Privacy

Privacy Policy

Last updated September 13, 2026

Uplifty Voice is built to catch a thought before it fades, and to keep that thought yours. This page explains, plainly, what the app collects, where your notes live, and the choices you have. If anything here is unclear, email privacy@uplifty.me.

Who is responsible for your data

Uplifty Voice is made by Uplifty, a business registered in Amsterdam, the Netherlands, KvK 96548894. Under the GDPR, Uplifty is the data controller for everything described on this page: we are the ones who decide what is collected and why, and the ones you can hold to it. Write to privacy@uplifty.me and a person replies.

What Uplifty Voice does

You press and hold, speak, and Uplifty Voice turns what you said into text, gives it a title, and files it for you. Transcription runs one of two ways. By default it runs on Uplifty transcription, our own service, which handles languages automatically. If you turn on “Keep everything on this phone”, or if you have no connection, it runs on your device using Apple’s speech recognition and the audio never leaves your phone.

What the app collects

Voice recordings

When you record a note, the app captures the audio. It is used only to produce your transcript. When Uplifty transcription handles it, we do not keep the audio after the transcript comes back. In on-device mode, the audio never leaves your phone.

Transcripts and note details

The transcribed text, plus a short title, the time and duration of the recording, an optional quality rating you can give it (1 to 7), any label you add, and which transcription engine produced it.

A device identifier

The app sends a random, per-install identifier with Uplifty transcription requests. It anchors your free transcription minutes, so your balance is still yours after a sign-out or a reinstall. It is not your name, and it is not linked to your identity.

Your IP address

When the app calls Uplifty transcription, our server sees the network address the request came from, the way every web server does. We use it for exactly one thing: counting requests per minute and per day, so that no single caller can drain a service everyone shares. It is kept for 2 days and then deleted automatically, it is never attached to your notes, and it is never used to work out who or where you are.

No account, no email, no name

Uplifty Voice does not ask you to sign up. Your notes are owned by a silent, anonymous account created on first launch. Connecting an email to carry notes to a new phone is optional and, when offered, entirely your choice.

Why we are allowed to use it

European law asks us to name the legal ground for each thing we do, not just to describe the thing. Most privacy policies skip this part. Here it is.

• Your notes, the transcription, and the sync: to deliver what you asked for. Article 6(1)(b), performance of a contract. Saving a note and turning speech into text is the app itself. There is no version of Uplifty Voice that does not do this.
• Rate limiting and keeping the service up: our legitimate interest. Article 6(1)(f), in preventing abuse of a shared service and keeping it available to everyone else. We use the least that works: one network address, counted, kept 2 days, never profiled.
• Knowing whether the app works: our legitimate interest. Article 6(1)(f), in improving the product. This means counts and averages over the notes table, such as how many notes were captured and how people rated the transcripts. It does not involve reading what you wrote. You can object and we will exclude your account, see Your rights.
• Anything we ask you to opt in to: your consent. Article 6(1)(a). Today this list is empty, because the app ships no third-party analytics at all. If that ever changes we will ask first, and you can withdraw whenever you like.
• Records we are required by law to keep, such as tax records if you buy a subscription. Article 6(1)(c). Apple takes the payment and holds the card details, never us.

How transcription works

Uplifty transcription (the default)

Your audio is sent over an encrypted connection to our transcription service, which forwards it to OpenAI using a key held on our server, never inside the app. Under OpenAI's API terms, audio and text sent to the API are not used to train their models. We do not store the audio after transcribing it.

On your device (Apple)

Uses Apple's on-device speech recognition. The audio and the resulting transcript stay on your phone.

“Keep everything on this phone”

A switch on the Account screen that forces on-device transcription and turns off all cloud sync. With it on, nothing about your notes, including the audio, the text, and your labels, is sent off your phone.

Where your notes are stored

• On your device first. Every note is saved locally the moment you finish speaking, so a note is never waiting on a connection.
• In your account, on our database. Unless you are in on-device-only mode, your notes and labels are also saved to our database, hosted by Supabase in the United States, attached to your account. It is a shared database, not a server of your own, and what keeps your notes yours is an access rule enforced on every single read and write: a request carrying your account can only ever touch rows belonging to that account. This copy is what brings your notes back after a reinstall or on another device.
• No Notion. Earlier versions filed notes into a Notion database. That is removed. Notes now live only on your device and in your account on our database.

Where in the world your data is

This is the kind of thing a privacy policy usually leaves vague, so we would rather be exact.

