Home

Privacy Policy

Last updated 5 July 2026

Cereal is a live, two-person voice translator for iPhone. This policy explains what personal data we collect when you use the Cereal app and this website, why we collect it, and the rights you have over it.

Cereal is operated by Lettermark Partners Limited (“Cereal”, “we”, “us”), a company registered in England and Wales with company number 13709140 and registered office at 29 D’Arblay Street, London, W1F 8EP. We are the data controller responsible for your personal data and we are registered with the Information Commissioner’s Office (ICO).

The short version

Your conversations are private. When you use Cereal, your device connects directly to our translation provider to turn speech into translated speech. That audio does not pass through Cereal’s own servers, and we do not record, store, or keep a copy of your conversations or their transcripts. What we do handle is the small amount of information needed to give you access, run your subscription, and keep the service secure.

What we collect

  • Account and access data. An identifier for your app installation and your App Store purchase and subscription status, so we can grant you access and manage your plan.
  • Usage metering. The number of minutes of translation you use, together with timestamps and coarse technical logs. We need this to meter usage for billing, manage cost, and prevent abuse.
  • Diagnostic data. Basic, non-content error and performance information that helps us find and fix problems. This does not include the content of your conversations.
  • Support enquiries. If you email us, we keep your message and contact details so we can reply and help.

What we do not collect

We do not receive, listen to, record, or store the audio of your conversations or their transcripts. Because translation happens directly between your device and our translation provider, that content never reaches our servers. This website does not use advertising or tracking cookies and does not profile visitors.

Who we share data with

We rely on a small number of trusted providers who process data on our behalf or as independent controllers:

  • OpenAI provides the speech translation. Your audio is sent directly from your device to OpenAI to be translated. OpenAI processes this data under its API terms, does not use API data to train its models by default, and retains it only for a limited period for abuse monitoring. See the OpenAI Privacy Policy.
  • Apple distributes the app and handles all payments and subscriptions through the App Store. We receive confirmation of your purchase and entitlement, not your payment card details. See the Apple Privacy Policy.
  • Supabase hosts the backend that issues your access credentials and stores usage metering, as our processor.
  • Legal and safety. We may disclose information where we are legally required to, or to protect the rights, property, or safety of Cereal, our users, or others.

Legal bases

Under the UK GDPR we process your data on the following bases: performance of a contract, to provide the app and your subscription; legitimate interests, to secure, meter, and improve the service and prevent abuse; legal obligation, to meet accounting and tax duties; and consent, where the law requires it, which you can withdraw at any time.

International transfers

Some of our providers, including OpenAI and Apple, process data outside the United Kingdom and the European Economic Area, including in the United States. Where that happens, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.

How long we keep it

We keep account and entitlement data for as long as your account is active and as needed to meet legal and accounting obligations. Usage and diagnostic logs are kept for a limited period and then deleted or aggregated. Support emails are kept for as long as needed to handle your enquiry.

Your rights

You have the right to access, correct, delete, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent. To exercise any of these, email [email protected]. You can also complain to the ICO at ico.org.uk if you are unhappy with how we have handled your data.

Children

Cereal is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, please contact us so we can remove it.

Security

We use reasonable technical and organisational measures to protect your data. No method of transmission or storage is completely secure, but the design of Cereal keeps your conversation content off our systems entirely.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the date at the top of this page.

Contact us

Email [email protected], or write to Lettermark Partners Limited, 29 D’Arblay Street, London, W1F 8EP.