Privacy Policy

Watchword for iPhone and Apple Watch · Effective 17 October 2026

Watchword records only when you start it, keeps the audio on your devices, and can turn it into text and summaries. This policy explains what leaves your devices, where it goes, how long it is kept, and what you can do about it.

Who we are

Provider

The developer of Watchword (“we”), shown as the seller on Watchword’s App Store page

Privacy contact

privacy@humannotai.net

Support

support@humannotai.net

We run the Watchword app and the Watchword server. Questions and requests about your personal data go to the privacy contact above; for Singapore’s Personal Data Protection Act, it is also the contact of our data protection officer.

What stays on your devices

• Your recordings’ original audio, transcripts, summaries and the names you give people are stored on your iPhone. Recording on your devices is free and unlimited.
• Your Apple Watch records on its own and hands each recording to your iPhone. It keeps its copy until the iPhone has checked it.
• Original audio is never deleted automatically. A recording you move to Trash stays there until you restore it or delete it permanently.

Your iCloud (optional)

With iCloud Backup on, recordings, transcripts and summaries are also stored in your own private iCloud database (CloudKit’s private database), which only your Apple Account can open. We can’t read it. Apple’s terms and privacy policy govern iCloud.

What leaves your devices, and why

Transcription

With Cloud Transcription on, a recording’s audio is sent encrypted through the Watchword server to Soniox, which turns speech into text. Your Words to Spell Right list (names, places and products, including the people you’ve named) goes with it as context.

• The Watchword server is a Cloudflare Worker we run at api.humannotai.net. It passes the audio on to Soniox and never stores audio or transcript text.
• Soniox is based in the United States, and we use its US region. Its security and privacy page says: “your audio and transcripts are never used to improve Soniox models or services.”
• Once the text is back, the server deletes the audio file and the transcription at Soniox. If a request is interrupted, a daily sweep deletes whatever it left at Soniox once it is three days old.
• With Skip Long Silences on, quiet stretches of 10 seconds or more aren’t sent. The recording on your iPhone stays complete.
• You can turn Cloud Transcription off, or keep a single recording from being sent with Don’t Transcribe This One.

Summaries, titles and topics

These are written from the transcript text, never the audio. With Write Summaries in the Cloud on, the Watchword server sends the text to DeepInfra (DeepInfra, Inc., in the United States), which runs the language models: the main model through that model’s own cloud service, as described below, or, when it fails or isn’t available, a fallback model that DeepInfra runs itself.

• We send only the text needed for that task (the transcript, or for the day’s overview the summaries written from it), with the names of people you’ve named and, if you wrote one, the About You line from Settings. Never audio, and no account id, email or other account details. The request comes from our server, not from your iPhone.
• The Watchword server doesn’t store the text or the summary it gets back.
• DeepInfra. Its data privacy page says: “Input data is not stored to disk during inference — it exists only in memory while the request is being processed”; “Output data is not stored”; and “We do not use data you submit to our APIs for training models, except when using Google or Anthropic models” (we use neither). Its privacy policy says its security measures “comply with SOC 2 and ISO 27001 standards”.
• The main model’s cloud service. DeepInfra doesn’t run the main model on its own servers: it forwards those requests to the model’s own cloud service, and that service’s privacy policy applies. That service says it keeps prompts and responses for no longer than 30 days by default, keeps content its automated safety filters flag for no longer than two years, and doesn’t use them to train, fine-tune or improve any foundation model. DeepInfra doesn’t say in which region it serves these requests.
• To keep the text on your iPhone, turn off Write Summaries in the Cloud (Settings › Transcription & Summaries). Summaries are then written on your iPhone by Apple Intelligence, while the app is open, and the text doesn’t leave it. You can also turn Summaries off altogether.

Plans and purchases

Plans and top-ups are sold only through Apple’s In-App Purchase. To know which plan you have and how many hours it includes, the Watchword server receives the App Store’s signed record of your purchase, checks it with Apple, and receives Apple’s notices about renewals and refunds. Apple handles payment; we never see your payment details.