• Your notes are stored in the United States. Our database is hosted by Supabase in their us-east-1 region. The copy that brings your notes back after a reinstall lives there, not in Europe.
• Transcription happens in the United States. Our server forwards your audio to OpenAI's API there, and hands you back the text.
• What makes that lawful. Both are bound by a signed data processing agreement containing the European Commission's Standard Contractual Clauses, which is the transfer mechanism set out in Article 46 of the GDPR. They process your data on our instructions and for no purpose of their own.
• If you would rather it never left your phone, turn on Keep it all on this device in the app. Nothing is sent anywhere in that mode, and there is no transfer to discuss.

The services we rely on

• OpenAI is the transcription service behind Uplifty transcription. It receives the audio only for that request, and only when transcription is not running on your device.
• Supabase stores your private notes and labels in the United States, and provides the anonymous sign-in that secures them to you.
• Apple distributes the app (through TestFlight and the App Store) and provides standard device and speech services. Where a paid plan is offered, Apple is also the seller: it takes the payment and holds the payment details. We never see or store your card, and Apple tells us only whether a subscription is active.
• Website analytics. This website (uplifty.me/voice) uses PostHog in cookieless mode, hosted in the EU, to count visits and understand which sections people read. It sets no cookies and does not follow you across other sites. The app itself sends no third-party analytics. How the app is doing is measured from your notes in our own database, in aggregate, and never from anything on your phone.

How long we keep it

• Your notes and labels: until you delete them. There is no expiry date, because a thought you caught two years ago is still yours. Deleting removes the row itself, not a flag on it.
• Your audio: not kept at all. Our server holds it for the seconds it takes to pass it on, and stores it nowhere. Under OpenAI's API terms it is not used to train their models, and OpenAI deletes it after a limited abuse-monitoring window of their own.
• Your IP address: 2 days, then deleted automatically.
• Your transcription usage: while your account exists. Seconds used and which engine ran, so your minutes balance is correct. It holds none of what you said.
• When you delete your account, every one of the above that is tied to it goes in the same action.

What we do not do

We do not sell your data. We do not use it for advertising. We do not build an advertising profile of you or share your notes with anyone beyond the services above that are needed to run the app.

Your rights

If you are in the EU, the EEA, or the UK these are yours by law. We honour them for everyone, because drawing a line by passport would be a strange way to treat people.

• See what we hold (access). Export, in the app, hands you all of it as JSON and CSV.
• Correct it (rectification). Every note is editable, including the transcript.
• Delete it (erasure). One note at a time, or the whole account, from the Account screen.
• Take it elsewhere (portability). The same export, in a format another tool can read.
• Object, or ask us to pause (objection and restriction). You can object to the aggregate product measurement described above and we will exclude your account from it.
• Withdraw consent for anything you opted into, without affecting what came before.

Email privacy@uplifty.me. We answer within one month, which is what the GDPR asks of us, and usually a great deal faster than that.

And you can complain about us. If you think we have handled your data badly, you can lodge a complaint with a data protection authority. Ours is the Dutch Autoriteit Persoonsgegevens, and you can also go to the one where you live. We would rather you wrote to us first, but you are not obliged to.

Security

Data travels over encrypted (HTTPS) connections. Your cloud notes are isolated per user, so no other user can read them. No method of storage or transmission is ever perfectly secure, so we design for the least data collected and the least exposure: the transcription key stays on our server, the app holds no private keys, and on-device mode lets you opt out of the cloud entirely.

Who at Uplifty can see your notes

We would rather say this plainly than let you assume it. Your notes are not end-to-end encrypted, so the people who run Uplifty have the technical ability to read what is stored, in the same way as any service that holds your data for you. We do not read your notes. We look at counts and averages to understand whether the app is working, not at what you wrote, and we access an individual note only if you ask us to for support or if the law requires it.

If you would rather no one had that ability, turn on Keep it all on this device in Settings. Nothing leaves your phone in that mode, and there is nothing on our side to read.

Children

Uplifty Voice is not directed to children. In the Netherlands, where we are based, a person under 16 needs a parent's permission for a service like this to use their data, and we do not knowingly collect anything from anyone under 16. If you believe a child is using the app, write to privacy@uplifty.me and we will delete the account.

A young app, still moving

Uplifty Voice is new and changing quickly. As it develops, features and the details of how data is handled may change with it. When they do, we update this page and the date at the top, and we will not quietly widen what we do with your data without saying so here first.

Changes to this policy

We may update this policy from time to time. Any material change will be reflected here, with a new "last updated" date.