Rashid beta

Privacy notice

Version 10 · 25 October 2026

Controller: Rashid (rashid.app). Contact: hello@rashid.app

1. Who is responsible, and what this covers

Rashid is a Mac app that listens to your meetings and suggests what to say next. Under Saudi Arabia’s Personal Data Protection Law, Rashid is responsible for the data in this notice (its controller). For anything about privacy, write to hello@rashid.app.

This notice covers the Rashid beta (the Mac app given to invited testers) and this website. The beta has not started yet. What this notice says about the app and the steps we take before the beta (the consent you give, the written risk assessment, the deletion of your data on request) is in place before the first tester is invited. Parts marked when the beta server is live apply once the beta’s server runs; until then, no server of ours keeps anything.

2. What Rashid handles, and where

Rashid takes this from your microphone and your Mac’s call audio while you listen, from what you type or add to a meeting, and from your screen only when you choose.

Sound from your microphone and the call

Streamed while you listen to a speech-to-text provider, which turns it into text; the bar shows it. If the connection drops, Rashid turns it into text on your Mac until it is back.

Kept: Never written to disk.

The transcript: what you and the others say

In memory on your Mac. Parts of it go with each request below.

Kept: Never saved. Cleared from memory once the meeting’s overview is written, or when you quit.

What you ask for: a key press, a typed question, Catch me up, the overview when you stop

The recent conversation text (the whole conversation for an overview; when you are not listening, your latest overview), your question, your notes about yourself and the meeting, the people you listed, and the text of files you added. Files are read on your Mac; the files themselves never leave it. Sent to an AI service provider to write the answer.

Kept: Not by Rashid. The provider keeps it for a limited time (section 3).

A picture of your screen

Only when you choose it: with Ask about my screen, or with every answer once you allow that. One picture of one window or part of the screen, and the text read from it on your Mac, sent with the request.

Kept: Never saved by Rashid. The provider keeps it as any request (section 3).

Web look-ups

When an answer needs a current fact, the AI service provider may search the web for it.

Kept: As for any request (section 3).

Meeting overviews

Written by an AI service provider when a meeting ends, then kept on your Mac only: a title, one sentence and bullet points.

Kept: On your Mac until you delete them. You can turn them off.

Your settings and notes about yourself

On your Mac.

Kept: Until you change or delete them.

Your email, when you join the waitlist on this website, and your name and email when you write to us

Our email. It reaches our email through the website’s host as one message; the website keeps no list.

Kept: Until the beta ends, or until you ask us to delete them.

Your invite pass and a code name (such as T07) when the beta server is live

Our server in the European Union.

Kept: Until the beta ends.

When you agreed on Rashid’s first screen (the version of its words and the date)

On your Mac, and on our server when the beta server is live

Kept: Until the beta ends.

Usage counts when the beta server is live

Our server: one row a day with the number of requests of each kind, minutes of cloud speech and their cost; and for each cloud speech session, when it started and how long it could run.

Kept: Until the beta ends.

Request logs when the beta server is live

Our server’s logs: for each request, the time, your internet address, the result, your code name, the kind of request and which AI service answered it, its size, how long it took, how many words went in and out (as the AI service counts them), the cost (and whether it was counted from the service's own figures) and a request number. Never what was said, asked or answered.

Kept: No more than 30 days.

When the beta server is live, requests to the AI service providers pass through it, and it keeps none of their content. The list of which code name belongs to which tester is kept by us, off the server, until the beta ends. When the beta ends, we delete every pass, code name, usage row and log on the server. Deleting means erasing it for good from the server’s database, its logs and our mailbox, backups included.

3. Who receives it, and where

A few service providers do this work on our behalf, under contract, and only to provide their service to us:

• AI service providers write the answers and the meeting overviews, and may search the web for a current fact. They process requests in the United States and in other countries where they have data centres.
• A speech-to-text provider turns speech into text while you listen, in the United States or the European Union. It keeps neither the sound nor the text.
• A cloud hosting provider runs our server when the beta server is live, in a data centre in the European Union.
• An email service holds the messages you send us and the waitlist messages, in the United States.

The providers that handle your meetings work under written data-protection terms. They use your data only to provide their service to us, keep it secure and meet the law. They keep it for a limited time or not at all, and encrypt it in transit and at rest.

The AI service providers keep requests for a limited time to detect misuse and fix faults: at most 55 days, or longer only for a request flagged for misuse or where the law requires. None of these providers trains its models on your data. A list of our service providers is available on request: hello@rashid.app.

