ScribeZero is built on a single, non-negotiable principle: the content of your recordings, transcripts, and summaries is processed entirely on your device and is never uploaded to us or to any third party. This policy explains exactly what stays on your device, the limited operational data our service providers process, and the choices you have.
Your audio, transcripts, and AI-generated notes never leave your iPhone. We operate no servers that receive your content, and there are no third-party AI services in the processing path. The only data that leaves your device is limited, non-content technical information (anonymous diagnostics and purchase validation) handled by Apple and the service providers named below.
ScribeZero ("ScribeZero", "we", "us") provides an iOS application that records, transcribes, and summarizes meetings and clinical sessions using on-device artificial intelligence. This policy applies to the ScribeZero app and this website. For any privacy question, contact privacy@scribezero.app.
All of the following are created, processed, and stored exclusively on your device, and are never transmitted to us:
This content is stored locally in an encrypted database (AES-256, see Security below). Transcription and AI analysis run on your device's processor — there is no API call, no upload, and no third-party AI provider involved at any stage. The app's core features function fully in airplane mode.
If you enable backup, an encrypted copy of your data is stored in your own private iCloud container via Apple iCloud. This data is governed by your iCloud account and Apple's terms; it is not accessible to ScribeZero. You can disable backup at any time in Settings. We never receive your iCloud content.
To operate the business — not to access your content — we rely on a small number of service providers that process limited, non-content data:
| Provider | Purpose | Data processed |
|---|---|---|
| Apple (App Store, In-App Purchase, iCloud) | App distribution, subscriptions, optional backup | Purchase records, your iCloud account, and standard App Store metrics you control in iOS Settings |
| RevenueCat | Subscription management & receipt validation | A pseudonymous app user ID and subscription/transaction status. No recordings or notes. |
| Google Firebase (Analytics & Crashlytics) | Anonymous usage metrics & crash diagnostics to improve stability | Aggregated, non-content events (e.g. "analysis started"), device model, OS version, and crash stack traces. No recordings, transcripts, or notes. |
These providers never receive your audio, transcripts, or AI notes. Diagnostic and analytics events are designed to contain no session content. Where required, this processing is based on your consent and/or our legitimate interest in maintaining a reliable, secure product.
You can review or revoke any permission at any time in iOS Settings.
Your data is encrypted at rest on your device using AES-256. The encryption key is generated on your device and stored in the iOS Keychain with device-bound, non-migratable protection (accessible only when the device is unlocked). Because processing is local and the key never leaves your device, there is no central repository of user content for an attacker — or for us — to compromise.
Your content remains on your device until you delete it (per item, or by deleting the app). We do not retain copies because we never receive them. The limited diagnostic and subscription data held by the service providers above is retained according to their respective policies.
ScribeZero is intended for professional use and is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal data from children.
Depending on your region (including the EEA/UK under GDPR and California under the CCPA/CPRA), you may have rights to access, correct, delete, or port personal data, and to object to or restrict certain processing. Because your content lives only on your device, you can exercise access and deletion directly within the app at any time. For requests concerning the limited data held by our providers, contact privacy@scribezero.app.
The limited operational data described above may be processed by our service providers in countries other than yours, including the United States, under appropriate safeguards. Your content is not transferred because it does not leave your device.
We may update this policy to reflect product or legal changes. Material changes will be reflected by updating the effective date above and, where appropriate, through an in-app notice.
Questions about this policy or your privacy? Email privacy@scribezero.app.