Last updated: 28 October 2026
Privacy Policy
The short version. The app has no account and no ads. Your recordings are stored on your device, and transcription runs there too. On supported devices, summaries and answers are made on the device as well.
Your audio never leaves your device through the app. On devices that cannot make summaries themselves, transcript text can be sent through our server to Google’s Gemini AI, but only after you allow it in the app, and you can stop it in Settings. With Pro, your notes, audio and photos can sync through your own private iCloud, which you can turn off. The app contains no analytics or advertising SDK; the only other thing we receive is your subscription status, through Apple and RevenueCat.
1. Who we are
The app is developed and published by Heyisoft (“we”, “us”), based in Türkiye. Heyisoft is the data controller for the personal data described in this policy under the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law No. 6698 (KVKK). For any privacy matter, write to heyisoft@gmail.com.
2. What this policy covers
This policy covers the app for iPhone and iPad, and these web pages. It tells you what the app handles, where it is kept, what leaves your device and why, and the choices you have.
3. What stays on your device
The following is stored in the app’s own storage on your device. We never receive it.
| Data | What it is |
|---|---|
| Recordings | The audio you record or import, its title, date and bookmarks. |
| Transcripts | The text of each recording, with speaker labels if you use speaker identification, and your own dictionary terms. |
| Summaries and answers | Summaries, earlier versions of them, your questions and the answers, your own templates, tags and folders. |
| Search index | Built on the device so you can search your notes. It never leaves the device. |
| Settings | Your preferences, and whether you allowed cloud summaries. |
Microphone. The app uses the microphone only while you record. You grant access through the system prompt and can withdraw it in your device’s Settings at any time.
Transcription runs on your device. It uses Apple’s on-device speech recognition, or the Whisper speech model, which the app downloads once and then runs on the device.
Summaries and Ask run on your device where the device supports it, using Apple’s on-device Foundation Models. On these devices no text leaves the device to make a summary or an answer.
Speaker identification runs on your device with a model the app downloads.
Model downloads. When the app downloads the Whisper speech model or the speaker model from Hugging Face (huggingface.co), only the model file comes to your device; none of your data is sent. As with any download, the server providing the file sees your IP address.
Export and sharing. When you export or share a note, the file goes to your device’s share sheet, and where it goes next is your choice.
Device backups. If you use iCloud Backup, your device may include the app’s data in that backup. Apple handles it under its own terms; we have no access to it.
4. iCloud sync
With a Pro subscription, your notes, transcripts and summaries, and the audio and photos of your recordings, can sync between your devices through your own private iCloud: text in Apple CloudKit (private database), audio and photos as files in the app’s own iCloud Drive container, which is not shown in the Files app. We have no access to any of it and run no server for it. On another device, audio downloads when you play it. Without Pro, everything stays on your device and you can still open and export all of it. If Pro ends, sync stops but nothing is deleted, on your device or in iCloud, and what is already in iCloud still opens on your other devices. Deleting a recording from the trash also deletes its audio and photos from iCloud. You can turn sync off in the app’s Settings with “Sync with iCloud”, and manage or delete iCloud data in your device’s Settings under your name, then iCloud.
5. Cloud summaries on older devices, only with your permission
Some devices cannot run Apple’s on-device models. On those devices the app can ask Google’s Gemini AI to make the summary or answer instead. This is off until you allow it.
- Permission first. The first time you ask for a summary or an answer on such a device, the app shows what would be sent and asks you to choose “Send and summarize” (or “Send and ask”) or “Not now”. If you do not allow it, nothing is sent and the rest of the app keeps working.
- Text only. What is sent is the relevant transcript text, the instruction for the summary, and your question if you use Ask. Audio is never sent.
- Who receives it. The text goes to a server we operate, which passes it to Google’s Gemini model and returns the result. With it the app sends an anonymous subscriber ID (from RevenueCat) so the server can check your plan and monthly limit, and an app check token (Firebase App Check, using Apple’s App Attest) that confirms the request comes from the genuine app; it is not a lasting identifier. None of these contain your name or contact details, which we do not have.
- We do not keep it. Our server does not store the text or the result and does not write them to its logs; it keeps only counters (a hashed subscriber ID, request counts, timing).