What the Watchword server keeps

• An anonymous account id, and the hashes of its session tokens (never the tokens themselves).
• Usage counts: how many hours of audio were transcribed and when, and what the account’s summaries cost.
• For a plan: the App Store transaction ids, with the product and its dates, checked with Apple to count the plan’s hours.
• For the free plan: the app’s App Attest key and an install id the app makes, and one DeviceCheck bit that Apple keeps for the device, so the 3 free hours are given once per device. The bit holds no personal data.
• While a recording is being transcribed: its Soniox file and transcription ids, until they’re deleted.
• Logs: an event name and a few numbers. Never audio, transcript text, tokens or keys.

The server never keeps audio or transcript text, and no names, email addresses, contacts, location or advertising identifiers. Cloudflare sees your IP address to deliver requests and to limit abuse; we don’t derive your location from it.

How long

• Audio and text at Soniox: until the text is back, normally minutes. Anything an interrupted request leaves is swept when it is three days old.
• Text sent for summaries: DeepInfra doesn’t store it; for the main model, its cloud service keeps it for no longer than 30 days by default, as described above.
• Soniox file and transcription ids on the server: until those are deleted.
• Your account’s usage counts and purchases: while the account exists, and after Delete My Data on the Server, because your plan’s limits depend on them.
• Session tokens: they stop working after 90 days without use, or when you delete your data on the server.
• What’s on your devices and in your iCloud: until you delete it.

Your choices

• Delete your data on the server: Settings › Data & Privacy › Delete My Data on the Server. This removes your uploads, transcriptions and sign-ins from the server and from Soniox, along with the install ids and App Attest key it kept. What stays is the anonymous record of the hours you used and of your plan’s purchases, because your plan’s limits depend on them; the DeviceCheck bit stays with Apple, so the free hours aren’t given to the same device twice. Nothing on your iPhone is touched.
• Delete a recording: move it to Trash, then Delete Permanently. Its audio, transcript and summary are deleted from your iPhone and your iCloud. Another iPhone of yours that already has it keeps its own copy until you delete it there too.
• Turn things off: Cloud Transcription, Write Summaries in the Cloud or iCloud Backup, or skip a single recording. Recording keeps working with all of them off.
• Subscriptions: manage or cancel them in your iPhone’s Settings › your name › Subscriptions. Apple handles refunds.

Your rights, wherever you are

Watchword is offered in Singapore, Malaysia, Hong Kong, Taiwan, Macau, the United States, the United Kingdom, Canada, Australia and New Zealand. Data protection laws there give you rights over your personal data, such as to access it, correct it, have it deleted, or withdraw your consent.

• Access: your recordings, transcripts and summaries are already on your iPhone. The plan card at the top of Settings shows the cloud hours you’ve used; tap it for the details.
• Delete or withdraw consent: use Delete My Data on the Server, delete recordings, or turn Cloud Transcription and Write Summaries in the Cloud off, as above.
• Anything else, such as a copy or a correction of what the server keeps for your account: write to privacy@humannotai.net. Accounts are anonymous, so we may ask for details from the app to find yours.

We don’t sell personal information or share it for cross-context behavioral advertising. If UK data protection law applies to you: we process this data to provide the service you asked for, and, for limits such as free hours once per device, in our legitimate interest in keeping the service fair. If you’re not satisfied with our answer, you can complain to your local data protection authority.

Where data is processed

• Your recordings: on your devices, and in your iCloud with Apple if you turn backup on.
• The Watchword server: on Cloudflare’s global network.
• Transcription: by Soniox in the United States.
• Summaries: by DeepInfra in the United States and, for the main model, by that model’s cloud service in a region DeepInfra doesn’t name.

So when you use transcription or cloud summaries, your audio or text is processed outside your country: in the United States, and for the main model’s summaries in whichever region its cloud service uses for DeepInfra. We send it only to provide the feature you turned on.

Security

The app, the server and its providers talk over encrypted connections. The server checks every file and transcription against the signed-in account, keeps no audio or text, and holds its provider keys as server secrets, never in the app.

Recording other people

Laws on recording other people differ from place to place, and some require everyone’s consent. You’re responsible for following them where you record, and for telling people when that’s required.

Children

Watchword isn’t directed at children under 13, and we don’t knowingly collect their personal data.

Changes

When something changes, we update this page and its effective date, and say so in the app when the change matters.

Contact

Privacy questions and requests: privacy@humannotai.net. Everything else: support@humannotai.net.