Privacy Policy

Information we process

When you use transcription or AI features, we process the audio you record or import, transcript text, questions and related note content. The service also uses an app/installation identifier, note identifiers, purchase and subscription status, usage counters and technical request/security information such as IP addresses and device attestation records.

Third-party AI services and your consent

NoteAlert sends your data to the third-party services below only after you give permission in the app (on the last onboarding screen or before your first recording). You can withdraw permission at any time in Settings; recordings made without permission stay on your device and are not sent.

• Soniox, Inc. (speech-to-text): receives the audio you record or import — streamed live while you record or uploaded as a file — to produce the transcript.
• Google Gemma model, run on Cloudflare Workers AI (Cloudflare, Inc.): receives your transcript text, the questions you ask and your translation requests to produce summaries, tasks, answers and translations.

How we collect it: directly from the app on your device, only when you record, import a file, ask a question or request a translation. If you allow notifications, a device notification token is also stored so we can tell you when a long recording is ready.

How it is used: only to provide these features to you. It is not used for advertising and it is not sold. The providers process it on our behalf only to deliver the service.

How long it is kept: Soniox files and transcripts are deleted after processing or when you delete the note. Summaries prepared in the background are kept on our server for up to 7 days so the app can retrieve them, then deleted.

Protection: we share this data only with providers that are bound by their terms and data processing agreements to protect it with the same or equal protection as described in this policy.

Services and purposes

Soniox processes speech for transcription. Cloudflare hosts the backend, usage/security records and Workers AI processing for summaries, tasks, questions and translations. Apple and RevenueCat handle purchase verification and subscription access. Optional iCloud sync uses Apple's CloudKit. Data may be processed outside your country. We do not receive your payment card details. Error traces and diagnostic information are processed for service reliability. RevenueCat also uses purchase history for subscription and purchase analytics.

Storage and retention

Recordings are stored on your device; note data can sync to your private iCloud when enabled. Audio files do not sync through the app's iCloud feature. For uploaded transcription jobs, the app requests deletion of Soniox files and transcripts after processing or when the note is deleted; cleanup depends on successful service requests. Usage, purchase and security records may remain as needed to operate the service, prevent abuse and meet legal duties. Providers have their own retention policies.

Permissions and deletion

Microphone access is needed for recording. Notifications and exporting tasks to Reminders use separate optional permissions. You can import files without microphone permission. Delete individual notes or use the app's delete-all-data setting to remove app content; installation identifiers and usage/quota records are not reset by this action. You can contact us about access or deletion of server-side data. Deleting the app does not cancel an App Store subscription.

Your choices and safety

The app does not include advertising or cross-app advertising tracking, and we do not sell note content. Share exports only with people you choose. Obtain any required consent before recording others and review AI results. We use encrypted network connections and service access controls; no system can guarantee absolute security. This service is not specifically designed for children.

Contact and changes

For privacy questions or data requests, contact us using the support address below. We may update this policy as the app or its service providers change; the date above identifies the current version.