Privacy Policy

Privacy PolicyVoiceBridge

Last updated: November 2, 2026 · Effective: November 2, 2026 · Applies to VoiceBridge 2.0 and later

中文 · English · 日本語 (if the language versions differ, the Chinese version prevails)

1. Scope

This policy explains how the VoiceBridge iOS app and its companion Apple Watch app (together, "VoiceBridge") handle your data. Sections 2 and 3 cover processing that stays on your device; Sections 4, 5 and 6 cover data that leaves your device and what VoiceBridge servers keep as a result.

2. Processing on your device

• Recording, transcription, speaker separation, silence detection and search are performed by on-device models. Recordings and transcripts are stored locally on your device
• Audio is never uploaded: recordings are not sent to VoiceBridge servers or any third-party server, including when you use cloud features
• Some languages use Apple's on-device iOS speech recognition with on-device processing enforced (requiresOnDeviceRecognition), so audio is not sent to Apple. This capability is provided by Apple; see the Apple Privacy Policy
• Recognition models are large and may need to be downloaded from Apple's content delivery network on first use, then stay on your device; after that, recognition works without a connection
• When you don't use cloud features, recording, transcription and search work in Airplane Mode

3. Apple Watch recording

• Recordings made on the watch are transferred only to VoiceBridge on your own paired iPhone, not through VoiceBridge servers
• Silence detection runs only on your device. Stretches judged silent go to a recycle area first, where you can listen to or restore them during the recycle period; once the period ends, that audio is deleted and cannot be restored

4. Cloud features (optional)

4.1 Which features

Proofread transcript, minutes, single-sentence polish, Ask, Daily Review, topic sorting and Auto-Organize. These features call cloud large language models and are paid with credits (see Section 6). If you don't use them, VoiceBridge's on-device features are unaffected.

4.2 What is sent, and what is not

• Only redacted text is sent: before sending, VoiceBridge redacts sensitive words on your device using your glossary. When you start a task yourself, you can preview the redacted text before deciding to send it. With Auto-Organize on, there is no per-task preview; text is redacted automatically using your glossary, and newly found possible sensitive words are collected and confirmed with you once, in your review
• Along with the text, supporting information needed for that task may be sent, such as the spellings of proper nouns you have confirmed (these entries may include people's names)
• Audio is not sent

4.3 Consent and withdrawal

• VoiceBridge asks for your consent separately before you first use each cloud feature
• Ask, Daily Review and topic sorting combine text from multiple meetings, so the three share one "cross-meeting cloud" consent
• You can withdraw consent at any time in Me › Terms & Privacy. After you withdraw, tasks already paid for and in progress will finish, but no new cloud processing will start. Withdrawing doesn't delete recordings or text on your device, and your credit balance is kept. Agree again whenever you want to use these features

4.4 How VoiceBridge servers handle it

• Text is sent to VoiceBridge servers over HTTPS. The servers work on a "one request, one processing run" basis, and the result is returned to your device in that response
• VoiceBridge servers do not store the text you send or the results, and do not use them to train any model. Progress and output of multi-step tasks are kept on your device
• VoiceBridge servers keep a metadata-only access log for troubleshooting and abuse prevention, deleted after 7 days. It records the time, the first 8 characters of a hash of the device key, request ID, task type, status code, text length (not content), model usage and processing time. Request and response bodies are not written to the log. A separate operations log records only the feature type and character count (no content) and is likewise deleted after 7 days

4.5 Third-party model providers

The text itself is generated by third-party large model providers: VoiceBridge servers pass the redacted text to a provider's API and return the result to you.

What is passed on is limited to the text and instructions needed for that task, and does not include your account identifier or device key. Providers and their servers may be located outside your country or region. How a provider handles the data it receives (including whether it retains it or uses it for training) is governed by its own privacy policy and terms and is outside VoiceBridge's control; where this policy says "not stored, not used for training", it refers only to VoiceBridge servers.

5. Send to AI apps (system clipboard)

You can also hand meeting content to a third-party AI app of your choice (such as ChatGPT, Claude, Gemini, DeepSeek, Doubao, Kimi, Tongyi Qianwen or Zhipu Qingyan):

• Content is passed via the system clipboard and you paste it into the app yourself; this does not go through VoiceBridge servers
• VoiceBridge asks for your consent before first use, and you can withdraw it in Me › Terms & Privacy
• Once data is in a third-party AI app, it is governed by that app's own privacy policy

6. Credits, purchases and the server-side ledger

• Recording, transcription, search and export never use credits. Credits are used only for the cloud features in Section 4
• Credits are sold as consumable in-app purchases. They are not a subscription and do not renew automatically. All payments are handled by the App Store; VoiceBridge has no access to your card or Apple Account details
• To keep accounts, VoiceBridge servers maintain a credit ledger that records:
  • An anonymous account identifier: a random string generated by VoiceBridge on your device, used to identify your credit ledger. VoiceBridge servers see only this string and don't know your name, email, phone number or Apple Account
  • Credit balance and purchase records: App Store transaction ID, credits granted, price and currency, and time
  • Usage records: feature type, billed characters, credits deducted, time and task status (no text content)
  • Which device keys an account has been used with: to stop the same device from repeatedly claiming new-user bonus credits
• This information is used to keep balances and charge credits, restore your balance on a new device, reconcile purchases and handle refunds, and prevent abuse
• Usage records are kept for 12 months, then rolled up into monthly statistics without account identifiers, and the detailed records are deleted
• Purchase records (transaction ID, price and currency) are kept for as long as the account exists, to reconcile credit balances, handle Apple refunds and reconcile accounts. If you ask by email for them to be deleted, we delete them within 30 days, except where law or Apple reconciliation obligations require us to keep them

7. Device verification and abuse prevention

Cloud requests use a device key generated by Apple's App Attest service to confirm that requests come from a genuine VoiceBridge app on a real device, and to apply rate limits and prevent abuse. The device key does not identify you and is not used to track you across apps.

8. What we don't do

• No third-party analytics, advertising or tracking SDKs, and no ads in the app
• No account required; we don't collect your name, email or phone number
• We don't sell your data

9. Children's privacy

VoiceBridge is not directed at children under 13, and we do not knowingly collect personal information from children.

10. Your choices

• When you don't use cloud features, your recordings and text stay only on your device
• Withdraw cloud consent at any time in Me › Terms & Privacy
• Delete recordings, or delete the app, to remove data from your device
• To ask about or delete ledger records tied to your anonymous account identifier, email us at the contact address below

11. Changes to this policy

When this policy changes, we will post the new version on this page and update the date. Material changes to how data is used will also be announced in the app.

12. Contact us

For privacy questions, contact [email protected]