Fluently

GDPR overview

The privacy policy of 22 July 2026 carries a dedicated 'GDPR notice for residents in the EEA or UK'; the terms date from 25 June 2026. Four legal bases are invoked: consent, performance of the contract, legitimate interest and legal obligation. The rights listed are access, rectification, erasure, portability, restriction, objection including to profiling, objection to direct marketing, withdrawal of consent, and complaint to a supervisory authority. Transfers outside the EEA and UK, including between group entities, rely on the European Commission's standard contractual clauses; the destinations named, the United States and the Cayman Islands, are stated as carrying no adequacy decision. Rights are exercised through the in-app chat at app.getfluently.app/support or by phone on +1 (628) 200-4207, with support@getfluently.app reserved for CCPA requests. Two gaps: no Article 27 EU representative is designated and no data protection officer is named.

Who owns the data?

Fluently Inc. is the controller. The terms of service of 25 June 2026 have you grant Fluently a worldwide, royalty-free, perpetual, irrevocable, sub-licensable and transferable licence over your recordings, transcripts and related data, covering use, reproduction, storage, modification and derivative works. Fluently separately claims copyright over the material inside its services. The privacy policy of 22 July 2026 goes further: once data is de-identified it stops being personal information, and Fluently may use, retain, license or sell it for any business purpose. Fluently states it does not sell identifying personal information, and account settings allow opting out of aggregated data sharing. Card details are not stored by Fluently.

Reuse rights

Fluently collects sign-up details (name, email, phone, identifiers, IP address), professional data (company, job title, role, team), calendar metadata, billing data, audio and video recordings, technical and usage data, and data drawn from connected third-party tools. It uses them to deliver the service, provide support, analyse and improve the product, run marketing and advertising, and meet legal obligations. Recordings, transcripts and related data also feed model development: Fluently trains its own self-hosted speech-recognition, accent and pronunciation models on them, alongside models supplied by third-party AI services. Two exceptions are stated. Google Calendar data is never used to train any model, under Google's Limited Use rules, and Fluently says it does not retain the audio or video of other participants in a recorded meeting. Human access to recordings is restricted to named cases: a breach of the terms, a support request, a legal obligation, or the protection of rights. Advertising relies on third-party vendors including Google, and Google Analytics measures audience. Model-training and data-sharing preferences can be changed by the user in account settings.

Data retention & training

Hosting summary

Fluently operates from the United States, and the privacy policy of 22 July 2026 states that personal data may be transferred to, and accessed on, servers in the United States. Two transfer destinations are named, the United States and the Cayman Islands, and the policy states that neither benefits from a European Commission adequacy decision. Transfers outside the EEA and the UK, including between entities of the same group, are framed by the Commission's standard contractual clauses. No European hosting country is offered and no choice of hosting region exists. On security, Fluently declares physical, electronic and procedural safeguards and says it regularly runs security reviews, vulnerability scans and penetration tests. The Google Play Data safety card states that data is encrypted in transit and that deletion can be requested. What is left unsaid matters as much: no sub-processor is named beyond Google, for its APIs and Analytics, no sub-processor list is published, and no security certification such as SOC 2 or ISO 27001 is claimed.