For researchers and ethics boards

How CaribScribe protects interview data

A plain description you can include in an ethics application or data management plan.

Where data is processed

All transcription, speaker identification, translation and anonymisation runs on the researcher's own computer.
While running, CaribScribe blocks its own outbound internet connections (it can only talk to the same computer). Phones on the same Wi-Fi connect to the computer; nothing is sent onward.
The only outbound connection is the optional, user-started download of AI model files from dl.caribscribe.app. It runs as a separate process, contacts only that host, sends no interview data, and every file is checked against a list signed by the publisher.
Licence keys are checked on the computer. CaribScribe does not contact a licence server.

Encryption

At rest: recordings, transcripts, forms, photos and settings are encrypted with AES-256-GCM. The key is derived from the researcher's passphrase with scrypt and is held only in memory while unlocked.
On phones (field mode): each recording is encrypted on the device with a fresh AES-256-GCM key, which is sealed with the computer's RSA-OAEP 3072-bit public key. The phone cannot decrypt its own recordings; only the computer can.
In transit: phones connect over HTTPS using a certificate authority created on the researcher's computer.
Exports: encrypted ZIP files (AES-256) with neutral file names. Unencrypted exports are off unless enabled in Settings.

Access controls

Passphrase sign-in for every device, automatic sign-out and vault lock after inactivity (2–30 minutes, configurable).
Panic lock clears the screen, signs out every device and wipes the key from memory.
Terms of use that every device must accept, with a log of who accepted.

Consent and anonymisation

Digital consent forms keep a snapshot and SHA-256 fingerprint of the exact wording agreed to. Recording can be blocked until consent is complete; overrides require a reason, which is logged.
Tools for redacting names (text and audio), disguising voices, blurring faces and removing photo location data.

What we (the publisher) receive

No interview data, recordings, transcripts, usage statistics or crash reports. When you buy a licence, we keep your name, email, organisation and purchase details to issue and renew your key. See the privacy policy.

Limitations to be aware of

If the passphrase is lost, the data cannot be recovered. There is no back door.
Security depends on the computer itself: keep it updated, use full-disk encryption (FileVault) and a strong login password.
Transcripts and translations are machine-generated drafts and must be checked by a person.
Phones store sealed recordings until they sync; erase them from the app if a phone may be lost before syncing.

Need a signed statement or a call with your ethics board or IT security team? Email info@caribscribe.app.