ANNO Privacy Policy
ANNO (the "App" or "Service") is operated by Seunghwan Lee, an individual developer (the "Operator", "we", "us"). This policy explains what information we process, why, and how, in line with the Korean Personal Information Protection Act (PIPA), the EU General Data Protection Regulation (GDPR) and other applicable laws. This English version is a translation. If it differs from the Korean version, the Korean version prevails, except where mandatory law in your country requires otherwise.
1. Summary
- Audio recordings never leave your device for our servers. Speech is transcribed on your device; only text and record metadata are sent to the server.
- Once the server confirms it has saved a transcript, the audio is deleted from your device. Audio that is not yet confirmed, or that needs review, stays on your device until you delete or export it.
- We use the OpenAI API to tidy up transcripts and suggest a mood. By default OpenAI does not use API data to train its models.
- Server data is stored in the United States (Supabase, AWS US East region).
- You can delete records, transcripts and your account in the App at any time.
- We do not sell personal information or track you for advertising.
2. Information we process and why
| Category | Data | Purpose |
|---|---|---|
| Account | Email address, sign-in provider (Apple or Google) and the account identifier it issues, internal account ID, sign-in session data | Identify you, keep you signed in, link accounts |
| Records | Transcripts, text and notes you write, organized title/body/summary/key phrases, meeting attendee names and decisions (when they appear in a conversation), record type (diary or meeting), recording time, time zone, duration, language and recording device type | Store, organize and show your records; sync across devices |
| Mood | Mood suggested by AI and its supporting quote, mood you choose | Show your mood by year, month and day |
| Settings | Display language, time zone, place name (e.g. city, up to 80 characters), AI connection scope | Show dates and places, keep your settings |
| Subscription | App Store transaction ID, original transaction ID, product ID, purchase/expiry/revocation times, environment (production/sandbox), app account token | Check subscription access; handle restore, transfer and refunds |
| Usage and cost | Number and volume of organize requests; per-attempt model, token counts, cost and outcome | Apply fair-use limits, manage costs, handle errors |
| AI connection (optional) | OAuth client information, consent and session records for the ChatGPT or Claude app you connect | Provide and revoke read-only connections |
| Service logs | App version string, request outcomes, access logs kept by our hosting infrastructure (such as IP address) | Security, troubleshooting, compatibility |
Processed only on your device
- Audio: kept in device storage excluded from backups and never sent to our servers.
- Location: if you allow it, used to show local weather and to set your place and time zone automatically. Exact coordinates are not sent to our servers; we store only the place name and time zone. Weather and place-name lookups are handled by Apple (WeatherKit and geocoding).
- Face ID: used only to unlock your records. Face data is handled by your Apple device and never reaches us.
- Mac system audio: when you record a meeting on Mac, the App transcribes, on your Mac, the microphone together with sound from other apps (including other participants' voices). The screen is not recorded.
We do not sell personal information or use it for targeted advertising, and as a rule the Operator does not view the content of your records.
3. Retention and deletion
| Data | Retention |
|---|---|
| Transcripts, records, moods | Until you delete them or delete your account. There is no automatic server expiry. |
| AI organize results | Only the current result is kept. When a new result is applied, the previous one is deleted immediately. Raw model output is not stored. |
| Deletion markers (record ID, deletion time, date) | Kept until account deletion so that a deleted record is not re-uploaded from another device. They contain no record content. |
| Account data | Until account deletion |
| Purchase records | When you delete your account, the link between your purchase records and your account (your user ID) is removed. Apple payment identifiers (App Store transaction ID, original transaction ID and app account token) and the product, purchase, expiry and revocation times are kept for reconciliation, refunds and disputes. Because the app account token is created at purchase with the same value as your former account ID, during this period it can be used to confirm that a purchase belonged to that account. These records are deleted no later than 5 years after account deletion, unless the law requires a longer period. |
| AI usage records | When you delete your account, links to you and your records are removed. Only usage figures that cannot identify you are kept, for up to 5 years, and then deleted. |
| Account deletion receipt | An anonymous hash used only to confirm completion; no user ID is kept. |
| Server access logs and backups | Server access logs are kept for up to 7 days and database backups for up to 7 days, then deleted automatically. Data you delete may remain in backups during this period. |
| Audio on your device | Deleted once the server confirms the transcript. Unconfirmed audio, or audio with sections needing review, stays on your device until you delete it; it is never deleted automatically. |
When data is deleted, it is removed from the database so that it cannot be restored.
