Privacy Policy

Last Updated: September 10, 2025
Effective: September 10, 2025

For the simplified version, visit: https://learn.cleftnotes.com/trust/privacy-policy

Section 1: Data Collection & Usage Summary

What We Collect:
- Voice recordings and transcripts
- Account information (email, display name)
- App preferences and settings
- Usage analytics (anonymous)

How We Use It:
- Provide voice-to-text services
- Sync across your devices
- Improve our service
- Customer support

What We Don't Do:
- Never train AI on your data
- Never sell your information
- Never share without permission
- Never access your private notes

Section 2: How We Protect Your Data

Technical Safeguards:
- End-to-end encryption for all data transfers
- AES-256 encryption for stored data
- Local processing using the Whisper model
- Secure cloud storage on AWS

Organizational Measures:
- Limited employee access
- Regular security audits
- Vendor agreements requiring data protection
- Incident response procedures

Privacy by Design:
- Minimal data collection
- Purpose limitation
- Default privacy settings
- Regular data deletion

Section 3: Your Rights & Control

You Can Always:
- Access your data
- Export everything
- Delete your account
- Correct inaccuracies
- Opt-out of communications
- Request data portability

GDPR Rights (EU Residents):
- Right to be informed
- Right to access
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to data portability
- Right to object
- Rights related to automated decision making

CCPA Rights (California Residents):
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to say no to the sale of personal information
- Right to access personal information
- Right to equal service and price
- Right to deletion

Section 4: Who We Share Data With

Service Providers (Data Processors):
- AWS (cloud storage)
- OpenAI (text processing only - never audio)
- RevenueCat (subscription management)
- Apple (App Store payments)

We Never Share With:
- Advertisers
- Data brokers
- Marketing companies
- Anyone else without your permission

For complete vendor transparency, visit: https://learn.cleftnotes.com/trust/vendors

Section 5: Contact & Data Protection

Data Protection Officer:
Jonny Cosgrove
Email: DPO@cleftnotes.com

Privacy Inquiries:
Email: privacy@cleftnotes.com

Data Access Requests:
Form