AI Service Providers

Last Updated: October 2, 2026

This page supplements the Privacy Policy. It describes the third-party AI service providers that process your recordings on our behalf, what each of them receives, and the conditions we place on them.

All of them act as processors: they handle your data only to carry out work we have asked for, under our instructions, and never for their own purposes.

Processing Steps

1. Speech-to-text (transcription)

• What they receive: the audio file of a recording you asked to have transcribed, and the anonymous identifiers described in the Privacy Policy (an app UUID and, when you are signed in, an opaque CloudKit user record ID).
• What they do with it: convert the audio into text and return that text to our backend.
• What they may not do with it: use it for their own purposes, train or improve their models with it, or share it with anyone else.

2. Text rewriting (refinement)

• What they receive: the transcribed text, together with the earlier text of the same note when you asked for a recording to be fused with what came before.
• What they do with it: rewrite the text into clean, structured writing and return it to our backend.
• What they may not do with it: the same restrictions as above. Your text is not training material and is not retained.

Not sent to any provider

• Your name, email address and Apple ID — the app does not ask for them and does not hold them.
• Your location and weather context, which stays with the note on your device and in your own iCloud.
• Your purchase history, which is handled by Apple and never passed on for processing.

What We Require of Every Provider

• Purpose limitation. Data may be used only to perform the step we requested, and nothing else.
• No training. Data must not be used to train, fine-tune or evaluate any model.
• No onward sharing. Data must not be resold or passed to any further party.
• Retention limited to the request. Data must be deleted once the request is complete; no copy may be kept as an archive.
• Security in transit and at rest. Encrypted transport and encrypted storage for the life of the request.
• Equal protection. We require each provider to protect your data with the same or equal protection as described in our Privacy Policy, and we remain responsible for it.

A provider that does not meet these terms is not used, and is removed if it stops meeting them.

Changes to This Page

This page is maintained separately from the Privacy Policy on purpose. Infrastructure changes; the guarantees do not. The Privacy Policy always states what kind of processing happens to your data and under what safeguards, and this page always describes the processing steps and the conditions on the providers that carry them out. If we move work from one provider to another of the same kind, the data involved, its purpose, our restrictions and your rights stay exactly the same — and we update the date at the top of this page.

We will never introduce a new kind of processing, or send your data for a new purpose, without asking you first and updating the Privacy Policy.

Contact Us