Privacy Policy

Last updated: 25 October 2026 · Effective: 25 October 2026

1. Who is responsible

The data controller for the app and this website is Görkem Karadoğan (“we”, “us”). Contact: gkaradagan@gmail.com.

This policy covers the app on iPhone, iPad, Mac and Apple Watch, and this website.

2. What data we process and why

2.1 Recordings (audio)

The app uses the microphone only while you record. Each recording is saved as an audio file on the device that made it. Recordings from Apple Watch are sent directly to your paired iPhone and processed there.

• On-device transcription (default). When your device and spoken language support it, the app turns your speech into text on the device using Apple’s speech recognition. On this path the audio is not sent to us or to anyone else.
• Cloud transcription (fallback). When on-device transcription isn’t available for your device or language, the app sends the audio to our server, which passes it to OpenAI to turn it into text. Our server doesn’t store the audio. If this service isn’t available, the recording waits on your device until it can be processed.

Audio stays on your device while it waits to be processed. After your tasks are ready, the audio stays on the device for 10 minutes so you can have it read again in another language, then it’s deleted. See section 6 for all retention periods.

2.2 Turning text into tasks

To turn what you said into tasks, the app sends the following to our server:

• the transcript of your recording;
• the spoken language you chose, the current date and time, your time zone, your language and region settings, the first day of your week, and your times for morning, afternoon and evening;
• the names of your saved places and lists, so a task can be matched to them. Place coordinates are never sent;
• the identifiers described in section 2.8.

Our server sends the transcript and this context to Anthropic, whose Claude model returns the tasks. Our server sends the result back to the app and doesn’t store the transcript or the tasks. The app then checks every date against your own words and saves the tasks on your device.

Anthropic, and OpenAI when cloud transcription is used, process this data on our behalf. They may keep it for a limited time under their own terms, for example for abuse monitoring.

2.3 Your tasks, lists and settings

Your tasks are stored in the app on your device. Each task keeps the sentence it came from, and the full transcript of the recording is kept with it so you can see what you said. Lists, places, notification times and other settings are stored on the device too. We have no copy of them.

2.4 iCloud sync and shared lists

If you turn on iCloud sync, your tasks, transcripts, lists, places and settings, plus the names of your devices that use the app, are stored in your private iCloud database through Apple’s CloudKit. Recordings are not synced; they stay on the device that made them. This data lives in your iCloud account under Apple’s terms, and we can’t read it.

If you share a list, the list is stored in the iCloud account of the person who owns it, and the people you invite can see and change it. They see:

• the list name and the tasks in it;
• for each task, the sentence it came from — not the rest of the recording;
• who added, completed or last changed a task, shown with the name from their Apple Account, and who else is in the list.

Tasks that still need a decision stay visible only to the person who recorded them until the decision is made.

2.5 Location reminders

If you use reminders for places such as Home or Work, the places you save (name, coordinates and radius) are stored on your device, and in your iCloud if sync is on. Arriving and leaving are detected by iOS on your iPhone. Your location is not sent to us. Only the names of your places are sent with a transcript, as described in section 2.2.

2.6 Reminders and Calendar

Sending tasks to Apple Reminders or Calendar is off until you turn it on. The app then writes and updates those items on your device and only changes items it created. If you choose to include what you said, the source sentence is added to the item’s notes. Once in Reminders or Calendar, items may be synced by the accounts you use there, under those providers’ terms.

2.7 Notifications, widgets and Live Activities

Reminders, the morning summary and questions about dates are local notifications created on your device. Widgets and Live Activities show data that is already on your device. For shared lists, iCloud may notify the app that something changed.

2.8 Usage limits and identifiers

To apply the monthly recording limit and to prevent abuse, the app creates a random device ID when you first use it. It isn’t linked to your name, email or Apple Account. The app sends it with each request. If you have a subscription, the app also sends the random ID that RevenueCat uses for your purchases and Apple’s signed record of your purchase.

Our server keeps counters of how many recordings were processed, stored with Cloudflare under the random device ID or under a scrambled (hashed) version of the RevenueCat ID. It also stores whether a subscription is active and when it ends. It doesn’t store what you said.

2.9 Subscriptions and purchases

Payments are handled by Apple through your Apple Account. We don’t receive your payment details. We use RevenueCat to manage subscriptions: RevenueCat receives your purchase information from Apple and a random ID created by its software, so it can tell the app whether you have Pro. RevenueCat also notifies our server when a subscription starts, renews or ends.

2.10 Usage analytics (only if you turn them on)

Analytics are off by default. Nothing is sent, and the analytics software isn’t started, unless you choose “Share usage data” in onboarding or in Settings. Your choice applies to that device only.

If you turn it on, the app sends usage events to PostHog, an analytics service, using its EU servers. Events are linked to a random ID created on your device, not to your name, email or Apple Account.

• We collect: which buttons and screens you use; counts, timings and error codes (for example how long recording took to start); app version, device type, operating system, language and time zone; whether you have Pro.
• We never collect: audio, transcripts, task titles or other text you entered; actual dates of your tasks; place names, addresses or coordinates; list names or the people in shared lists; your name, email or Apple Account.

Our PostHog project is set to discard IP addresses and not to look up location. Session replay and automatic capture of text are off. If you turn sharing on, the random ID is also stored with RevenueCat so subscription events can be counted for the same ID. Turning sharing off stops collection right away, deletes the random ID from your device and removes it from RevenueCat. Data already sent isn’t deleted automatically; see section 8.

2.11 Crash reports

If the app crashes, a crash report with the device model, system version, a random installation ID and the point where the app stopped is sent to Firebase Crashlytics, a Google service; it never contains your tasks, what you said or audio. Crash reporting is on by default, you can turn it off in Settings → Privacy, and Firebase keeps crash data for 90 days.

