ConvoMind Privacy Policy

Last updated: August 1, 2026  |  Effective: August 1, 2026

ConvoMind (the “App”) is operated by an independent individual developer (“we,” “us,” or “our”). This policy explains how we collect, use, store, and protect your personal information.

1. Information We Collect

• Account and profile information: your name, email address, optional phone number, nickname, organization, and job title; or the Apple identifier and optional email supplied through Sign in with Apple.
• Device information: device identifier, device name, operating system, and app version for multi-device management, security, diagnostics, and product analytics.
• Conversation content: audio you choose to record, transcripts, summaries, action items, and AI analysis. Original recordings remain on your device by default. After sign-in, derived text assets such as transcripts, summaries, actions, and knowledge may be synchronized with your account.
• Usage and diagnostic data: transcription duration, feature interactions, performance metrics, hangs, and crash reports for quota management, troubleshooting, and product improvement. When signed in, these records may be linked to your account and device.
• Subscription information: products, transactions, and subscription status managed by Apple. We do not collect your payment-card number.

2. How We Use Information

• Provide, maintain, and improve the App and its services.
• Manage your account and subscription status.
• Track speech-transcription quota usage.
• Protect accounts and prevent fraud and abuse.

Before starting a conversation involving other people, the App requires the initiator to confirm that all participants have been informed and have consented to recording. You are also responsible for complying with the recording, transcription, and data-processing laws that apply where you are located.

3. Third-Party Services

The App uses third-party services to process data:

• Speech-recognition providers: audio required for cloud transcription is sent over an encrypted connection to the provider assigned to your account's service region.
• AI model providers: transcript text and prompts required for summaries or analysis are sent to the model provider currently configured by the App. If you configure your own model or API key, the provider you select processes data under its own policy.
• Apple and Google: authentication and App Store subscriptions are processed under the applicable provider policies.

We do not sell your personal information.

4. Data Storage and Security

• For Free accounts, conversations, transcripts, summaries, knowledge, people data, and recordings are stored only on the user's device. Real-time transcription and public AI summaries may transmit required content for transient processing over an encrypted connection, but ConvoMind does not persist this user content for Free accounts.
• Plus and Pro accounts may use cloud synchronization, backup, and recovery. Plus includes 3 GB of cloud storage and Pro includes 10 GB.
• The current Global service data plane is deployed in Seoul, South Korea. When Plus or Pro users enable cloud features, account-linked derived text assets and recordings they choose to upload are stored and processed in that region. Transcription, summaries, and email delivery may also be processed by the third parties described in this policy.
• Original recordings remain on the iOS device by default and are not automatically uploaded by ordinary cloud synchronization.
• Plus users may choose “On This Device Only” or “Keep in Cloud for 30 Days.” Pro users may also choose “Keep in Cloud Until I Delete It.” Recordings are uploaded only when a cloud mode is selected or when audio is explicitly included in a supported sharing flow.
• Cloud synchronization and recording uploads use HTTPS. Persisted recordings are encrypted at rest in chunks using AES-256-GCM. The server or a selected processing provider may need to process content for playback, transcription, summaries, and search; the current version is therefore not a zero-knowledge or end-to-end encrypted system.
• Sensitive server-side data, including API keys, is also encrypted at rest using AES-256-GCM.
• User passwords are hashed with bcrypt; we cannot retrieve the plaintext password.

5. Data Retention

Derived text assets are retained while your account is active. Recordings under “Keep in Cloud for 30 Days,” and recordings explicitly included in a sharing flow, are physically deleted by an automated task 30 days after upload. Recordings under “Keep in Cloud Until I Delete It” remain until you delete the related conversation, delete all cloud recordings, or delete your account. Disabling future uploads does not automatically delete recordings previously selected for long-term retention; the App provides a separate deletion option. When you delete your account, we permanently delete your cloud data within 30 days. You manage data stored on your local device. Data sent to third-party speech or AI providers is also subject to those providers' retention policies.

6. Your Rights and Choices

You may at any time:

• View and update your personal information in the App.
• Export your conversation records and knowledge-base data.
• Disable future recording uploads and separately delete all cloud recordings while retaining local files.
• Delete your account and associated cloud data.
• Manage or cancel your subscription in iOS Settings.

7. Children's Privacy

The App is not intended for children under 13, and we do not knowingly collect their personal information.

8. Policy Updates

We may update this policy from time to time. We will provide in-app notice of material changes. Continued use of the App after an update means that you accept the revised policy.

9. Contact Us

For privacy questions, contact support@starvilo.com.