4. Processors and international transfers
We use the following service providers. Your information is transferred to them over encrypted connections (TLS) whenever you use the Service. The transfer to Supabase is necessary to provide the Service; if you do not want it, you can stop using the Service and delete your account. The transfer to OpenAI happens only if you agree to AI cleanup; without that agreement you can still record, transcribe and keep records.
| Recipient (contact) | Country | Data | When / how | Purpose | Retention |
|---|---|---|---|---|---|
| Supabase Pte. Ltd. (Singapore; privacy@supabase.com) Infrastructure: Amazon Web Services | United States (us-east-1, N. Virginia) | All server-stored data in section 2 | On sign-up and use, via TLS | Database, authentication and server hosting | As in section 3 |
| OpenAI OpCo, LLC (privacy@openai.com) | United States | The transcript or text being organized, your note, your edit request, language, record date, requested record type. Your account name, email and account ID are not sent separately. However, personal information you say in a recording or write in a note (such as your own or other people's names) is part of the transcript or text and may be sent with it. | On each organize or edit request, via TLS | Tidy text, summarize, suggest mood | Requests are made with response storage turned off. Abuse-monitoring logs up to 30 days unless the law requires longer |
According to OpenAI's API data policy, data sent to the OpenAI API is not used to train or improve OpenAI models unless the customer explicitly opts in. Transfers of EEA and UK users' data rely on the EU Standard Contractual Clauses (SCCs) and the UK Addendum included in each processor's data processing addendum. You can request a copy of the SCCs by email at the address in section 12.
Transfers to AI services you connect (optional)
If you connect ChatGPT or Claude under section 5 and ask that service to look up your records, record content is transferred abroad as follows.
| Recipient (contact) | Country | Data | When / how | Purpose | Retention |
|---|---|---|---|---|---|
| ChatGPT: OpenAI OpCo, LLC (OpenAI Ireland Limited for EEA and Swiss residents; privacy@openai.com) | United States | ANNO records retrieved by that service (title, summary, body, mood, record date and similar; the raw transcript when requested) | Each time you ask that service to look up records after connecting it, via encrypted connections (TLS) | Search, retrieve and answer about the records you ask for | Under OpenAI's privacy policy (https://openai.com/policies/privacy-policy) and your ChatGPT settings |
| Claude: Anthropic PBC (Anthropic Ireland, Limited for EEA, UK and Swiss residents; privacy@anthropic.com) | United States | ANNO records retrieved by that service (title, summary, body, mood, record date and similar; the raw transcript when requested) | Each time you ask that service to look up records after connecting it, via encrypted connections (TLS) | Search, retrieve and answer about the records you ask for | Under Anthropic's privacy policy (https://www.anthropic.com/legal/privacy) and your Claude settings |
If you do not want these transfers, do not connect the service, or disconnect it in Settings. That service then cannot look up your ANNO records, and you can keep using the rest of ANNO as before.
Other providers you use directly
- Apple: Sign in with Apple, App Store payment and subscription management, weather (WeatherKit) and place-name lookup, speech-recognition language assets. Payment card details are handled by Apple; we never receive them.
- Google: Sign in with Google. Only the basic sign-in information (such as email) is requested.
- Hugging Face: contacted to download speech-recognition model files on some devices and languages. No record content is sent.
These providers process information under their own privacy policies.
5. Connecting ChatGPT or Claude (optional)
If you connect your own ChatGPT or Claude account to ANNO, that AI service can search and read your ANNO records read-only. Records it retrieves (title, summary, body, mood and, when requested, the raw transcript) are sent to that service, and from then on are handled under the privacy policy of OpenAI or Anthropic and your settings in that service.