2.12 Server logs

Our server records technical facts about each request, such as the result, the number of tasks, the time it took and which checks were applied. These logs don’t contain your transcript, your tasks or your device ID. Like any internet service, Cloudflare receives your IP address when the app connects and may keep it in its own logs for a short time for security and operation.

2.13 Emails to support

If you email us, we use your email address and message to reply. Please don’t include more personal data than needed.

2.14 This website

This website uses no cookies, no analytics and no third-party scripts. It is hosted by Cloudflare, which processes technical data such as your IP address to deliver the pages.

3. Legal bases

Under the EU/UK General Data Protection Regulation (GDPR) and Turkey’s Personal Data Protection Law No. 6698 (KVKK), we rely on:

• Providing the app you asked for (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)): transcription, turning text into tasks, usage limits, subscriptions, support replies.
• Our legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)): keeping the service secure and preventing abuse, and the server logs described above.
• Your consent (GDPR Art. 6(1)(a); KVKK Art. 5(1), explicit consent): usage analytics. You can withdraw it at any time in Settings.
• Legal obligations (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)): where the law requires us to keep or disclose data.

Access to the microphone, speech recognition, location, notifications, Reminders and Calendar is controlled by iOS permissions that you can change at any time in your device’s Settings.

4. Service providers

We use these providers to run the app. They may process data outside your country.

Apple

On-device speech recognition, App Store payments, iCloud and CloudKit sync and sharing, notifications. Apple’s own privacy policy applies to your Apple Account and iCloud.

Cloudflare

Hosts our server, the usage counters and this website. Runs on a global network.

Anthropic

Turns transcripts into tasks with its Claude model. Based in the United States.

OpenAI

Turns audio into text, only when on-device transcription isn’t available and cloud transcription is used. Based in the United States.

RevenueCat

Manages subscriptions and purchase status. Based in the United States.

PostHog

Usage analytics, only if you turn them on. Data is stored on its EU servers.

Google (Firebase Crashlytics)

Receives crash reports, unless you turn them off in Settings. Based in the United States.

5. International transfers

Some providers process data outside the European Economic Area, the United Kingdom and Turkey, including in the United States. Where the law requires it, we rely on the transfer safeguards these providers offer, such as standard contractual clauses. You can ask us for more information.

6. How long data is kept

Audio recordings (on your device)

Until processed. After your tasks are ready: 10 minutes, then deleted. A recording that couldn’t be processed is kept so you can try again and deleted after 7 days. You can delete waiting recordings at any time.

Audio and transcripts on our server

Not stored. They are processed in memory to answer the request.

Audio and transcripts at Anthropic and OpenAI

Processed to return the result; they may be kept for a limited time under the provider’s terms.

Tasks, transcripts, lists, places and settings (on your devices and in your iCloud)

Until you delete them, delete the app, or remove the app’s data from iCloud.

Random device ID

Stored on your device. It may remain in the device’s keychain after the app is removed.

Usage counters on our server

Deleted automatically: daily counters after 2 days, monthly counters after 40 days, counters for re-reading a recording after 1 day.

Subscription status on our server

Deleted automatically, usually about 60 days after the subscription ends. Status checked with RevenueCat is cached for up to 24 hours.

Server logs

Kept for a short period under Cloudflare’s log settings.

Usage analytics (PostHog)

Kept only as long as needed to understand how the app is used, then deleted under our PostHog retention setting.

Crash reports (Firebase Crashlytics)

Kept for 90 days, then deleted by Firebase.

RevenueCat and Apple purchase records

Kept by RevenueCat and Apple under their terms, including for tax and accounting obligations.

Support emails

Kept as long as needed to handle your request.

7. Your rights

Under the GDPR and KVKK (Art. 11) you can ask us to:

• tell you whether we process data about you, and give you access to it and a copy of it;
• correct or delete it, or restrict how it is used;
• object to processing based on our legitimate interests;
• withdraw your consent at any time, without affecting earlier processing;
• receive your data in a portable format where this applies;
• tell you who the data was shared with, including abroad, and inform them of a correction or deletion;
• object to a result that goes against you and comes only from automated analysis, and seek compensation for damage caused by unlawful processing.

Write to gkaradagan@gmail.com. We answer within 30 days. Because there is no account, we hold very little data that can be linked to you. For analytics, include the random ID shown in Settings so we can find the data.

You can also complain to a data protection authority: in the EU or EEA, the authority where you live or work; in the UK, the Information Commissioner’s Office; in Turkey, the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu), after first applying to us.

8. How to delete your data

• Tasks: in the app, swipe to delete a task, or use Settings → Privacy → Delete all tasks. With sync on, this deletes them on all your devices.
• Waiting recordings: open the pending recordings and delete them.
• iCloud data: in the app, turn off iCloud sync and choose to remove the data, or delete the app’s data in your device’s iCloud storage settings.
• Everything on a device: delete the app.
• Analytics: turn off “Share usage data” in Settings. To delete events already sent, email us the random ID shown in Settings before turning sharing off.
• Subscriptions: cancel in your Apple Account settings. For RevenueCat purchase records, email us.

9. Children

The app is not directed to children under 13, or under 16 where local law sets a higher age for consent to data processing. We don’t knowingly collect data from them. If you think a child has sent us data, contact us and we will delete it.

10. Security

Data sent between the app and our server is encrypted in transit (HTTPS). Our server holds no transcripts, tasks or audio. No method of transmission or storage is completely secure, but we limit what we collect to reduce risk.

11. Changes to this policy

If we change this policy, we will update the date at the top. If a change affects how your data is used in a significant way, we will tell you in the app before it applies.

12. Contact

Görkem Karadoğan · gkaradagan@gmail.com