Privacy

Privacy Policy

Last updated October 29, 2026

Uplifty Voice is built to catch a thought before it fades, and to keep that thought yours. This page explains, plainly, what the app collects, where your notes live, and the choices you have. If anything here is unclear, email privacy@uplifty.me.

Who is responsible for your data

Uplifty Voice is made by Uplifty, a business registered in Amsterdam, the Netherlands, KvK 96548894. Under the GDPR, Uplifty is the data controller for everything described on this page: we are the ones who decide what is collected and why, and the ones you can hold to it. Write to privacy@uplifty.me and a person replies.

What Uplifty Voice does

You press once, speak, and Uplifty Voice turns what you said into text, gives it a title, and keeps it. Transcription runs one of two ways. By default it runs on Uplifty transcription, our own service, which handles languages automatically. If you turn on “Keep everything on this phone”, if you have no connection, or if your minutes have run out, it runs on your phone using the phone’s own speech recognition: Apple’s on iPhone, Android’s on Android. Both are described below.

Uplifty Voice is an iPhone app and an Android app, and this policy covers both. Where they differ, it says so.

What the app collects

Your account, and the ways to sign in

When you first open Uplifty Voice, it creates an anonymous account for you in the background. You do not sign up, and capturing a note never waits on it. That account is a random ID, and your notes belong to it.

You can add a way to sign in, so you can open the same notes on another phone or get back in after a reset. It is optional. The iPhone app offers all three below, and the Android app offers email:

• Email. We send a sign-in link to the address you give, and keep the address on your account.
• Sign in with Apple. Apple tells us your email address and, if you share it, your name. If you choose Hide My Email, Apple gives us a private relay address instead, and we never see your real one.
• Sign in with Google. Google tells us your email address, your name and a link to your profile picture. We do not use the picture.

On older accounts, adding a way to sign in also adds free transcription minutes. We use your address to sign you in and to write to you about your account or this policy. Anything more needs a yes from you first, see Email from us.

Sign-in emails are sent for us by Supabase, which runs our sign-in and database, and delivered by Resend, an email delivery service, from its servers in Ireland. Each time one is sent, we note the time against your account, so one account cannot use up a sending limit everyone shares.

Voice recordings

When you record a note, the app captures the audio and uses it to make your transcript. When Uplifty transcription handles it, our server passes it on and stores it nowhere.

On iPhone, a copy of each recording also stays in the app’s own storage on your phone. Deleting your account or the app removes them all; deleting a single note does not remove its recording. They are included in your phone’s own backups, such as iCloud Backup, if you use them.

On Android, the recording is deleted from your phone as soon as its note is saved, and the app is left out of your phone’s backups.

Transcripts and note details

The text of each note (transcribed or typed), a short title, when you recorded it and how long it ran, any label you add, whether it is archived, and an optional quality rating from 1 to 7. We also keep a few technical details with each note: which transcription engine was asked for and which one actually ran, how the capture started (for example the Action Button or inside the app), whether the app was already open, and the app version. If you used an early test version, your older notes may also carry the email address you entered then, and a link to the Notion page they were first filed to.

Notes can hold anything you say, including sensitive things about you or other people. We store them like any other note, only for you, and never analyse what they say.

Labels and your dictionary

Your labels (name, colour and order) are saved with your notes. Words you add to your dictionary are stored on your phone, and are sent with your audio to Uplifty transcription so names and terms come out spelled your way.

A device identifier

On iPhone, the app uses an identifier that Apple gives each app maker for your phone. It is the same for all Uplifty apps on that phone and different for every other company’s apps, so it cannot follow you across other apps. The app saves it so it stays the same after updates. On Android, the app makes a random identifier of its own when it is installed. No other app can read it, and it is gone when the app is uninstalled. Either way, it is sent to us in two places:

• With each Uplifty transcription request, to tie your free minutes to the phone. If a new account appears on a phone we already know, for example after a sign-out, it continues from that phone’s remaining minutes instead of starting a new allowance.
• Each time the app opens, with your account ID, the app version and the time, so we can count how many installs actually open the app.

