Privacy policy

Updated October 30, 2026. This pre-release policy describes the implemented service. The developer identity will be the seller shown on the App Store; that account is not yet configured. Review this policy before a public release.

Local records and your files

Recordings, text, events and backups are first saved on your device. Microphone access is requested only when you start recording. You choose the iCloud Drive folder; Apple controls its upload and cross-device delivery. Moving a record to the local trash or deleting a cloud account does not delete your external archive.

Optional AI processing

AI requires explicit permission and a signed-in account. Audio is sent through our service to Aliyun Qwen Audio 3.1 (currently a Beijing workspace in China). Transcript text and limited relevant event context are sent to DeepSeek. Do not enable this feature if you do not wish to use those providers or send data to the configured processing location.

Audio and results are temporarily stored privately in Cloudflare R2; task metadata is in Cloudflare D1. Processing files expire for retrieval after 24 hours. Cleanup aims to remove them within 24 hours; service outages may delay deletion. They are not a permanent cloud archive. Withdrawing consent stops future requests and requests cleanup of controlled task data. We cannot retroactively erase data already processed by an external provider; provider retention and legal requirements also apply.

Accounts and purchases

Sign in with Apple supplies a stable identifier. We do not request your name or email. Session tokens are stored in the device Keychain and hashed on the server. Apple purchase identifiers, products, expiry and revocation information are used to validate subscriptions and prevent cross-account claims. We do not receive payment card details.

Logs and retention

Operational logs do not contain audio, transcripts, prompts, provider responses, passwords or API keys. Security and purchase metadata may be retained for fraud prevention and required records. Cloudflare infrastructure may process IP addresses for delivery and rate limiting. There is no advertising tracking or sale of personal data.

Your controls

You may decline AI, withdraw permission, export files, restore backups, move records to trash, disconnect your archive folder, or delete your cloud account inside the app. Account deletion revokes the Apple sign-in grant and removes controlled processing data; it does not cancel Apple subscriptions or erase local and iCloud copies. Manage subscriptions with Apple separately.

Providers and contact

Services include Apple, Cloudflare, Aliyun and DeepSeek. Processing may occur outside your country. Availability outside mainland China does not imply that all processing occurs outside China.

For support, use the support page. Never include personal recordings or transcripts in public issues. Final operator and regional privacy details must be confirmed before public distribution.

After account deletion, content-free usage totals for approximately seven days, with scheduled cleanup subject to outage delays, minimal purchase records and a keyed hash of the Apple identity may remain to prevent fraudulent purchase claims and let the same verified Apple identity restore an existing subscription. This does not restore deleted audio, text, processing results or AI consent. The final retention policy and operator contact must be confirmed before public launch.