This translation is provided for convenience only. The German version is authoritative.

Privacy Policy

Last updated: 25 September 2026 · version 2026-09-25

1. Controller

Ruppen Multimedia GmbH, operating under the brand JRP Applications
Fadenstrasse 20, 6020 Emmenbrücke, Switzerland
info@jrp.app · +41 79 823 92 74

This policy applies to KI-Dolmetscher (a service of Ruppen Multimedia GmbH) at dolmetscher.jrp.app (website, web application, player and streams). We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable (e.g. for users in the EU/EEA), the General Data Protection Regulation (GDPR). We have not appointed a data protection advisor or an EU representative.

2. Roles

We are the controller for account, contract, billing, website and support data. For the content that customers feed into their sessions (audio and video, and the resulting transcripts and translations, briefing and glossary) as well as for the chat and statistics of their sessions, the respective customer is the controller and we are its processor. Listeners should therefore first contact the organiser of a session with any questions about it; we assist the organiser in this.

3. What data we process

Account: email address, password (only as a salted scrypt hash), time of registration and of acceptance of the GTC and Privacy Policy (with version), confirmation of the email address, last login, preferred language, subscription, status and billing period.
Usage: for each session, the start, end and duration of active translation (interpreting minutes), for billing and for enforcing quotas.
Sessions: name, language and voice settings, briefing and glossary (which may contain names and roles of individuals) as well as the secret broadcast link.
Audio and video: the incoming signal passes through our media server and is buffered in memory only for the delay of around 15 seconds. We do not record it.
Transcripts and translations: the last approximately 200 segments per session and a running summary used as context for translation are held in memory only and discarded when the service restarts or the session is deleted.
Chat: freely chosen display name and messages of listeners; the last 200 messages per session are stored on the server until the customer clears the chat or deletes the session. To mark a listener’s own messages, the browser stores a random token and the server only its hash.
Listener statistics: the player stores a random identifier in the browser and reports it together with the selected language while playing. We store only a hash of this identifier per session, created using a secret key, as well as the language, daily figures (for no more than 90 days) and listening time, but no IP addresses and no cookies. The statistics are deleted together with the session or at the customer’s request.
Technical data: when the website is accessed, the IP address, time, requested address (secret broadcast links are masked) and browser information are recorded in our web server logs. They serve secure operation and the prevention of abuse (e.g. limiting login attempts) and are deleted after a short period.
Payments: subscriptions are processed via Stripe. We receive customer, subscription and invoice details from Stripe (e.g. customer ID, subscription status, billing address), but no full card numbers.
Emails: confirmation, password and service emails as well as your enquiries to us.

4. Purposes and legal bases

We process this data to provide, bill and secure the service, to respond to enquiries, to prevent abuse (e.g. claiming free minutes more than once), to comply with legal obligations and to improve the service. Under the FADP, we rely on the performance of the contract and our overriding interests; where the GDPR applies, on Art. 6(1)(b) (contract), (c) (legal obligation) and (f) (legitimate interests: security, fraud prevention, operation). We do not sell personal data and do not use session content for advertising or to train our own AI models.

5. AI processing and recipients abroad

As long as translation is switched off for a session, no audio leaves our server. When it is switched on, we transmit the detected speech segments (audio) to a speech recognition service, the recognised text together with the context (last sentences, summary, briefing, glossary) to a language model, and the translated text to a speech synthesis service. For this purpose we use the following processors and recipients:

netcup GmbH, Karlsruhe, Germany: servers in the Nuremberg data centre, Germany (hosting of the service, the database and the mail server).
OpenRouter, Inc., USA: interface to the AI models; forwards requests to the respective model provider.
OpenAI (USA): speech recognition; Anthropic (USA): translation; Google (USA or data centres worldwide): speech synthesis and fallback models. Which provider processes a request depends on availability and our choice of model.
Stripe Payments Europe, Ltd., Ireland, with Stripe, Inc., USA: payment processing.

Switzerland and the EU recognise the USA as providing adequate protection only for companies certified under the Swiss-U.S. or EU-U.S. Data Privacy Framework respectively. Where a recipient is not certified, we rely on standard contractual clauses or other permissible safeguards, or on the exception for the performance of a contract (Art. 17 FADP, Art. 49 GDPR). The AI providers process the data under their own terms for business customers; according to them, content transmitted via the interface is not used to train their models and is stored only for a limited period, for example for abuse prevention.

6. Cookies and local storage

We use only one technically necessary login cookie (“dm_session”, HttpOnly, 14 days). In the browser, we store locally the selected language, volume and chat settings as well as the random listener identifier. There are no analytics or advertising trackers and no embedded third-party content.

7. Retention and deletion

Account data, sessions and usage data until the account is deleted, which is possible at any time on the “Account” page. Sessions, chat histories and statistics are deleted at the same time.
To grant the free minutes only once, after deletion we retain a hash of the email address created using a secret key, from which the address cannot be recovered.
We or Stripe retain invoices and accounting records for the statutory period of ten years.
Server backups are overwritten when they expire.

8. Security

We take appropriate technical and organisational measures, such as encrypted transmission (TLS), hashed passwords, signed login cookies, secret and renewable broadcast links, unguessable session addresses and limiting login attempts. There is no end-to-end encryption: in order to interpret, our server and the AI providers must process the content. If a data security breach must be reported, we notify the competent authority and, where necessary, the persons concerned.

9. Your rights

You may request access to, rectification, erasure, restriction of processing, surrender or portability of your data and object to processing, to the extent provided for by applicable law. Please contact info@jrp.app. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) and, where the GDPR applies, with a supervisory authority in the EU.

10. Changes

We update this policy when the service or the legal situation changes. The version published on this page at any given time applies; we inform registered customers of material changes by email. The German version prevails.