We store it with your account ID, so if you add a way to sign in, it is linked to that account. We do not use it for advertising or share it. It is not sent while Keep everything on this phone is on.

Your network address and device type

Every server you connect to sees the network address (IP address) your request came from. Here is where ours ends up:

• Rate limiting. When the app asks for Uplifty transcription, or an AI assistant connects, our server counts requests per network address, per minute and per day, so no single caller can drain a service everyone shares. These counts are kept for 2 days and then deleted automatically.
• Your sign-in. Our sign-in service, run by Supabase, records the network address and the app and system version of each signed-in session. It keeps them while the session is active, which for the app is usually as long as it stays installed. We also use them to tell accounts made by our own testing apart from real people, so tests do not count in our numbers.
• Technical logs. Supabase keeps logs of requests to our database and server, including the network address, for 7 days.

We never attach a network address to a note, and never use it to identify or locate you.

Transcription usage

For each Uplifty transcription we record your account ID, the device identifier, the seconds used, which model ran, and the time. It holds nothing you said. We use it to keep your minutes balance right and to see how well each transcription engine works, by comparing it with the ratings people give.

Purchases

Plus is sold on iPhone only, for now; the Android app sells nothing. Apple sells Plus and handles the payment. We never see your card or your Apple ID. When you buy, the app gives Apple your account ID, so Apple’s notices about your subscription reach the right account. From those notices we keep your plan and product (for example monthly or yearly), when the current period ends, when Apple last updated it, and Apple’s reference number for the subscription. If something needs fixing, we can look the subscription up with Apple using that number, which also tells us things like whether it was a test purchase and which country’s App Store it came from.

Feedback you send us

• What should we build next? In Settings, on iPhone. We keep your answer, anything you write in the box, and whether you turned on Tell me when something ships, with your account ID. If you turned it on, we may email the address on your account when something ships, and for nothing else. To stop, send the form again with the switch off, or email us.
• Send feedback. Opens your mail app with four lines already filled in: the app version, your iOS version, your transcription engine, and whether Keep everything on this phone is on. You can delete them before you send. On Android it fills in only the subject, with the app version. Our email runs on Google Workspace.

Email from us

Two kinds of email need your yes, and both start off.

• Email me news. Offered right after you sign in, and in Account. If you turn it on, we may send new features, tips for capturing and the occasional offer for Uplifty Voice to the address on your account, at most twice a month. Every one of those emails has a link to stop them, and the switch in Account works too. Each time you turn it on or off, we keep that choice with the exact words you saw and the address it was for, so we can show what you agreed to.
• Tell me when something ships, described above: only when something ships, and nothing else.

We send Email me news through Resend, an email delivery service, from its servers in Ireland. It receives your address and the email itself, to deliver it and for nothing else.

On your Lock Screen and in notifications

On iPhone, while you record, your Lock Screen shows the recording, and briefly the new note’s title. On Android, a notification shows the recording while it runs, and, if you allow notifications, confirms a note kept in the background. Your phone draws these itself; nothing is sent.

Why we are allowed to use it

European law asks us to name the legal ground for each thing we do, not just to describe the thing. Most privacy policies skip this part. Here it is.

