Privacy & Data Security

Our service aims for:

• Strong data management controls
• Robust protection against unauthorized access
• Consistent availability
• Risk minimization

We collect and process:

• Account information
• Audio notes
• Transcription data
• Summary notes
• Language preferences
• Usage data
• Device information
• Communication records

This information is used to:

• Deliver and manage services
• Improve user experience
• Communicate with users
• Ensure security

You (our customer) own your data, including:

• Prepared notes
• Transcripts
• Audio files
• Generated summaries

• Voice recordings are captured and saved locally
• Audio files are stored on your device for 1 hour
• After 1 hour, files are securely stored on Cleft’s servers
• Download original audio files anytime

• All transcription happens on your device using OpenAI’s Whisper model
• No audio is sent to external servers for transcription
• Transcripts are stored locally and synced securely

• Only text (not audio) is processed by our AI systems
• Custom instructions are processed securely
• No data is used for model training
• AI processing follows privacy-first principles

Free features include:

• On-device transcription
• End-to-end encryption
• Local audio storage (1 hour)
• Full data ownership
• Manual data export
• Custom AI processing

Additional features:

• Everything in Basic
• Extended recording time (30 min)
• Advanced integrations
• Priority support

Our retention policy:

• All data kept for 2 years after last login
• Includes notes, transcripts, and audio
• Automatic deletion after retention period
• Option for earlier deletion on request

Export your data anytime:

• Request export through Settings
• Receive complete .zip file
• Download individual audio files
• Export specific notes

• Secure email authentication
• No password storage
• Session management
• Device authorization

• Granular app permissions
• Selective sync options
• Integration management
• Access control

• Export controls
• Deletion requests
• Storage preferences
• Sync settings

Cleft maintains compliance with:

• GDPR (General Data Protection Regulation)
• CCPA (California Consumer Privacy Act)
• EU AI Act requirements
• Industry security standards

Jonny Cosgrove Founder, COO and Data Protection Officer

Contact: [email protected]

Data Portability Email [email protected]

Subject Access Request Submit through our SAR form

Version 1.2 - September 18, 2024

• Updated privacy policy language
• Standalone Cookie Policy
• Added vendor documentation

Version 1.1 - February 22, 2024

• Revised for product features
• Added SAR form
• Public release alignment

Version 1.0 - December 27, 2023

• Initial privacy policy
• Data protection standards
• Handling procedures

• Amazon Web Services (AWS): Cloud infrastructure
• Amazon SES: System emails

• OpenAI: Primary LLM provider
• Groq: Backup LLM provider
• Anthropic: Additional LLM provider
• Apple: iOS development

• Figma: Product design
• GitBook: Documentation
• SoFriendly: Design partners
• Screen Studio: Video creation

• GitHub: Code repository
• Google Workspace: Collaboration
• Slack: Team communication
• Stripe: Payments
• RevenueCat: Subscriptions

• Fathom: Privacy-focused analytics
• Hubspot: Customer management
• Mailerlite: Email communications
• Social Media: Various platforms