> ## Documentation Index
> Fetch the complete documentation index at: https://docs.joinruna.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Biometric Data Retention & Destruction Schedule
> How Runa retains and destroys voice profiles (voiceprints), as required by BIPA and other biometric-privacy laws.
*Last updated: July 17, 2026*
Runa Labs Inc. ("Runa," "we," "us") publishes this schedule to satisfy Section 15(a) of the Illinois Biometric Information Privacy Act ("BIPA") and analogous requirements under the Texas Capture or Use of Biometric Identifier Act ("CUBI"), the Washington biometric statute (RCW 19.375), and other laws. It explains how long we retain voice profiles ("voiceprints") and when and how we permanently destroy them. It is part of, and should be read together with, our [Privacy Policy](/legal/privacy) (see Section 8) and [Terms of Service](/legal/terms).
## What this covers
To label who said what in your meetings, and to recognize the same speaker in later meetings, Runa creates **voice profiles ("voiceprints")** — numeric summaries of voice characteristics. Voiceprints are treated as "biometric identifiers" or "biometric information" under BIPA, CUBI, and the Washington statute, and as biometric special-category data under the GDPR. Runa creates voiceprints for you (from a short, optional enrollment recording) and for people you name in a transcript so it can recognize them in your future meetings.
We use voiceprints **solely** to label and recognize speakers in meetings that you or your colleagues record. **We never use voice data for advertising, we never sell, lease, or trade it, and we never use it to train foundation models.**
## Retention schedule
| Voice data | Where it lives | Retained for | Destroyed |
| --------------------------------------------------------------------------- | -------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------- |
| Voice-matching samples never linked to a person | Your device only | Up to 60 days | Automatically, on expiry |
| Unconfirmed ("provisional") voice-matching samples | Your device only | Up to 90 days | Automatically, on expiry |
| "Not this person" exclusion records | Your device only | Up to 180 days | Automatically, on expiry |
| Your enrollment recording | Your device only | Until you re-enroll or delete it | Re-enrollment, per-person deletion, or removing the app's data |
| Confirmed voice-matching samples | Your device only | While the person remains in your speaker memory | Deleting the person, the source meeting, or your account |
| Aggregate voice profile (one numeric summary per person) | Your device and Runa's servers (encrypted at rest) | While the person remains in your speaker memory, and — as a destruction guideline — no longer than **3 years** after that individual's last appearance in your meetings | Deleting the person, deleting your account, or the 3-year limit above |
| Your published voice signature (only if you enable voice-signature sharing) | Runa's servers (encrypted at rest) | Until you turn sharing off or delete your account | Immediately on either action |
**Destruction guideline.** Consistent with BIPA Section 15(a), Runa destroys a voiceprint when the purpose for which it was created — recognizing that speaker for you — has been satisfied, or within three (3) years of the individual's last interaction reflected in your account, whichever occurs first.
## How voice data is destroyed
* **Delete a person from speaker memory** — destroys that person's voice profile on your device and on our servers.
* **Delete a meeting** — destroys the voice-matching samples learned from that meeting.
* **Turn off voice-signature sharing** — deletes any published copy of your voice profile from our servers immediately.
* **Delete your account** — destroys all of your server-side voice data (voice profiles and any published signatures) as part of the deletion process, well within the 30-day window stated in our Privacy Policy, along with your recordings.
## Consent is separate from this schedule
This schedule addresses **retention and destruction** (BIPA Section 15(a)). Biometric-privacy laws separately require **informed written consent before a voiceprint is created** (BIPA Section 15(b) and analogous provisions). Voice recognition in Runa is optional and is enabled by your own affirmative choice. **Where you enable voice recognition for, enroll, or name another person, you are responsible for providing any required notice and obtaining that person's consent in advance** — accepting our Terms or Privacy Policy does not provide, and cannot provide, another person's consent. See Section 6 of the Privacy Policy and Section 6 of the Terms of Service.
## Questions and requests
To ask what voice data we hold about you, to withdraw consent, or to have your voice data deleted, contact us at [admin@joinruna.com](mailto:admin@joinruna.com). See Section 23 of the [Privacy Policy](/legal/privacy) for how we handle and verify these requests.
Runa Labs Inc.
Attn: Privacy
Email: [admin@joinruna.com](mailto:admin@joinruna.com)