• Your notes, transcription and sync, your account and sign-in, your minutes and your subscription: to deliver what you asked for. Article 6(1)(b), performance of a contract. Saving a note and turning speech into text is the app itself.
• Keeping the service safe and fair: our legitimate interest. Article 6(1)(f). This covers rate limiting by network address, the records our sign-in service keeps, technical logs, the limit on sign-in emails, and tying free minutes to a phone so they cannot be claimed over and over.
• Knowing whether the app works: our legitimate interest. Article 6(1)(f). We look at counts and averages: how many installs open the app, how many notes are captured and how, how transcripts are rated and which engine made them, and how many people add a sign-in or subscribe. None of it involves reading what you wrote. To keep our own tests out of these numbers, we also look at the device type and network address of sign-in sessions. You can object and we will exclude your account, see Your rights.
• Your answers to What should we build next?: our legitimate interest in deciding what to build. Article 6(1)(f).
• Anything you opt in to: your consent. Article 6(1)(a). Today that is three things: Email me news, Tell me when something ships, and connecting an AI assistant, which you agree to on the Allow screen, one assistant at a time. You withdraw by turning the switch off, using the link in any of those emails, or removing the connection. The app ships no third-party analytics. If that ever changes, we will ask first.
• Purchases. Apple is the seller, and keeps the sales and tax records.

How transcription works

Uplifty transcription (the default)

Your audio, with your dictionary words, is sent over an encrypted connection to our transcription service, which forwards it to OpenAI using a key held on our server, never inside the app. Under OpenAI’s API terms, audio and text sent to the API are not used to train their models. We do not store the audio after transcribing it.

On your device (Apple)

Uses Apple’s on-device speech recognition, and the audio and transcript stay on your phone. If your phone or language does not support on-device recognition, iOS sends the audio to Apple’s speech service instead, under Apple’s privacy policy. With Keep everything on this phone on, that never happens: the note is saved without a transcript instead.

On your device (Android)

Uses Android’s on-device speech recognition, and the audio and transcript stay on your phone. Some phones have it without your language yet. The app then asks the phone to download the language, and until it has, that note goes to the phone’s standard speech recognition service, which may send the audio to the company that provides it, often Google, under that company’s privacy policy. With Keep everything on this phone on, the app never uses that service, and the audio stays on your phone.

“Keep everything on this phone”

A switch in Account. With it on, transcription runs on your phone, and no audio, transcript, title or label is sent anywhere. Two things to know. Notes already saved to your account before you turned it on stay there until you delete them. And the app keeps its anonymous account signed in with our sign-in service, which sends your account ID, your network address and the app version, but nothing from your notes.

Where your notes are stored

• On your device first. Every note is saved locally the moment you finish speaking, so a note is never waiting on a connection.
• In your account, on our database. Unless Keep everything on this phone is on, your notes and labels are also saved to our database, hosted by Supabase in the United States, attached to your account. It is a shared database, not a server of your own, and what keeps your notes yours is an access rule enforced on every single read and write: a request carrying your account can only ever touch rows belonging to that account. This copy is what brings your notes back after a reinstall or on another device.
• Notion, in early test versions only. Test versions before July 24, 2026 also copied notes into a Notion database we run (Notion Labs, United States). That stopped then, and the database holds no one’s notes but our own.

Connecting an AI assistant

You can let an AI assistant you already use, such as Claude (by Anthropic), ChatGPT (by OpenAI) or Gemini (by Google), read your notes. Nothing is connected unless you connect it: the assistant shows a code, and you approve it in the app on your phone, where the screen names the assistant and what it gets.

• What the assistant receives. When you ask it about your notes, it requests them from us and we send the ones it asks for: titles, transcripts, dates, durations, labels, whether a note is archived, and how many notes each label has. It never receives your audio, notes you keep only on your phone, or anything else about your account.
• What it can do. Read notes and labels, and archive notes you are done with, which you can undo in the app. It cannot edit or delete anything.
• Who handles your notes after that. The company behind the assistant, under its own privacy policy, as with anything else you share with it. It is not working for us, and we do not control what it does with what you send it.
• Your control. Every connection is listed in the app under Settings, Connections. Removing one cuts the assistant off at its next request.
• What we keep about a connection. The assistant’s name, when you connected it and when it last read your notes, and a log of which actions it took and when, not their content. Its access codes are stored only as one-way fingerprints, never the codes themselves. After you remove a connection, we keep that record and its log, marked as removed, until you delete your account.
• While you connect. A request to connect is open for five minutes at most. While it is, we note which kind of browser started it, such as “Chrome on Mac”, so the Allow screen can show it to you. The request is deleted within an hour of being started.

