Privacy Policy
Last updated: April 7, 2026
Overview
Pensieve ("the App") is a voice-first thought-capture tool. We take user privacy seriously. The design principle of this App is that all data is fully controlled by the user.
Data Collection and Storage
The App itself does not collect any personal data, does not require account registration, and does not include any analytics, advertising, or tracking SDKs.
All data is stored locally on the user's iOS device:
- Audio recordings: stored in the App's Documents directory
- Note data: stored in a local SQLite database
- Settings: stored in local SharedPreferences
Core Features (Fully Offline)
Pensieve's core features run entirely on the user's device, with no network access required. Recordings and text are never sent to any server:
- Audio recording: uses the iOS system microphone; recording files are stored only locally on the device
- Offline speech recognition: uses the bundled Sherpa-ONNX SenseVoice model (~228 MB, shipped with the App); all recognition runs locally on the device
Optional Third-Party Services
To provide enhanced features such as AI organization, tagging, and summarization, the App allows users to voluntarily configure third-party AI services. These features are entirely optional; not configuring them does not affect the core recording and offline transcription features.
What Data Is Sent
Only when you actively configure and enable a third-party service, the following data is sent directly from your device to the third-party provider you have selected:
| Feature |
Data sent |
Data NOT sent |
| Online speech recognition (optional) |
The audio file of the current recording |
Note metadata, other notes, device information |
| AI auto-organization / summary / tags (optional) |
The transcribed text of the current note |
Audio files, other notes, device information |
Who Receives the Data
Third-party providers are added by the user on the App's "AI Service Configuration" page. The following providers are currently supported (the user may configure only one, several, or none):
Important notes:
- Data is sent directly from the user's device to the third-party providers above; it does not pass through any Pensieve server (we have no servers)
- The user's API key is stored only in local SharedPreferences on the device and is not uploaded anywhere
- Whether to use these services, when to use them, and which one to use is entirely under the user's control
- The use of data by these providers is governed by their respective privacy policies; users are responsible for reading and agreeing to them before use
User Consent Flow
To ensure informed consent:
- The App does not connect to the network on launch; core features run fully offline
- The first time the user attempts to add any third-party AI service account, the App displays an explicit disclosure dialog that lists the core information from this policy. The user must tap "Agree and Enable" to save the account
- The user can delete any account at any time on the "AI Service Configuration" page; once deleted, the corresponding provider will no longer be called
iCloud Backup (Optional)
- The user can manually enable iCloud backup in Settings; it is off by default
- Once enabled, recording files and note data are synced via Apple's iCloud Drive service to the user's own iCloud account
- Data transmission and storage are handled by Apple and protected by Apple's Privacy Policy
- Pensieve does not access, read, or store the user's iCloud data
- The user can disable this feature at any time in Settings
Permissions
The iOS system permissions requested by this App and their purposes:
- Microphone: to record voice notes
- Local Notifications: for the "Reminder" feature (set by the user)
- Network access: only used when the user actively enables third-party AI services or iCloud backup
Children's Privacy
This App is not directed to children under 13 and does not collect any personal information.
Changes to This Privacy Policy
If this Privacy Policy changes, we will publish updates on the in-app "Settings → Privacy Policy" page and on this page. Significant changes will be communicated to users via an in-app dialog.
Contact Us
If you have any questions about this Privacy Policy, please contact us: