Privacy

Voice recordings and their transcripts, notes typed into the app, emails you forward to it, and everything derived from those: titles, summaries, subjects, projects, tags, contacts you add, and files you attach or link.

Account details are limited to the email address you sign in with. There is no analytics, no advertising, and no tracking of any kind.

To transcribe what you recorded, work out what it is about, group it with related notes, and show it back to you. That is the entire purpose. Your content is not used to train any model, is not sold, and is not shared for advertising.

The app cannot work without sending your content to a small number of providers. Each receives only what its job requires:

• Supabase stores the database and the audio files, in a private bucket.
• Vercel runs the application.
• Groq receives audio when a recording needs transcribing.
• OpenRouter, and OpenAI when OpenRouter is unavailable, receive transcripts and note text to classify, summarise and answer questions about them.
• GitHub, only if you connect it, and only for the repositories you choose.
• Google, for signing in, and for any Google data you explicitly connect.

Each handles data under its own terms. Removing a provider means losing the feature it powers rather than losing your notes.

Pebble Index's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Signing in with Google gives the app your email address and nothing else. If you connect a Google service such as Drive, the app reads only the documents you pick, caches the text it extracted so it survives the link expiring, and never writes to your Google account. That data is used to answer your own questions about your own notes. It is not used to train models, not sold, and not shared with anyone beyond the providers listed above.

Until you delete it. Notes can be archived or deleted permanently, individually or in bulk, and deleting a recording removes its audio as well as its row. Deletion is immediate and cannot be undone.

Access is limited to an explicit allowlist of one account, enforced by the database rather than by the application, so a signed-in stranger sees an empty app. Audio is held in a private bucket reachable only through short-lived signed links. Credentials for connected services are held encrypted and are never shown back through the interface once saved.

No system is perfectly secure, and this one is maintained by one person.

If this changes, the date at the top changes with it. There are no other users to notify.

Questions, or a request to see or delete what is held: you@example.com.