Coanda Technologies Privacy Policy
Last updated: 15 October 2026
1. Who we are
Coanda Technologies (“Coanda”, “we”) makes Cathy, a voice assistant for skilled technicians, and Conduit, where companies write the documentation and procedures Cathy pulls information from. We're based in Sydney, Australia, and you can reach us at founders@coandatech.com.
This policy covers our website (coandatech.com), our waitlist, the Cathy app and Conduit. We handle personal information under the Australian Privacy Act 1988 and the Australian Privacy Principles.
2. Your company and us
Cathy is a workplace tool. When your employer uses Cathy, it decides what work is recorded and who can see it, and we handle that information on its behalf under our agreement with it. Your employer's own privacy policy also applies. For our website and waitlist, we decide how information is used.
3. What we collect
| Information | Examples | Where it comes from |
|---|---|---|
| Waitlist details | Email address, when you joined, which form you used, and the page's referrer and campaign tags, if any | You |
| Website visits | Pages viewed, clicks, page speed and error reports, counted without cookies | Your browser |
| Account details | Name, work email, company, role | Your company, when it adds you |
| Sign-in account | Your email address and whether it is verified. The one account we made for app store review also has a password | Your company, when it adds you |
| Voice | What you say to Cathy while she's listening | You, through the app's microphone |
| Work records | Steps completed, quality checks, equipment status, notes, times, and the transcript of what you said | Created as you work with Cathy |
| Technical information | Your phone's platform and app version, IP address, error logs | Your device |
On our website
The waitlist stores the details above. PostHog (United States) counts visits, clicks and page speed without cookies, and receives error reports from the page. It does not record your screen. Our host, AWS Amplify, sees your IP address to serve the page. PostHog sees it to count the visit, and does not store it.
In the app
Only people their company added can use Cathy; there's no public sign-up. You sign in with your email address and a one-time code we email you. Amazon Cognito, in Sydney, holds your sign-in account. Google isn't part of signing in, so we get no name or profile picture from a Google account. An address nobody added gets no email. The app uses the microphone while you talk to Cathy, once you allow it. You can withdraw that at any time in your phone's settings; Cathy then can't hear you. App updates come from Expo (United States), which sees your phone's platform, the app's version and your IP address.
We don't use advertising identifiers or track you across other apps or websites.
4. How we use it
- To run Cathy: understand what you say, talk you through the procedure and record the work in Conduit.
- To sign you in and keep your account secure: we email you a one-time code, and check it when you type it in.
- To send email, and only this: if you join the waitlist, one email to confirm and one when we can let you in; if your company added you, a sign-in code whenever you ask for one.
- To count visits to our website and fix what breaks on it.
- To answer support requests and fix problems.
We don't sell personal information or use it for advertising.
5. How Cathy uses AI
Cathy uses AI to understand what you say and respond. These services do that work:
- LiveKit (United States) carries the live audio between your phone and our service in Sydney.
- OpenAI (United States) turns your speech into text, writes Cathy's replies and drafts procedures. It doesn't train its models on this data, and keeps it for up to 30 days to check for abuse.
- Google's Gemini, in Sydney, reads what you say and your company's procedures to look things up for Cathy, keep the job's record and make the changes you ask for to a draft procedure. When Sydney is too busy, a request can go to Google's global service, which has no fixed country. Google doesn't train on this data without permission.
- Amazon Polly, in Sydney, speaks Cathy's replies, unless your company chooses another voice: Deepgram (processed in Australia; its billing data is in the United States), OpenAI (United States) or Google (a global service with no fixed country, which doesn't train on your data without permission).
To find faults, we keep a trace of what Cathy's AI was given and what it answered, which includes the transcript text, in our own database in Sydney. Until 12 October 2026, Langfuse, in Ireland, kept these traces. We no longer send it anything, and it deletes what it holds within 90 days.
We don't keep recordings of your voice. The transcript of what you said is kept with the work record, unless you ask us to delete it.
6. Who we share it with
- Your company. People your company authorizes in Conduit can see your work records. That's the purpose of the product.
- Our service providers, under contract with us. Amazon Web Services hosts our website, Cathy and Conduit in Sydney, holds your sign-in account (Amazon Cognito), and sends our emails from Sydney: your sign-in codes and our waitlist emails (Amazon SES). The others are named in sections 3 and 5.
- Authorities. Only when the law requires it.
Each of these providers is bound by its own terms to protect your information at least as well as this policy does.
7. Where it's stored and how it's protected
We store your information on AWS in Sydney, Australia. The services named in this policy process some of it outside Australia, in the country named beside each.
Your information is encrypted in transit and at rest. Only Coanda's founders can reach it.
8. How long we keep it
- Waitlist email: until you ask us to remove it. After that, it's gone from our backups within 35 days and from our logs within 30 days. Our logs only hold an address when saving it or sending its email failed.
- Email, other copies: if an email to you, a sign-in code included, bounces or is marked as spam, Amazon SES adds your address to our suppression list and keeps it there until we remove it. If a waitlist email bounces, is marked as spam or is refused by SES, an alert that names the address goes to the founders' inbox. When you ask us to remove your email, we delete it from the suppression list and delete those alerts. Resend (United States) sent our waitlist emails until 14 October 2026 and keeps email and log data for 30 days.
- Account details and work records: while your company uses Cathy. We delete them within 90 days after your company's agreement ends, unless your company asks us to return them or the law requires us to keep them.
- Sign-in account (Amazon Cognito): until your company removes you. Then we delete it, and it can't be restored. Your email is cleared and your name stays on the records you made.
- Sign-in codes: a code works for minutes only. You stay signed in on the app for up to a year, and on Conduit for 14 days, then you sign in again.
- Voice: we keep no recordings. The transcript stays with the work record unless you ask us to delete it.
- Traces with transcript text: with the work record, and deleted with it. Older traces at Langfuse: deleted by 10 January 2027.
- Logs: 30 days. The app's database backups: 7 days.
9. Your choices and rights
- See or correct your information: email us and we'll respond within 30 days.
- Delete your information: ask whoever manages Cathy at your company to remove you, or email us. We'll delete your sign-in account, clear your email and tell your company. Your name stays on the work records you made, because they also form part of your company's records. If you ask, we also delete the transcripts of what you said to Cathy. We delete our traces of those conversations with them. Copies in backups, logs and Langfuse go within the times in section 8.
- Stop the microphone: turn off microphone access in your phone's settings at any time. Cathy can't talk you through jobs without it.
- Leave the waitlist: reply to the email, or write to us.
- If you use Cathy at work, you can also ask your company.
10. Children
Cathy is a workplace tool and isn't directed at children.
11. Questions and complaints
Email founders@coandatech.com and we'll respond within 30 days. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
12. Changes to this policy
When this policy changes, we'll update the date at the top. We'll tell your company before any significant change takes effect.