Privacy Policy

Last updated: 23 April 2026

TL;DR

  • Local-first. By default your notes and audio live on your device. You choose whether to sync them to the cloud.
  • On-device transcription is available. If you use it, your audio never leaves your phone.
  • No training. We don't train AI models on your content, and the AI providers we use (Google Gemini via the Google AI API) aren't allowed to either.
  • No ads, no selling data. Ever.
  • Audio isn't kept on our backend. If you use cloud transcription, your recording is deleted from our servers as soon as the transcript comes back — success or failure. The copy on your phone stays where it is until you delete it.
  • You can delete everything. Any time, from the app.
  • Not end-to-end encrypted (yet). Cloud notes are encrypted at rest by Google, but we can technically access them to provide cloud features. If you need zero-knowledge, use local-only mode.

1. Who we are

Loose Tongues is a one-person operation run by Stephen Simpson, a sole trader based in Australia. "We" and "us" in this policy mean Stephen — there's no team behind the curtain. Under data protection law, we are the data controller for information collected through the app. This policy explains what we collect when you use Loose Tongues, how we use it, and the choices you have. You can reach us at privacy@loose-tongues.com.

2. What we collect

Account data

Note content

Device and diagnostic data

We do not collect: contacts, calendar, location, or photo library. Microphone access is requested only for the duration of a recording.

3. Local-first by default

Loose Tongues is designed so you can use it without any of your content touching our backend. When you create a note in local mode, the audio file, transcript, and any refinements are stored only on your device, in the app's private storage.

You may opt in to cloud mode per note, which syncs that note to our backend so it is available on your other devices and to collaborators you invite.

4. Transcription

Loose Tongues supports two transcription modes, which you control in Settings:

5. AI refinement and Ask AI

If you enable AI features, your transcripts and notes are sent to Google's Gemini models via the Google AI API to produce the cleaned-up version of your note, to generate titles and summaries, to rewrite in alternate formats, and to answer questions across your notes ("Ask AI"). The Google AI API is configured so that your content is not used to train Google's models and is retained only for the short operational window defined in Google's API data policy.

You can disable AI refinement at any time. Raw transcripts remain available either way.

6. Where your data is stored

The authoritative copy of your notes lives in Google Firebase, in Australia. We also use Cloudflare for our edge API, search, and transient audio storage; our Cloudflare account is configured with the EU jurisdiction, which keeps that data on Cloudflare infrastructure in the European Union. Both providers encrypt data at rest using AES-256 and in transit using TLS.

For a full list of what each service does and which data it touches, see our subprocessors page.

Local data on your device is stored in the app's private sandbox. On iOS with a device passcode set, and on modern Android devices, this storage is additionally protected by the operating system's disk encryption.

7. Subprocessors

We rely on a small number of third-party providers to run Loose Tongues. At a high level:

For the full list with exact data categories, retention notes, and locations, see our subprocessors page. We update that list before engaging any new provider that processes your content.

8. Encryption

9. How we use your data

We do not use your notes, audio, or transcripts to train AI models, to serve advertising, or for any purpose beyond operating the service you asked for.

10. Sharing and collaborators

When you invite a collaborator to a note, that note becomes readable (and, depending on the permissions you grant, editable) by the people you invite, within the app. We do not share your notes with anyone you have not explicitly invited.

11. Retention and deletion

12. Your rights

Depending on where you live, you may have the right to:

To exercise any of these rights, email us at privacy@loose-tongues.com. We aim to respond within 30 days.

13. International transfers

Your data may be transferred to, and processed in, countries other than the one you live in. Notes are stored in Australia (Firebase). Our Cloudflare services are in the European Union. AI processing (Google Gemini) and crash reporting (Sentry) may happen in the United States. Speechmatics processes audio in the EU or the UK. Where required by law, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

14. Children

Loose Tongues is not directed at children under 13 (or under the minimum age required by your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

15. Security and incidents

We protect your data with reasonable technical and organisational measures, including access controls, encryption in transit and at rest, logging, and automated dependency scanning. If something goes wrong and a breach is likely to put your rights at risk, we'll tell you and the relevant authority within the timeframes required by law.

16. Changes to this policy

We may update this policy as the app evolves or as the law requires. When we make material changes, we will notify you in the app or by email and update the "last updated" date at the top of this page.

17. Contact

Questions, requests, or complaints: privacy@loose-tongues.com.