Where in the world your data is

This is the kind of thing a privacy policy usually leaves vague, so we would rather be exact.

• Your notes are stored in the United States. Our database is hosted by Supabase in their us-east-1 region. The copy that brings your notes back after a reinstall lives there, not in Europe.
• Transcription happens in the United States. Our server forwards your audio to OpenAI’s API there, and hands you back the text.
• What makes that lawful. Both work under a signed data processing agreement that includes the European Commission’s Standard Contractual Clauses, the transfer mechanism set out in Article 46 of the GDPR. They process your data on our instructions and for no purpose of their own. Email privacy@uplifty.me for a copy of the clauses.
• Our email and this website. Our email runs on Google Workspace, and this website is hosted by Vercel, a company in the United States, which serves it from locations around the world.
• Our emails are sent from Ireland by Resend, a United States company, under its data processing agreement, which includes the same Standard Contractual Clauses.
• An AI assistant you connect may be anywhere, often the United States. That transfer happens because you asked for it: you approve each assistant explicitly in the app, having been told it is a separate service that may process your notes outside the EU, where privacy law can protect them less (Article 49(1)(a) of the GDPR). You can stop it by removing the connection.
• If you would rather your notes never left your phone, turn on Keep everything on this phone in Account. From then on no note content is sent anywhere.

The services we rely on

Services that work for us. They process your data only on our instructions.

• Supabase runs our database in the United States, our sign-in, the emails that carry sign-in links (Resend delivers them), and the server that passes audio on for transcription and answers AI assistants. Cloudflare, its network provider, sits in front of it.
• OpenAI does Uplifty transcription. It receives your audio and your dictionary words for that one request, and only when transcription is not running on your phone.
• Google Workspace runs our email. When you write to us, or send feedback from the app, your message is stored there.
• Resend delivers our sign-in emails, and Email me news, only if you turned it on. It receives your address and the email.
• Vercel hosts this website, including the page an AI assistant opens when you connect it. Like any web host, it sees your network address when you visit.
• PostHog counts visits to this website, hosted in the EU, in cookieless mode. It records which pages and sections are viewed, how far people scroll, and which buttons are tapped. It sets no cookies and does not follow you across other sites.

Services you use alongside us. Each decides for itself what it does, under its own privacy policy.

• Apple distributes the iPhone app through the App Store and TestFlight, sells subscriptions, and provides Sign in with Apple and speech recognition. If you agreed in your iPhone settings to share analytics with app developers, Apple passes us crash reports and usage statistics, which it does not link to you. If you test through TestFlight, Apple passes us any feedback and crash reports you send that way.
• Google distributes the Android app through Google Play. If you agreed on your phone to share usage and diagnostics data, Google passes us crash reports and performance statistics through Google Play. On many Android phones Google also provides speech recognition, as described in How transcription works. And if you sign in with Google on iPhone, Google handles that sign-in, and knows you used it for Uplifty Voice.
• The AI assistant you connect, if you connect one. Anthropic, OpenAI, Google or another provider you choose receives the notes you ask it about, as described in Connecting an AI assistant.

The app itself sends no third-party analytics. How the app is doing is measured from our own database, in aggregate.

