ScribeZero processes all audio, transcripts, and AI-generated content entirely on your iPhone using on-device machine learning models. We do not operate servers that receive, process, or store your voice data, meeting content, or clinical session information.
ScribeZero ("we", "our", or "the app") is a private iOS application for meeting and clinical session documentation. This Privacy Policy describes how we handle information when you use ScribeZero on your Apple device.
By downloading and using ScribeZero, you agree to the practices described in this policy. If you do not agree, please do not use the app.
This policy applies to the ScribeZero iOS application. It does not apply to third-party services referenced herein (RevenueCat, Firebase), which have their own privacy policies.
ScribeZero is designed so that your most sensitive data never reaches us. The following data types are never transmitted to any server — not ours, not a third party's:
All ScribeZero data is stored locally on your iPhone using encrypted storage. The following information is kept exclusively on your device:
| Data Type | Storage Method | Encryption |
|---|---|---|
| Audio recordings | Local filesystem (app sandbox) | AES-256-CBC |
| Transcripts & meeting content | Encrypted SQLite (via nitro-sqlite) | AES-256-CBC |
| AI summaries & SOAP notes | Encrypted SQLite (via nitro-sqlite) | AES-256-CBC |
| App preferences & persona settings | MMKV local key-value store | iOS Keychain |
| AI model files (Whisper, LLM, ONNX) | Local filesystem (app sandbox) | File system |
The encryption key is derived from and stored in your device's iOS Keychain, which is protected by your device passcode and Secure Enclave. ScribeZero does not have access to your encryption key and cannot decrypt your data.
If you choose to enable iCloud Backup, encrypted database snapshots are stored in your private iCloud container (accessible only with your Apple ID). ScribeZero cannot access your iCloud data.
ScribeZero uses RevenueCat to manage in-app subscriptions and validate App Store purchases. When you make a purchase or restore prior purchases, the following limited data is processed by RevenueCat:
Payment processing, including your payment method and billing details, is handled entirely by Apple. ScribeZero never receives or stores your payment information.
RevenueCat's privacy policy is available at revenuecat.com/privacy.
To improve stability and understand how features are used, ScribeZero collects limited, anonymous diagnostic data through Firebase Analytics and Firebase Crashlytics (Google LLC).
This data includes:
This data does not include any audio recordings, transcript content, meeting titles, speaker names, AI-generated summaries, or any personally identifiable information from your sessions.
Firebase processes this data under Google's privacy policy, available at policies.google.com/privacy.
You may opt out of analytics collection by disabling analytics tracking in your iPhone's Settings → Privacy & Security → Tracking.
ScribeZero requests access to your iPhone's microphone solely to record meetings and sessions within the app. Audio is captured only when you explicitly initiate a recording within the app and stops immediately when you stop the recording.
ScribeZero does not access the microphone in the background, does not monitor ambient audio, and does not transmit any captured audio off your device.
You can revoke microphone access at any time via Settings → Privacy & Security → Microphone → ScribeZero.
All ScribeZero data resides on your device. You have complete control over retention:
Because we do not store your data on our servers, we cannot delete data on your behalf. Your device and your iCloud account are the only places your data exists.
Depending on your jurisdiction, you may have certain rights regarding personal data. Because ScribeZero stores all data locally on your device, you exercise these rights directly:
For questions about the limited data processed by RevenueCat or Firebase on our behalf, please contact us at privacy@scribezero.app.
ScribeZero is designed for professional use by adults. The app is not directed at children under the age of 13 (or 16 in the European Union). We do not knowingly collect personal information from children. If you believe a child has used the app in a manner inconsistent with this policy, please contact us at privacy@scribezero.app.
If you are using ScribeZero in a clinical context (as a therapist, psychologist, psychiatrist, counselor, or other licensed clinician), you are responsible for ensuring that your use of this app complies with applicable professional regulations, confidentiality obligations, and informed consent requirements in your jurisdiction.
ScribeZero is designed to support — not replace — your professional documentation obligations. Because all data processing occurs on-device and no patient data is transmitted or stored on external servers, ScribeZero is designed to be compatible with HIPAA Privacy Rule requirements. However, compliance with applicable law is your responsibility as the covered entity or business associate.
We recommend informing clients that you use a local AI documentation tool as part of obtaining their informed consent.
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page and notify you through the app.
Your continued use of ScribeZero after changes are posted constitutes your acceptance of the updated policy.
If you have questions, concerns, or requests regarding this Privacy Policy or how ScribeZero handles data, please contact us:
We will respond to privacy inquiries within 30 days.