Privacy and data handling

Speech recognition

GongLah uses the browser Web Speech API, not a speech model operated by GongLah. On first use, browser languages may suggest Cantonese, Mandarin, English, or Filipino, and you can always choose manually. GongLah does not infer language from your IP address. Audio processing location and retention are determined by the browser, operating system, or recognition provider.

Audio, microphone checks, and long recordings

GongLah does not create, save, or upload an audio recording. The 10-second microphone check reads only the live input level and microphone name on your device, then releases the microphone.

During recording, GongLah may request a Screen Wake Lock to keep the display awake. Battery saving, system limits, locking the device, or moving to another app can still pause recognition. Background recording while locked cannot be guaranteed.

AI editing, Clear, and translation

After you stop or request an edit, GongLah can send completed recognized text and the selected language profile to Cloudflare Workers AI to improve punctuation, sentences, and paragraphs. Clear and English versions are generated only when you first request them.

Audio is never sent to AI. Results remain in the current browser unless you actively enable account sync. Editing requests do not create a separate account chat history; Cloudflare processes inference requests under its terms. You can disable automatic AI editing and continue using the conservative on-device edit.

Anonymous analytics and the accuracy benchmark

GongLah records limited anonymous events such as page views, microphone-test completion, recording-duration bands, editing, Copy, sharing, and referral outcomes. To measure one visit from its entry page through the first Copy, the browser creates a random session code in sessionStorage and submits it with a coarse acquisition channel and entry path. The code is not reused after that tab session and is not linked to an account, cookie, or cross-site identity. Aggregate events are retained for up to three months. Events exclude spoken or typed text, audio, microphone names, names, email addresses, and persistent device identifiers. Front-end events are not sent when Do Not Track is enabled.

The public Cantonese benchmark compares fixed phrases and recognized text on your device. Anonymous aggregate reporting can be disabled before the test. If enabled, only the sample version, score, difference count, reference length, completion time, coarse device/browser type, and recognition language are submitted—never recognized text. Group averages appear only after at least three tests.

Personal learning and anonymous short corrections

When you correct a short term and successfully Copy, GongLah can add the confirmed form to the personal glossary for that language. Ordinary insertions, full-passage pastes, AI edits, or changes not confirmed by Copy are not treated as learning data. The glossary stays in the browser unless sync is enabled.

Guests can share short corrections anonymously by default and can turn this off at any time; signed-in accounts are asked separately once. Submissions omit cookies, account IDs, audio, full text, sentence context, and contact details. Sensitive formats and oversized content are filtered. Because submitted corrections contain no user identifier, an individual contribution cannot later be located by user.

Correction signals use explainable weights and conflict thresholds. Stale or repeatedly rejected rules are downgraded or stopped. Only repeated, non-conflicting corrections may be offered to others or used as conservative AI hints. GongLah does not directly alter the browser speech model.

On-device text, settings, and backups

• Without sync, text, segments, versions, glossaries, language, and preferences stay in the current browser. localStorage and an IndexedDB recovery checkpoint reduce accidental loss after a refresh or interruption.
• Daily characters, tokens, and time saved are on-device estimates, not Cloudflare billing usage.
• You can export and import a JSON backup without an account.
• Clearing browser site data or clearing content in GongLah removes the corresponding on-device data.

Optional account sync

• Sync is off by default and uploads a workspace only after you choose Google, an email code, or a passkey sign-in.
• Sync includes text, segments, versions, glossaries, language, and preferences. It excludes audio, microphone content or names, and on-device usage totals.
• Account records, sessions, passkey public credentials, and workspaces are stored in Cloudflare D1. GongLah never receives biometric data or a Google password. Email codes are temporarily stored as hashes, expire after about five minutes, and are delivered through Resend.
• If both the device and cloud changed, automatic overwrite pauses so you can merge, keep this device, or use the cloud copy.
• You can sign out or delete the cloud account at any time. This does not automatically delete text held on the device.

Hosting, network data, and your controls

The site, Workers AI, and optional sync database are hosted by Cloudflare. Cloudflare may process IP addresses, request times, and general device/browser information for operations and security. The correction API uses connection IPs only for short-lived rate limiting and does not store them with corrections. You can refuse microphone permission, use GongLah without installation or sign-in, turn off anonymous improvement, clear local content, export a backup, and delete the cloud account. Company devices remain subject to company policy.