Privacy Policy

Effective date: October 31, 2026

Notably (“we”, “us”, the “App”) explains here exactly what data the App handles and what it does not. In plain terms: your original recordings are stored only on your device, we transcribe them using a third-party AI service that does not retain your data, and we never sell your data.

1. Recording & cloud transcription

• Your original audio recordings, transcripts, notes, action items, and chat history are stored locally on your device. We do not keep a copy of your recordings.
• To turn a recording into a transcript and notes, the App sends your audio recording and its transcript text over an encrypted connection to a third-party AI provider — Google (the Gemini API) — through our own secure backend proxy. See Section 2.
• The App also uses Apple’s Speech framework on your device to show a live draft transcript while you record. This on-device draft is replaced by the final cloud transcript.
• You must agree to cloud transcription in the App before any audio is sent, and you can delete any recording, or all data, at any time in Settings → Delete all data.

2. What we send to the AI provider, and to whom

When you record (and when you generate AI notes or use “ask this meeting” chat), the App sends the data below to Google’s Gemini API, reached through our secure backend proxy:

• What is sent: your audio recording; its transcript text; and your chat questions about a meeting.
• Who it is sent to: Google, as the provider of the Gemini API, over an encrypted connection.
• Why: solely to produce your transcript, notes, and chat answers.
• Retention: the data is processed in-request and is not retained by our backend or by the provider after the request is processed, and it is not used to train AI models.
• We never send your contacts or your identity with these requests, and we do not require an account.

You are asked for explicit consent inside the App before any audio or transcript is sent. If you do not consent, your recordings are not transcribed.

3. Permissions we request

• Microphone — to record meetings, lectures, and voice memos.
• Speech Recognition — to show a live draft transcript on your device while you record.
• Reminders (optional) — only if you choose to turn an action item into a system reminder.

You can change these in the iOS Settings app at any time.

4. Subscriptions & purchases

Subscriptions are processed by Apple through your App Store account. We do not receive or store your payment details. Apple provides us with anonymous, aggregated subscription status so the App can unlock premium features. See Apple’s privacy policy for how Apple handles purchases.

5. Data we do not collect

• We do not sell or rent your personal data to anyone.
• We do not use your recordings, transcripts, or notes to train AI models.
• We do not require an account, and we do not collect your name, email, or contacts to use the App.

6. Diagnostics

Apple may provide us with anonymized crash and usage diagnostics if you opt in to share analytics with developers in iOS Settings. This data is not linked to your identity and contains no recording or transcript content.

7. Children

Notably is not directed to children under 13, and we do not knowingly collect data from them.

8. Your rights

Because your content lives on your device, you are in control: you can view, edit, export, or permanently delete it at any time within the App. To exercise any data request or ask a question, contact us below.

9. Changes

We may update this policy; material changes will be reflected by the effective date above.

Secure AI processing and abuse prevention

In the security update, AI requests you choose to submit travel over HTTPS through our Cloudflare-hosted backend to Google Gemini. Our backend processes the submitted content and the generated response in memory without saving their contents.

To authenticate the app, prevent abuse and control AI spending, the backend retains an opaque App Attest public key identifier and public key, assertion counters, short-lived challenge and rate-limit records, and usage totals. IP addresses are processed for connection security; our application rate-limit records use hashed values. These security records are separate from the content stored on your device and are not used for advertising or cross-app tracking. Public keys and counters are retained to verify future requests.

Cloudflare provides backend hosting and network security. Google provides AI processing. Their handling of data is governed by their respective terms and privacy policies. Deleting local app content removes the on-device copy; it does not automatically remove the separate backend security records.

10. Contact

Questions about privacy: tyln.76@outlook.com