Privacy Policy

Your recordings and notes

Recordings, imported audio, notes, transcripts, and saved results stay in the app’s private storage. On-device transcription does not upload your audio. AI processing uses your selected provider: Apple Intelligence can use Private Cloud Compute, and Sessions Cloud can send content as described below. Keeping a local library does not mean all AI processing stays on your device.

Device backups may include app data, depending on your settings. Keep backups or exports of anything you need; we cannot recover content stored only on a lost device.

Signing in

Sign in with Apple and Google sign-in are supported for optional account features. We store the account identifier, name, email, verification information, and login records supplied or created during sign-in, including IP address and device or browser details. These help us verify you, secure your account, and connect it to your services and purchases. We do not receive your Apple or Google password.

Google sign-in requests basic identity information, not Gmail, Drive, or Calendar access. Signing in does not send your notes to an AI service. Google’s sign-in component also declares handling contact information, user and device identifiers, approximate location, and usage information for its functionality and some analytics. Its declaration includes phone numbers; Sessions does not request or store a phone number or location in your profile. See Google’s Privacy Policy.

Sessions Cloud AI

Cloud Transcription, Cloud Insights, and Cloud Assistant are optional Pro features. Before content is sent, the app asks you to agree to the current processing policy for each feature. These permissions can be presented together and are separate from Cloud Sync. Sessions and the providers identified below receive the content needed to provide each feature.

• Cloud Transcription shares audio with Sessions, Cloudflare, and ElevenLabs for transcription and speaker labels. Audio may be sent during recording for live captions. Approved spellings and permitted meeting names may also be shared with these providers to improve recognition; they do not identify speakers.
• Cloud Insights sends transcripts and relevant language and date context to Sessions, Cloudflare, and OpenAI for titles, summaries, and action items. It does not send audio or Assistant conversations.
• Cloud Assistant sends your messages, relevant earlier chat, note excerpts, and drafts to Sessions, Cloudflare, and OpenAI to answer questions or revise content. It works without Cloud Sync. Saved chats remain in your library.

Cloud processing does not back up your original recording. Temporary Transcription and Insights content stored by Sessions is encrypted and deleted after processing or delivery, within 24 hours; saved recognition hints are also deleted within 24 hours. Assistant input is not persisted by the Sessions API. Its temporary encrypted results expire after 24 hours and are then removed during cleanup. Content-free usage and support records are kept for up to 90 days.

ElevenLabs may retain submitted audio and transcripts under its standard policy. Our ElevenLabs account is configured to opt out of model-improvement use; this is separate from retention and does not provide zero retention. Cloudflare does not use your content to train models. For Cloud Insights and Assistant, OpenAI and Cloudflare do not retain submitted content or use it for training. Processing may happen outside your country.

Read more about Cloudflare’s Privacy Policy, ElevenLabs’ Privacy Policy, and OpenAI’s Privacy Policy. If the recipients or processing covered by a feature’s agreement change, we will ask you to accept an updated agreement before sending content under that policy.

Turning a feature off stops new automatic work. Withdrawing its processing agreement also cancels pending work and requests retained-content cleanup. Requests already sent cannot be recalled, and switching a feature off does not erase content already processed by a provider. Your note content is not used for advertising.

Apple Intelligence and Private Cloud Compute

Apple Intelligence can process Assistant and Note Insights on your device or using Apple’s Private Cloud Compute. It is the Free plan’s default on supported devices; Pro defaults to Sessions Cloud unless you choose Apple Intelligence. Private Cloud Compute requires an eligible device, iOS or macOS 27 or later, and an internet connection. It is subject to Apple’s usage limits and does not require a Sessions account or Sessions Pro.

When Private Cloud Compute is used, Assistant sends your question, relevant chat history, selected note excerpts, and drafts you ask it to revise directly to Apple. Note Insights separately sends completed transcript text and relevant language and date context to create titles, summaries, and action items. It does not send your audio. These requests do not pass through Sessions’ cloud AI service.

