Privacy Policy

This policy explains what happens to your information when you use VoiceJots: Encrypted Notes (the "App"), published by [COMPANY LEGAL NAME], [REGISTERED ADDRESS] ("we", "us").

The short version

• Your recordings, transcripts, summaries, notes, photos and files stay on your device. We never receive them.
• Transcription, speaker detection, summaries and search run on your device. There is no cloud processing.
• Everything the App stores is encrypted with a key that only you control.
• We have no accounts, no analytics, no advertising, and no tracking.
• The App connects to the internet for two things only: downloading its speech and language models, and purchases through the App Store or Google Play.

1. What stays on your device

Everything you create in the App is stored only on your device, encrypted:

• audio recordings and voice memos;
• transcripts, speaker labels and speaker names you assign;
• summaries and text notes;
• photos, documents and other files you attach;
• the search index built from your notes;
• settings, including your recording-time usage for the Free plan.

We do not have a copy of any of it and cannot access it. We cannot read, recover, disclose or hand over your content, because it never reaches us.

2. Information that leaves your device

2.1 Model downloads

After installation the App downloads speech-recognition, speaker-detection and language models from our server at voicejots.com, delivered through a content delivery network (Cloudflare). Like any download, these requests reveal your IP address, the time, the file requested and your device's HTTP client information. No identifier of you or your device and none of your content is included.

We use this information only to deliver the files and to protect the service from abuse. [SERVER LOG RETENTION: e.g. "Our server does not store IP addresses" or "Access logs are deleted after 14 days".] Cloudflare processes these requests under its own privacy policy as our service provider.

2.2 Purchases

Subscriptions are sold and billed by Apple (App Store) or Google (Google Play). We do not receive your name, email, payment card or billing address. The store tells the App on your device whether you have an active subscription.

[IF SERVER-SIDE RECEIPT VALIDATION IS USED: To confirm that a subscription is genuine, the App sends the store's transaction identifier to our server, which checks it with Apple or Google. The identifier is not linked to your identity or to any of your content, and is kept only as long as needed to verify the subscription.]

2.3 What you choose to share

When you export a note (PDF or Markdown), share it, or open an attachment in another app, the App shows a warning and then hands a copy to the destination you choose. That copy is no longer protected by the App's encryption and is governed by the destination's own terms and privacy practices.

2.4 Crash reports from Apple or Google

The App contains no crash-reporting or analytics software. If you have allowed your device to share diagnostics with app developers, Apple or Google may provide us with anonymized crash reports. These contain technical information only (such as the device model and the code location of a crash) and never your content. The App never writes transcript text to logs.

3. Device permissions

4. Security

• One random 256-bit master key encrypts everything the App stores. The database is encrypted with AES-256 (SQLCipher); audio, photos and files are encrypted with XChaCha20-Poly1305 in equal-size pieces with random names.
• The master key is stored only in encrypted form. It can be unlocked with your biometrics on this device or with the 24-word recovery phrase shown to you at setup. We never see the recovery phrase.
• The App uses only 256-bit symmetric cryptography to protect stored data, a design intended to remain secure against known attacks by quantum computers.
• App data is excluded from iCloud and Android device backups, because it is bound to keys on this device.

No system is perfectly secure. If you lose both your device and your recovery phrase, your data cannot be recovered by anyone, including us.

5. Your choices and rights

• Delete a note at any time from the notes list or the note screen.
• Delete everything in Settings permanently erases all notes, recordings, attachments, downloaded model caches and keys from your device. Uninstalling the App also removes its data.
• Export your notes as PDF or Markdown at any time.

Depending on where you live (for example under the EU/UK GDPR or the California Consumer Privacy Act), you may have rights to access, correct, delete or port personal data, and to object to or restrict processing. Because your content is held only on your device, you exercise these rights directly in the App. For the limited technical data described in section 2.1 and 2.2, contact us at [PRIVACY EMAIL, e.g. privacy@voicejots.com]. You may also complain to your local data-protection authority.

Legal bases (EU/UK): delivering model downloads and protecting the service — our legitimate interests; verifying purchases — performance of our contract with you.

We do not sell or share personal information as defined by the CCPA, and we do not use it for targeted advertising.

6. International transfers

The limited technical data in section 2 may be processed by us and by Cloudflare in countries other than yours. Where required, such transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses.

7. Children

The App is not directed to children under 13 (or under 16 in the EEA and UK), and we do not knowingly collect personal data from children.

8. Requests from authorities

We cannot provide the content of your notes to anyone, including law enforcement, because we never have it. We will respond to valid legal requests only regarding the limited technical data described in section 2, where we hold any.

9. Changes to this policy

If we change this policy we will update the effective date above and, for material changes, notify you in the App before the change takes effect. If a future version adds optional features that send data off your device (for example, encrypted cloud backup), they will be off by default and described here before release.

10. Contact

[COMPANY LEGAL NAME]
[REGISTERED ADDRESS]
[PRIVACY EMAIL, e.g. privacy@voicejots.com]