This website’s host sees your internet address when you open a page, and so does the service Rashid downloads its speech models from, once. Nothing about you or your meetings goes with it. This website sets no cookies and runs no analytics. Its waitlist form sends the email address you type and the page’s language to our email, as one message through the host’s mail service, which may keep records of its delivery for a limited time; the website itself stores nothing.

4. Why we use it, and on what basis

• To give you the service you ask for: listening, answers and overviews. The basis is your consent, which you give when you accept your invitation and again on Rashid’s first screen, before it listens to anything.
• To invite you and answer you: your email, or your name and email. The basis is your consent, given when you join the waitlist or write to us. This website’s host sees your internet address only to deliver the page (our legitimate interest).
• To run the beta fairly and safely: usage limits, cost and fixing faults, from the usage counts and logs. The basis is our legitimate interest in running the service. No content is used for this.
• The other people in your meetings: Rashid hears their voices too. The basis is the legitimate interest in helping you in your own meeting, limited to what each request needs: their words are turned into text, held in memory and sent in part with your requests (sections 2 and 3); no audio is saved. It is never used to identify anyone. You tell them (section 5).

We use your data only for these purposes. We do not use it for advertising, we do not sell or rent it, we run no analytics or tracking, and we do not train AI models on it. Rashid makes no decision about you by automated means.

Rashid does not seek sensitive data, such as health or beliefs. If it is said in a meeting, it is handled like any other words, and Rashid’s overviews are instructed to leave it out.

Rashid cannot suggest anything without hearing the conversation, so if you do not want to give it, do not start listening. To use the beta, the conversation, your invite pass and code name, the usage counts and the request logs are required. Notes, files, your screen and overviews are optional. To join the waitlist, your email is enough.

You can withdraw your consent at any time: stop using Rashid and delete it, and ask us to cancel your pass and delete your rows.

5. Telling the people in your meetings

Rashid does not hide itself from screen sharing. Before you use it in a meeting, tell the others that you use it. For example:

“I’m using Rashid, an AI assistant. It transcribes this call to suggest replies to me, and keeps no recording.”

You are responsible for telling them. Do not use Rashid for classified, government or highly regulated information.

If you were in a meeting where Rashid was used: we keep nothing about you on our server, and the person who used it keeps only the meeting’s overview on their Mac. Your rights in section 7 apply to you too.

6. Transfers outside Saudi Arabia

Rashid is used in Saudi Arabia, and the providers in section 3 are outside it: the AI service providers in the United States and other countries where they have data centres, the speech-to-text provider in the United States or the European Union, our email service in the United States, the website’s host, whose network passes on the waitlist message, and our server in the European Union.

The Saudi Data and AI Authority (SDAIA) has not yet published its list of countries with adequate protection. Until it does, we send only what each request needs, keep none of the content on our server, use paid services under their data protection terms, and choose the European Union where a provider offers it. Before the first tester starts, we assess in writing the privacy risks of Rashid and of these transfers, and we review this when SDAIA publishes its list.

7. Your rights

Under the Personal Data Protection Law you may ask to be told how your data is used (this notice), to see it and get a copy, to correct, complete or update it, to have it deleted, and to withdraw your consent.

Write to hello@rashid.app from the address you joined with, or give your code name. We answer within 30 days. If we need longer, we tell you why, once, and take at most 30 more days. When you ask us to delete your data, we cancel your pass and delete your code name’s rows and your email.

What is on your Mac is yours: in Rashid, Settings → Privacy → Delete everything… deletes your overviews, your settings and your saved keys in one step, and you can turn overviews off there. Then delete the app. You can also complain to SDAIA, or claim compensation in court if a breach of the law harms you.

8. Age

Rashid is for people 18 or older. Do not use it if you are younger.

9. Security

Every connection is encrypted. Overviews are files that only your account on the Mac can read. Our server keeps no content and writes none to its logs.

10. If something goes wrong

If a breach of your data could harm you, we tell SDAIA within 72 hours of learning of it, and we tell you without undue delay, in plain words: what happened, what it means and what to do.

11. Changes to this notice

When this notice changes, we post the new version here with a new date. If a change affects what is sent or kept, we tell testers before it applies.

This notice is also in Arabic, and both say the same. If you find a difference, write to us and we will correct it.

Back to the top · Rashid’s home page