How long we keep it

• Your notes and labels: until you delete them. There is no expiry date, because a thought you caught two years ago is still yours. Deleting removes the row itself, not a flag on it.
• Recordings on your phone: on iPhone, until you delete your account or the app; on Android, until the note is saved.
• Audio on our side: not kept at all. Our server holds it for the seconds it takes to pass it on, and stores it nowhere. Under OpenAI’s API terms it is not used to train their models, and OpenAI deletes it after a limited abuse-monitoring window of their own.
• Rate-limit counts by network address: 2 days, then deleted automatically.
• Sign-in session records (network address, app and system version): while that session is active.
• Technical logs and backups at Supabase: 7 days.
• Requests to connect an AI assistant: deleted within an hour of being started.
• While your account exists: your account and sign-in details, your minutes and purchase record, transcription usage, the app-open log, the sign-in email log, your feedback answers, your Email me news choices, and your connected assistants with their activity log.
• Emails you send us: in our mailbox until you ask us to delete them.
• Anonymous accounts nobody uses: 24 months. An account with no way to sign in that has not been used at all for 24 months (no app opened, no note saved, no assistant reading it) is deleted, with everything tied to it. If the app is still on your phone when you come back, it starts a new account and puts back the notes the phone holds, so those are not lost. Adding a way to sign in keeps an account for as long as you want it.
• When you delete your account, everything above that is tied to it goes in the same action. Copies in Supabase’s technical logs and backups expire on their own within 7 days, and Apple keeps its own record of any purchase.

What we do not do

We do not sell your data. We do not use it for advertising. We do not build an advertising profile of you or share your notes with anyone beyond the services above that are needed to run the app. We make no automated decisions about you that have legal or similarly significant effects.

Your rights

If you are in the EU, the EEA, or the UK these are yours by law. We honour them for everyone, because drawing a line by passport would be a strange way to treat people.

• See what we hold (access). Export, in Account, gives you your notes as plain text, CSV or JSON: what each one says, when, and how it was filed. For everything else we hold about you, such as your account and sign-in details, minutes and purchases, device identifier, feedback and connections, email us and we send you a complete copy.
• Correct it (rectification). Every note is editable, including the transcript. For anything else, email us.
• Delete it (erasure). One note at a time, or everything at once with Delete account in Account, which removes your account and everything tied to it from our database in one action. Without the app, see Delete your account.
• Take it elsewhere (portability). The export above is in formats other tools can read. Ask us for the rest in a machine-readable file.
• Object, or ask us to pause (objection and restriction). You can object to the aggregate product measurement described above and we will exclude your account from it.
• Withdraw consent for anything you opted into, without affecting what came before: turn off Email me news or Tell me when something ships, use the link in any of those emails, or remove a connected assistant.

Email privacy@uplifty.me. We answer within one month, which is what the GDPR asks of us, and usually a great deal faster than that.

And you can complain about us. If you think we have handled your data badly, you can lodge a complaint with a data protection authority. Ours is the Dutch Autoriteit Persoonsgegevens, and you can also go to the one where you live. We would rather you wrote to us first, but you are not obliged to.

Security

Data travels over encrypted (HTTPS) connections. Your cloud notes are isolated per user, so no other user can read them, and a connected AI assistant can reach only the notes of the person who approved it. No method of storage or transmission is ever perfectly secure, so we design for the least data collected and the least exposure: the transcription key stays on our server, the app holds no private keys, and Keep everything on this phone lets you opt out of the cloud entirely.

Who at Uplifty can see your notes

We would rather say this plainly than let you assume it. Your notes are not end-to-end encrypted, so the people who run Uplifty have the technical ability to read what is stored, in the same way as any service that holds your data for you. We do not read your notes. We look at counts and averages to understand whether the app is working, not at what you wrote, and we access an individual note only if you ask us to for support or if the law requires it.

If you would rather no one had that ability, turn on Keep everything on this phone in Account, and delete any notes already saved to your account. From then on there is nothing of yours on our side to read.

Children

Uplifty Voice is not directed to children. In the Netherlands, where we are based, a person under 16 needs a parent's permission for a service like this to use their data, and we do not knowingly collect anything from anyone under 16. If you believe a child is using the app, write to privacy@uplifty.me and we will delete the account.

A young app, still moving

Uplifty Voice is new and changing quickly. As it develops, features and the details of how data is handled may change with it. When they do, we update this page and the date at the top, and we will not quietly widen what we do with your data without saying so here first.

Changes to this policy

We may update this policy from time to time. Any material change will be reflected here, with a new "last updated" date.