What we keep
Built so there is nothing to leak.
Not a policy you have to trust. An architecture that never keeps the thing in the first place.
- It expires
- A voice note gets twenty-four hours from the moment it is heard. Then the audio is deleted from storage and the record of it is scrubbed. This is not a retention policy we promise to honour. It is a job that runs whether anyone is watching or not.
- It never leaves the phone
- Transcription happens on the device, using what the phone already provides. No audio is uploaded to be read, scored, or trained on. There is no transcript on a server because no transcript is ever made on one.
- It shows eight words
- A tile previews only the opening of a note, so you can tell whether this is a good moment before you listen. The preview is produced and stored locally, on the phone of the person receiving it.
- You can keep a few
- Some things deserve to outlive a day. Star a note and it stays until you say otherwise. That is a deliberate exception you make, one note at a time, rather than a default that quietly keeps everything.
What we do hold
The short list.
Your phone number, because that is how people find you. Who is on your panels, because the grid has to exist somewhere. The warmth values, because the drift engine has to remember. Audio, but only until it has been heard and the day is up.
That is the whole of it. No address book upload, no call log, no advertising identifiers, and nothing sold to anyone, because there is no version of this product where that is the business.
