Data Handling
Last updated
A short summary of what Cleft collects, where it flows, and how long it is kept. For the full, binding detail, see our Privacy Policy and our vendor transparency page.
What we collect
- Voice & content: recordings, transcripts, notes, summaries, tags, and your app preferences.
- Account: email address, user ID, and subscription status.
- Usage analytics: anonymous feature events, performance metrics, and crash reports. No advertising identifiers.
Where it flows
- On your device: voice transcription runs entirely on-device with Whisper. Your audio is never sent to a server.
- EU storage: notes sync through AWS in the EU (Ireland, eu-west-1), encrypted at rest with AES-256-GCM.
- AI features: only note text (never audio) is sent to OpenAI or Groq for summarisation, under DPAs that prohibit training on your data.
How long we keep it
- Notes, transcripts, and audio are kept until you delete them (or delete your account).
- On account deletion, your personal data is removed immediately, with no backup retention.
- Temporary audio files are deleted after successful transcription unless you choose Keep Audio. Anonymized crash reports are kept for 90 days.
Your control
You can access, export, correct, restrict, or delete your data at any time. Email privacy@cleftnotes.com or our Data Protection Officer at dpo@cleftnotes.com. See the Privacy Policy for the full list of rights by jurisdiction.