- A connection is made only when you start it and give consent.
- You can exclude diaries from the connection in Settings.
- You can revoke a connection in Settings at any time; its sessions and consent are deleted immediately. Content already sent must be deleted in that service.
- Connected services cannot change or delete your ANNO records.
6. Your rights
You can exercise the following rights at any time.
- Access and correction: view and edit records, titles, bodies and moods in the App.
- Deletion: delete one record, all records, or only a record's transcript. Deleting only the transcript removes the transcript and the mood quote taken from it; the organized body and summary remain.
- Account deletion: deleting your account in Settings signs out all sessions and deletes your account together with your server records, transcripts and settings (except the purchase records and non-identifying usage records kept for the periods in section 3). You can choose whether to also delete recordings left on the device. Deleting your account does not cancel your subscription — cancel it separately in your Apple account settings.
- Withdrawing consent: turn off location or microphone access in device settings, and revoke AI connections in Settings. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
- EEA/UK users: under the GDPR you have the rights of access, rectification, erasure, restriction, data portability and objection, and the right to complain to your supervisory authority.
For requests you cannot complete in the App, contact us below. We respond within the period required by law and may ask you to verify your identity.
7. Legal bases (GDPR)
- Contract: account, storing/organizing/syncing records, subscription checks
- Legitimate interests: security, abuse prevention, cost and usage-limit management, troubleshooting
- Consent: location, AI service connections, AI organization (explicit consent the App asks for before first use)
- Legal obligation: where the law requires records to be kept
Diaries may contain sensitive content such as health or emotional information. We do not ask for this information. What you choose to write is processed only for the purposes above, based on your choice to record it and on the explicit consent the App asks for before your first AI organization. You can withdraw that consent at any time by contacting us; after that, AI organization is no longer provided, and processing before the withdrawal remains lawful.
Required and optional information
Account information such as your sign-in identifiers (email address and the account identifier issued by your sign-in provider), and the information needed to store and sync your records, is required to provide the Service; without it you cannot use the Service. Consent to AI organization, location use and connecting ChatGPT or Claude are optional; if you decline, you can still use the basic features such as recording and keeping records.
8. Recording other people
Recording a meeting or conversation captures other people's voices and words. You are responsible for telling participants before recording and for obtaining any consent required. Recording laws differ by country and region; you must follow the laws where you are. Organized results may include attendee names and the gist of what they said.
9. Children
The Service is not directed to children under 14 and they may not create an account. In the EEA, users below their country's age of digital consent may not use the Service without parental consent. If we learn we have collected information from a child under 14, we delete it promptly.
10. Security
- Encryption in transit (TLS) and at rest on the server
- Per-account access control, so no user can access another user's data
- Sign-in sessions stored in the device keychain and rotated on refresh
- No record content, tokens or credentials in logs
- The Operator does not view user records as a rule
11. Cookies and tracking
The App does not use the advertising identifier or track you across other companies' apps and websites. The web consent page for AI connections does not set cookies or use browser storage itself. It loads fonts (Google Fonts) and a script (cdnjs) from third parties, which may receive your IP address, and sign-in is handled by Supabase's authentication service.
12. Contact and privacy officer
- Operator and privacy officer: Seunghwan Lee
- Email: tony.lee.fuan@icloud.com
- Phone: +82-70-8655-2337
- Address: 3F, 48-1 Donggyo-ro, Mapo-gu, Seoul, Republic of Korea
We have not appointed a representative in the EU or the UK. EEA and UK users can send any request to the email address above.
You can also contact the following Korean public bodies about privacy infringements.
- Personal Information Infringement Report Center: privacy.kisa.or.kr / 118 (in Korea)
- Personal Information Dispute Mediation Committee: www.kopico.go.kr / 1833-6972
13. Changes
We will announce changes in the App or on this page at least 7 days before they take effect (30 days for material changes that are unfavorable to you).