Privacy policy

Who provides TapeMemo

TapeMemo team provides TapeMemo for iPhone and Apple Watch and the website tapememo.com. This policy explains what these services process, why, and the choices you have. Contact us through https://www.tapememo.com/support for privacy, deletion or support requests. Features that require an online service work only when that service is available and configured.

Recordings and your local archive

When you start recording, TapeMemo processes audio, recording times and marks. Paired Watch recordings are transferred to your iPhone using Apple's device connectivity; a Watch original is kept until the receiving device acknowledges it. Supported transcription runs on your iPhone. Recordings, transcripts, edits, search indexes, saved AI results and optional speaker references are stored locally in protected app files. We do not operate an online archive of these files.

The recording archive is excluded from iCloud and computer device backups. Export important content yourself. Losing or deleting all device copies can make it unrecoverable. Apple Health, Keychain and copies you export or share have separate storage lifecycles. We cannot erase copies held by recipients or restore an archive that no longer exists on your devices.

Optional AI processing

AI organization, highlights, daily reviews and answers require your separate permission. Selected transcript text, your question and relevant source passages go over HTTPS through TapeMemo's Cloudflare relay to Anthropic Claude; Google Gemini or OpenAI may be used as fallbacks. Our AI request does not include original audio, HealthKit samples or speaker vectors. The text itself can contain names, sensitive information or information about other people; choose it carefully and obtain any necessary permission.

Our relay processes this text to return your result and does not persist transcript or question bodies. That is not a promise of zero retention by AI providers. Their applicable API terms, safety checks, retention policies and legal obligations apply. TapeMemo does not use your archive to train general-purpose AI models. Disabling AI stops future requests; it does not recall a request already received by a provider or remove saved results on your device.

Health, speakers and Apple integrations

If you choose to connect Apple Health, heart-rate and HRV readings are associated with recording times on your iPhone. We do not send HealthKit readings to AI providers or use them for advertising. These views support reflection and do not diagnose stress, emotions or medical conditions. Revoking permission stops future reads; it does not erase Apple's Health database or existing local content.

Optional speaker assistance computes voice references and numerical speaker representations locally. These are not sent to our relay or used for remote identity verification. You can delete your voice reference in the app; speaker labels you previously approved remain until you edit or delete the related content. Optional model downloads require your choice and contact the relevant download host. Exporting or sharing content, or adding selected to-dos to Apple Reminders, happens only through the action you choose. The destination's own privacy rules then apply.

Purchases and essential service records

Apple and RevenueCat process purchases, restore requests and subscription status. TapeMemo uses an installation UUID/appAccountToken, product and transaction identifiers, entitlement status and verification results to provide paid features and enforce allowances. We do not receive your payment-card number. These records can be linked to your installation and purchases; they are not described as anonymous.

Apple App Attest and our service process app/device authentication records, including key identifiers, public keys, signature counters, hashed recovery credentials and short-lived token records to protect access and prevent replay or quota abuse. Requests also expose ordinary network metadata to the infrastructure that handles them. Minimal authentication, purchase, allowance, consent and deletion-version records are distinct from optional usage counts and may remain as necessary for security, service operation, disputes or legal obligations. They are not sent as transcript content to AI providers.

Optional usage counts and operations

Sharing usage counts is off by default and requires a separate choice. If enabled, limited events, UTC event times, recording-segment duration and a hashed installation association may be sent to our service. Verified trial or subscription events may be associated for measurement. Counts contain no audio, transcript bodies, HealthKit samples, speaker vectors or unrestricted error messages. Simulator/debug events are not production analytics; sandbox/TestFlight activity is excluded from the production cohort.

Usage events have a 35-day rolling retention window with daily cleanup. Turning sharing off stops uploads and clears queued local events. A server deletion request may remain pending while offline; the app reports completion only after confirmation. Minimal consent/deletion-version markers remain to prevent late requests restoring deleted events. This does not erase essential purchase or security records.

Operational metrics are disabled unless specifically configured. When enabled they contain fixed route/result categories, latency, token counts and failure/fallback counts, without user identifiers or content. Infrastructure providers apply their own operational and security retention rules. We do not use advertising SDKs, IDFA or cross-company advertising tracking, and we do not sell your personal information or use Health data for marketing.

Website and support requests

Our public information pages use no advertising or analytics cookies. Cloudflare delivers the site and can process IP addresses and technical request information for delivery and security. If you submit a support or privacy request, we collect the reply email address, category and message you provide, a ticket identifier and submission time. Do not submit recordings, health readings, payment-card details, passwords or other people's confidential information. No attachment uploads are offered.

Support requests are stored privately with our Cloudflare infrastructure and expire after 90 days. We use them to respond, handle your rights request and resolve problems; retain your ticket number when following up. We may retain correspondence separately only as necessary for an unresolved request, dispute or legal obligation. A short-lived hashed network identifier is used to limit abuse of the form; it is not an advertising identifier.

Retention, deletion and your choices

Local content stays until you remove it or an enabled retention rule applies. Original-audio cleanup and text deletion are different: removing an original does not automatically remove transcripts, notes or AI results, and playback becomes unavailable. You can inspect, edit, export and delete content in the app, change original retention, delete a voice reference, revoke device permissions, disable AI or withdraw optional usage sharing. Deleting the app does not cancel a subscription, erase exported/paired-device copies or necessarily remove Keychain credentials.

You may request access, correction, deletion, restriction or other rights available where you live through the support page, and may contact your competent privacy authority. We may need proportionate verification and enough information to find a service record. We cannot remotely inspect your local archive, and do not need an audio or Health export to handle an ordinary request. Where required, processing relies on your consent for optional features, providing requested services, security and service interests, or legal duties. Withdrawing consent does not undo prior lawful processing.

Providers, international processing and security

Service providers include Apple, RevenueCat, Cloudflare, Anthropic, Google and OpenAI for the purposes described above. Processing can occur outside your country, including in the United States, subject to applicable transfer safeguards and provider terms. No location-specific hosting or universal provider zero-retention guarantee is made. A provider's role and processing depend on the feature you actually use.

We use protected local files, HTTPS, limited server access and authentication checks. No device or online system can be guaranteed secure. Secure your devices, review what you record and share, and preserve important exports separately. Our service is not directed to children; minors should use it only with the permissions and supervision required by local law. Contact us if a child has supplied data to our online service without necessary permission.

Changes and contact

We publish updates with an effective date and explain material changes through the app or website as appropriate. A policy update is not a substitute for new consent where required. The bundled copy remains readable offline; the website provides the current published copy. Contact TapeMemo team at https://www.tapememo.com/support.