do it in the app or on the web.
Your rights
- See what we keep about you, and get a copy.
- Have something corrected.
- Have it deleted: a recording or your whole account, straight away in the app or on the web.
- Have the processing restricted, or object to it.
- Take what you recorded with you to another service.
- Withdraw your consent. You can then no longer record; what you have is kept until you delete it.
- Complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).
The app
The app asks for the microphone (to record), notifications (it always shows that it is recording, and a reminder can ring) and alarms (so a reminder rings on the minute). A recording waits on the phone until it is sent and is removed from the phone once our server has it.
Changes
When this text changes in a way that matters, it gets a new version, and the app and the web ask you again before you record.
Questions about your data: privacy@varveapp.com
[Virksomhedsnavn ApS][Vejnavn 1, 0000 By]
CVR [00000000]