Notelume is a local voice recorder with optional paid cloud AI tools. No Notelume account is required. This policy explains what leaves your device when you choose those tools.
Recordings, imported files, notes, photos and saved results are stored in the app's local library. Microphone permission is requested for recording. Optional live captions use on-device speech recognition when supported; they do not use our AI gateway. Device backups are controlled by your Apple settings. We do not provide a cloud library or phone-call recording service.
Before a new AI request, the app describes the data and recipients and offers Cancel. For transcription, selected audio is uploaded through our Cloudflare processing service to OpenRouter, which routes the Whisper model to DeepInfra, Together or Groq. For summaries and questions, transcripts, written notes, instructions and questions are sent through Cloudflare and OpenRouter to DeepInfra hosting the DeepSeek model. The global question feature sends text from all non-deleted recordings, as explained in its confirmation. Photos are not uploaded by these AI features. Declining AI processing does not prevent local playback or the available local recording features. AI output can be inaccurate; check important information against the source. Only share recordings with the participants' permission and any other required rights.
We request routes that disallow provider data collection. This is a routing control, not a guarantee of zero retention or a promise that third parties keep no security or operational records. Processing may occur outside your country. Each provider's terms apply:
Audio is forwarded for processing and is not intentionally stored as an audio file by our gateway. Temporary transcripts, prompts and AI results are stored while processing and retrieving results. Saved results are cleared when the app acknowledges local saving; unclaimed content expires after 24 hours and is removed during the next request or scheduled cleanup, normally within an additional hour. Content-free job identifiers and status records may remain for up to 35 days; monthly usage totals are retained for about three months. Installation identifiers and purchase information are used to enforce subscription access and the recording trial. Authentication sessions expire after 30 days. Short-lived hashed network identifiers protect sign-in endpoints from abuse. Cloudflare receives normal connection information such as IP addresses. These technical identifiers are not anonymous simply because no account is required.
Apple processes payments; we do not receive your card details. Adapty receives an installation/customer identifier, subscription transactions and related SDK events to validate access and restore purchases. IDFA and IP-address collection in the Adapty SDK are disabled in our app. We do not sell recordings or use advertising tracking. Provider and platform retention policies may differ from our gateway retention.
You can decline each new AI upload, delete local recordings, and manage subscriptions in Apple subscription settings. Deleting a recording also requests deletion of its gateway job when available. If offline, temporary gateway content still expires as described above. Local deletion does not recall content already processed by a third party or delete Apple purchase records. Contact us for access or deletion requests concerning information we control; we may need enough information to identify your installation. Do not email sensitive recordings or API keys.
Operator: Yaqian Li. Privacy and support: boserviceteam001@gmail.com.