- What Google does with it. We use the Gemini API as a paid service, through a Google Cloud project with an active billing account. Under the Gemini API Additional Terms of Service, section “Paid Services”, “How Google Uses Your Data” (last modified 28 April 2026), Google does not use prompts or responses to improve its products, and logs them for a limited period only to detect and prevent violations of its Prohibited Use Policy.
- Stopping it. In the app’s Settings, under AI, choose “Stop Sending Text”. From then on nothing is sent until you allow it again.
6. Subscriptions and purchases
Subscriptions are bought through Apple, which takes the payment. We never see your payment card. To check whether your subscription is active and to restore purchases, the app uses RevenueCat, a subscription status service. The app sends RevenueCat an anonymous identifier its software creates, with the app version, system version and store country; if you subscribe, RevenueCat also receives the purchase record (product, price, currency, dates and store transaction details). RevenueCat never receives your name, email or recordings.
7. What we do not collect
- No account, sign-up, name, email address or phone number.
- No audio, ever. No transcript text, except the text you allow to be sent for cloud summaries.
- No advertising, no advertising identifier (IDFA), and nothing is sold.
- No analytics or crash-reporting SDK, and no usage statistics.
- No precise location, contacts or photos.
8. Legal bases (GDPR and KVKK)
- Cloud summaries and answers: your explicit consent (GDPR Art. 6(1)(a); KVKK Art. 5(1)), given in the app and withdrawable at any time in Settings.
- Subscription status check: our legitimate interest in offering the subscription and knowing whether it is active (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
- Purchases: performance of the contract you enter when you subscribe (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)), and legal obligations such as keeping transaction records (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)).
- Data that stays on your device is processed by the app on your device and is not received by us.
9. Service providers and transfers abroad
Google (Gemini, and Firebase App Check to verify requests), RevenueCat and the hosting provider of our server process data on our behalf as service providers, and Apple processes payments and iCloud under its own terms. Their servers may be located outside Türkiye and the European Economic Area, including in the United States. Where the law requires safeguards for such transfers (GDPR Chapter V, KVKK Art. 9), we rely on the standard contractual clauses these providers offer.
- Firebase: firebase.google.com/support/privacy
- Gemini API: ai.google.dev/gemini-api/terms
- RevenueCat: revenuecat.com/privacy
- Apple: apple.com/legal/privacy
10. How long data is kept
- On your device: until you delete it. A deleted recording goes to the trash first; deleting it from the trash removes it. Deleting the app removes everything stored on the device.
- In your iCloud: until you delete it there or permanently delete the recording in the app with sync on (this also removes its audio and photos).
- Text sent for cloud summaries: not kept by our server; Google logs it for a limited period only to detect abuse (see section 5).
- Purchase records: kept by Apple and RevenueCat for as long as needed to provide the subscription and to meet legal record-keeping duties.
11. Your rights
Under the GDPR you have the right to access, correct, delete, restrict and port your personal data, to object to processing based on legitimate interest, to withdraw consent, and to complain to your local data protection authority. Under KVKK Article 11 you have the right to learn whether your data is processed and why, to ask which third parties in Türkiye or abroad receive it, to have it corrected or deleted and those third parties told, to object to a result against you that arises only from automated analysis, and to claim compensation for damage caused by unlawful processing. You can complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) in Türkiye.
To use any of these rights, write to heyisoft@gmail.com. We reply within 30 days. Because we do not know your name or email and the data on our side is tied only to random identifiers, we may not be able to find a specific record. Everything on your device is already under your control: you can export it or delete it in the app.
12. Security
Data sent to Google, RevenueCat and Apple travels over encrypted connections (HTTPS). On your device, the app’s data sits in its private storage, protected by the operating system.
13. Children
The app is not directed at children under 13. We do not knowingly collect personal data from children.
14. These web pages
These pages have no cookies, no analytics and no forms, and load no outside fonts. They are hosted on GitHub Pages, which receives your IP address and browser details when your browser requests a page.
15. Changes
We may update this policy as the app changes. Changes will appear here with a new “last updated” date, and material changes will also be announced in the app. If what is sent for cloud summaries changes, the app asks for your permission again.
16. Contact
Heyisoft, heyisoft@gmail.com. See also Contact and support.