Privacy Policy
Last updated 16 August 2026
Saymory holds the things you say when you are thinking out loud. That is about as personal as app data gets, so this policy is written to be read rather than to be survived. It describes exactly what stays on your iPhone, what leaves it, who else touches it, and how to get rid of it.
Saymory is an iPhone app published by the developer of Saymory ("we", "us"). It is available worldwide from the Apple App Store.
The short version
- Your recordings stay on your iPhone for ordinary voice notes. Speech is turned into text by Apple's on-device recognition, and the audio file is not uploaded.
- Audio is only uploaded in two cases: Conversation mode, which needs to tell speakers apart, and when you explicitly tap "Improve transcript".
- Note text is sent to AI providers to write your summaries, extract your action items, and answer your questions — and for nothing else.
- Nothing you write is used to train AI models, and nothing is ever sold or shared with advertisers.
- You can switch the cloud off completely. Local-only mode in Settings stops every cloud feature.
- You can delete everything, including your whole account, from inside the app.
What Saymory stores on your device
Whether or not you have an account, the following live in the app's private storage on your iPhone:
- Audio recordings you make, until you delete them or your audio-retention setting removes them.
- Transcripts, note text, photos you add to notes, and the text read out of those photos.
- Your settings, and a local index that lets the app search your notes on-device.
This data is protected by iOS app sandboxing and your device passcode or biometric lock. If you never sign in and never turn on cloud features, this is the only place your notes exist — we cannot see them, and we could not hand them over if asked.
What we collect when you have an account
| Data | Why |
|---|---|
| Email address | To create and sign you into your account. If you use Sign in with Apple and choose to hide your address, we only ever see Apple's relay address. |
| Note text and transcripts | Sent to produce summaries, action items, and answers. Stored in your account only when cloud backup is on. |
| Audio | Only for Conversation mode or "Improve transcript" — and only to produce the transcript. Audio is not stored on our servers. |
| Usage counters | Counts of questions asked, summaries generated, and minutes of conversation processed — used to apply plan limits and to keep track of costs. These are numbers, not content. |
| Subscription status | Whether you are on the free or Pro plan, so the app knows what to unlock. Handled through Apple and RevenueCat; we never see your payment details. |
| Crash reports (optional) | Only if you leave "Share crash reports" on. These contain call stacks and device model — never your notes, transcripts, or audio. |
We do not use advertising identifiers, we do not track you across other apps or websites, and we do not build advertising profiles.
Who processes your data
To provide the features described above, Saymory shares the minimum necessary with these processors. They act on our instructions and may not use your content for their own purposes.
| Processor | What it receives | What for |
|---|---|---|
| OpenAI | Note text and transcript text; your question when you ask one | Writing summaries and action items, creating the search index, answering questions |
| AssemblyAI | Audio, only for Conversation mode or "Improve transcript" | Separating and labelling speakers, and transcribing languages your iPhone cannot handle on-device. The audio and its transcript are deleted from AssemblyAI as soon as we receive the result. |
| Supabase | Account record, and your notes when cloud backup is on | Database and authentication |
| Apple | Purchase and subscription events | Processing payments and managing subscriptions |
| RevenueCat | An anonymous user identifier and your subscription status | Telling the app which plan you are on |
These providers process data in the United States and other countries. Where required, transfers rely on the providers' standard contractual clauses and equivalent safeguards.
On-device processing is not sharing. Speech recognition and reading text out of your photos are performed by Apple frameworks running on your iPhone. That content is not sent to us or to anyone else.
Optional connections you control
- Calendar. If you turn on Calendar context, Saymory reads the events around a recording so it can name a meeting note and suggest who was in the room. It is read-only, it stays on the device except for attendee names passed to speaker detection, and it never writes to your calendar.
- Reminders and notifications. Task reminders and the daily recap are scheduled locally on your iPhone. Nothing is sent to a server to deliver them.
How your data is protected
- Everything travels over encrypted connections (TLS).
- Note content, transcripts, titles, and task text stored in your account are additionally encrypted by the app before they reach the database, using AES-256-GCM. The key is held in a separate secrets vault, so anyone reading the database directly sees ciphertext.
- Every row is scoped to your account with database-level access rules. Audio is never stored on our servers — when Conversation mode sends it, it is processed to produce your transcript and discarded.
No system is perfectly secure, and we will not claim otherwise. What we can say is that the design keeps the most sensitive material — audio — on your device by default.
How long it is kept
Your notes are yours for as long as you want them: nothing you wrote or recorded is deleted on a timer you did not set. Everything else — the operational records our servers produce while serving you — expires automatically on the schedule below, enforced by a job that runs every day rather than by a promise to remember.
| Data | Kept for |
|---|---|
| Notes, transcripts and search index in your account | Until you delete the note, turn cloud backup off, or delete your account. Deleting a note removes its transcript, its search index entries and its audio. |
| Recordings on your device | Until you delete the note, or the audio-retention window you chose in Settings — from one day up to forever. Transcripts stay when the recording is reclaimed. |
| Audio uploaded for transcription | Deleted from our storage as soon as the transcript comes back, and deleted from the transcription provider in the same step. It is never kept as a file on our servers. |
| The transcript on a finished transcription job | Cleared once your device collects it, and within 24 hours in every case — even if your device never comes back. |
| Transcription job records (status and timings, no content) | 30 days after the job finishes or fails. |
| AI processing log (which model ran, how long, success or failure — not your text) | 90 days. |
| Error logs, crash reports and product milestones | 180 days. |
| Usage counters and subscription records | For the life of the account, and after deletion where tax and accounting law requires us to keep a record of a payment. These are numbers, not content. |
| Data sent to AI providers | Kept by them only as long as their own operational policies require, and not used to train their models. |
Two things we want to be explicit about, because plenty of apps do the opposite. Ending a subscription does not delete anything. If your Pro plan lapses or moves to another account, you keep every note; only the paid features stop. Nothing of yours is held hostage to a payment. Deleting your account is immediate and real. Your notes, transcripts, audio and search index are erased at once, not queued for a grace period. Your crash reports go with them. The error and AI processing logs are unlinked from you — your user id is stripped out, so what remains cannot be traced back — and then expire on their own schedule. Residual copies can survive in encrypted database backups for up to 30 days before those backups roll off.
If an account goes unused for 24 months we may close it and delete its data, after emailing the address on the account first and giving you a chance to keep it.
Your choices and rights
- Turn the cloud off. Settings → Privacy → Local-only stops all cloud processing.
- Keep notes off our servers. Leave cloud backup off and your notes stay on the device.
- Export everything. Settings → Export all my data gives you your notes as Markdown; any note can be exported as PDF.
- Delete an individual note, with its audio, transcript and index entries.
- Delete your account from Settings. This erases your account record, notes, transcripts, audio, and search index. It cannot be undone.
- Opt out of crash reports with the toggle in Settings → Privacy.
Depending on where you live, you may also have the right to access, correct, port, or object to our processing of your data, and to complain to your local data protection authority. The controls above cover most of this directly; for anything else, email us and we will action it.
Children
Saymory is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has provided us with personal data, contact us and we will delete it.
Changes to this policy
If this policy changes in a way that materially affects you, we will update the date at the top and, for significant changes, tell you in the app before the change takes effect.
Contact
Questions, requests, or complaints: droidappbdinfo@gmail.com. We aim to reply within a few business days.