Privacy information

Information stored on your device

The app stores recorded/imported audio, transcripts, summary/title drafts, tags and earlier writing, drawings and preview images in app storage. Preferences include language, an optional saved email recipient, processing/sync state, and Watch transfer queues and receipts. Model-readiness information shown locally includes availability status, checked language and last-check time; it is not a diagnostic upload feature. There is no app account or developer user-profile service.

Past summaries retain the source-transcript copy used to create them. Retranscription replaces the current transcript while earlier summaries and their copies remain. Legacy writing, drawings and images remain read-only and exportable; new creation/editing is unavailable. Earlier revision files can remain. The app requests no photo-library or camera permission; existing drawing preview images were rendered from drawings.

Custom summary instructions, review status and related summary metadata are also stored with the note.

Microphone and local AI

The microphone is used for recordings you start. Transcription uses supported Apple on-device speech resources; the legacy path is limited to 60 seconds or less. Summary and title drafts use Apple’s available on-device FoundationModels model. Compatible hardware, enabled Apple Intelligence, an installed model and supported locale are required for summaries. Speech and summary readiness are separate.

The app has no server speech or external language-model fallback. First use may attempt speech preparation for the selected language; Settings provides status, refresh and retry. Resource preparation can download Apple resources over the internet, while Apple Intelligence preparation follows system settings. This preparation does not upload note content for server AI inference. Apple system services process their own data under Apple settings and policies. Local inference does not establish always-offline operation or corporate security certification.

Optional iCloud, backups and Watch

iCloud Drive sync is off on a fresh install. When enabled, it can automatically transfer saved audio, transcripts, all prior summaries and their source-transcript copies, legacy writing, drawings and related files to your own Apple account after saves, processing completion or app activation. Revision metadata includes note/version identifiers, timestamps, file-verification values and a randomly generated persistent device identifier. Staged recordings and Watch transfer queues are excluded from note sync. Historical revisions and conflicts can remain; turning sync off leaves existing iCloud copies.

iCloud security and OS-managed backups follow Apple account and system settings. The app’s sync switch does not disable device backups. The app does not enable Advanced Data Protection, alter account security settings, or guarantee that standard iCloud Drive is end-to-end encrypted.

Completed Watch recordings enter a transfer queue for the paired iPhone. The iPhone performs local transcription and summary processing and can send a compact result back. Watch originals, transfer state, results and receipts can remain after transfer.

Email, sharing and support

Export creates local files for sharing you choose. A mail draft prefills the note title and latest summary; you can edit the recipient, subject and body. Full-transcript TXT and original M4A attachments are off by default and require selection. You decide the final send in system Mail or the selected sharing app. Selected content can reach that service and recipient. The app does not automatically send mail or store mail-account credentials.

When the app’s composition flow closes, it attempts to delete temporary composition and attachment files. Files may remain if the flow is interrupted or deletion fails. Copies already exported, sent or shared are independently retained by their destination.

From October 5, 2026, support inquiries and emails are subject to deletion without delay once the support purpose has been fulfilled or the information is no longer needed. Include only non-sensitive examples and the error details needed for your request. Do not send original recordings, transcripts, sensitive attachments, account passwords or verification codes as routine support material. Unnecessary information and attachments received, including unnecessary copies downloaded and held by the operator, are also deleted without delay. Information is retained separately only when an actual legal retention obligation applies, with its legal basis and retention period identified.

Retention, Recently Deleted and permanent deletion

Deleting a note moves only this device’s note to Recently Deleted. It has no automatic expiry and remains until restored or explicitly permanently deleted. Restore retains its original identity and assets. Interrupted or failed recordings may remain for recovery; damaged audio is not always recoverable.

Explicit permanent deletion removes the target local repository assets, relevant drafts/receipt metadata and validated app-owned per-note export caches. If cleanup cannot be performed safely, a restorable deleted note is retained for retry. General temporary exports and interrupted composition copies may otherwise persist.

Local deletion, disabling sync or deleting the app does not remove immutable iCloud revisions, Watch originals, other-device notes, previously exported/shared/mailed files or system backups together. Manage each independently in its own location. OS Delete App removes local app data, while Offload App can retain data. Restoring from backup may restore retained data.

After permanent deletion, a minimal local deletion marker containing the note identifier, deletion time and purge state remains to prevent old iCloud or Watch transfers from restoring the note. The marker does not retain its title or note content.

Developer collection, tracking and this website

This notice covers Haru Voice Notes 0.1.0 (9) on iPhone and iPad (iOS and iPadOS), its paired Apple Watch app (watchOS), and this website. These Apple-platform apps contain no Google Analytics, Firebase or advertising SDK, and no developer collection server. The app privacy manifest declares no collected-data categories and tracking disabled. Model preparation, optional iCloud, sharing and OS backups can still use a network.

These static pages contain no third-party scripts, web fonts, client analytics, contact forms or uploads, and the pages themselves contain no cookie-setting code. Email links open your mail app. This website is hosted on GitHub Pages. GitHub logs and stores visitors’ IP addresses for security purposes. GitHub’s processing and retention follow its service policies. See GitHub Pages data collection and the GitHub Privacy Statement.