Apple’s Private Cloud Compute safeguardsmake request data inaccessible after processing. Apple may cache encrypted data under device-controlled keys; this is distinct from retaining readable request content. This protection does not delete your notes, saved chats, insights, exports, or content you separately choose to sync or share in Sessions.

Choose your provider in Settings → Intelligence. The choice applies to new Assistant chats and future note insights; existing chats keep their provider. Apple Intelligence may use either on-device processing or Private Cloud Compute depending on availability. Sessions does not offer a separate on-device-only setting for Apple Intelligence. Choosing Apple Intelligence does not grant permission for Sessions Cloud. Requests already sent cannot be recalled. See Apple Intelligence & Privacyfor Apple’s data handling and system controls.

Feedback attachments remain a separate, reviewed choice. Sessions does not log or attach PCC reasoning or model-session transcripts.

Syncing and sharing

Cloud Sync stores supported notes and organization data for your account and delivers them between devices. It does not enable cloud AI processing or imply recording backup.

Sharing a note stores an encrypted snapshot. The complete link includes the key needed to open it, so anyone with that link can read and copy the note. Revoking the link stops future access through Sessions but cannot remove copies recipients have saved.

Permissions and purchases

We request microphone access to record, notifications for reminders, and Calendar or Reminders access when you enable those integrations. You can change permissions in iOS Settings. Apple handles App Store payments; Sessions verifies transaction and subscription identifiers to provide paid features and prevent misuse.

Website and support

Our marketing website has no advertising, client-side analytics, account form, or tracking cookies. Hosting and security services process connection information such as IP addresses, browser details, requested pages, and request times to deliver and protect the website and API. Providers handle operational records under their own terms.

If you email support, we receive your address, message, and attachments. In-app feedback lets you review the message and choose whether to attach diagnostics, screenshots, or conversation details before sending. Attachments may contain private content, so include only what is needed. Local diagnostic logs are normally kept for no more than seven days; copies you send are handled with your support request.

Deleting data and managing your account

Local content stays until you delete it or remove the app, subject to device backups. Deleting a note schedules cleanup of its managed audio. Account and synced records are retained while needed to provide the service. Signing out or uninstalling does not delete your server account.

To delete an account, open Settings → Account → Delete Account and verify ownership. Sessions ends account access, revokes shared notes, and starts deleting cloud records and retained content. The app shows any pending cleanup. Removing Apple or Google permissions may require a retry or action in that provider’s settings.

Deletion clears the local library belonging to that account. Other devices receive the deletion when they next connect; offline copies may remain until then. Other accounts’ libraries, device backups, exports, and copies saved by recipients are separate. Account deletion does not cancel an App Store subscription; cancel it in your Apple subscription settings.

Linking sign-in methods does not merge accounts. You can disconnect a method while another remains; this ends Sessions logins across your devices without deleting your account. Signing out ends only the current local login and attempts to invalidate its server session.

Account confirmations and permission-cleanup credentials have a five-minute usage limit; cleanup credentials are encrypted and removed after settlement or expiry. Retry receipts last 24 hours and operation-status records normally last up to 30 days. Pending deletion jobs keep references needed to finish. Ordinary sign-in does not retain reusable provider tokens in account records.

You can export supported content, change cloud preferences, and revoke share links. For help accessing, correcting, exporting, or deleting personal data, email hello@asksessions.com. We may verify ownership. Your rights depend on applicable law. Limited records may remain for security, transaction integrity, or legal obligations; provider backups expire under their own retention schedules.

Security, children, and contact

We do not sell personal information or share it for behavioral advertising. Service providers handle information needed for your enabled features; data also goes to destinations you choose or where required by law. We use encrypted connections, account controls, and device storage protections. No storage or transmission system is completely secure.

Sessions is not directed to children under 13. Contact us if you believe a child has provided personal information. We update the date above when this policy changes and provide notice or seek consent for material changes where required. For privacy questions, email hello@asksessions.com.