Privacy Policy

1. Overview

Sayo is a voice-first note-taking app developed by 0ARCH, based in Miami, Florida. 0ARCH is the data controller for the limited processing described here, and can be reached at support@0arch.io. This Privacy Policy describes how we handle your information when you use Sayo on iOS and watchOS.

The short version: Sayo has no accounts and no sign-in, your recordings live on your device and in your own private iCloud, and we do not keep a copy of anything you record.

2. Information We Collect

Information you provide:

• Voice recordings (audio files stored on your device and optionally synced to your private iCloud)

Information generated by the app:

• Transcriptions of your voice recordings
• AI-extracted summaries, tasks, events, and ideas

Sayo does not require an account or sign-in, and does not collect your name, email address, phone number, location, contacts, advertising identifier, or any account identifier.

3. Cloud AI Processing

Cloud AI is off until you agree to it. When you turn it on, your audio recording and its transcript are sent to Sayo's backend, which runs on Cloudflare Workers AI in the United States, where the recording is transcribed and analyzed to produce your summary, tasks, and events. The result is returned to your phone. This data is used only to produce that result. It carries no identifier for you or your device, it is not used for advertising, and it is not sold.

We do not retain it.Your recording and transcript are processed in memory and discarded when the request finishes. Sayo's backend stores exactly two things, neither of which is your content: request counters used to limit abuse, and the app's own configuration. There is no database of your memos on our side, so there is nothing on our servers for us to hand over, lose, or be breached of.

4. On-Device Processing

If you turn Cloud AI off in Settings, or you are offline, Sayo transcribes and analyzes your recording using Apple's speech recognition and Apple Intelligence on your iPhone, and nothing is sent to 0ARCH.

One honest caveat about Apple's part of this. Apple's speech recognizer prefers to run on your device, but on some iPhones and for some languages it falls back to Apple's own servers, and that is Apple's behavior rather than ours. We are changing Sayo to require on-device recognition in this mode, so that turning Cloud AI off keeps your audio on the phone entirely; that change ships in the next release and this section will be updated to say so plainly when it does. Either way, audio processed this way never reaches 0ARCH.

5. How Your Data Is Stored

• On-device: Audio files are stored in the app sandbox. All memo data (recordings, transcripts, extracted items) is stored via SwiftData. Preferences are stored via UserDefaults.
• iCloud sync: Memos, extracted items, and extracted events may be synced to your private iCloud via Apple CloudKit if you have an iCloud account. That data lives in your Apple account, not ours, and we cannot read it. If iCloud is unavailable, the app operates in local-only mode.
• On our servers: Nothing. See Section 3.

6. Third-Party Services

• Cloudflare Workers AI: Sayo's cloud transcription and extraction backend, used when Cloud AI is enabled. It receives your recording and transcript, runs them through hosted AI models, and returns the result. Subject to Cloudflare's privacy policy and terms.
• Apple CloudKit: Used for iCloud sync of memo data into your own private iCloud. Subject to Apple's privacy policy.
• Apple Speech and Apple Intelligence: Used for on-device transcription and extraction. See Section 4.
• Apple StoreKit: Used for subscription and purchase management. No third-party payment processor is involved and 0ARCH never receives your payment details.

7. What We Do NOT Do

• No third-party analytics or tracking SDKs
• No advertising identifiers and no advertising
• No location data, no contacts
• No accounts or sign-in of any kind
• No sale or sharing of personal information, as those terms are defined under California law
• No retention of your recordings or transcripts on our servers

8. Anonymous Usage Counts

Sayo sends anonymous, aggregate usage counts to its own backend on Cloudflare — for example, that a memo was recorded, or that the upgrade screen was opened. These are bare counts only: they carry no identifier for you or your device, no recordings, no transcripts, and no memo content, and they cannot be traced back to an individual. They exist so we can tell which parts of Sayo people actually use. No third-party analytics service is involved, and you can turn this off entirely under Settings → Privacy in the app.

9. Data Deletion

You can delete your data at any time:

• Use the “Clear All Data” option in Settings to delete all memos and extracted items.
• Uninstalling the app removes all local data.
• iCloud data can be removed via iOS Settings > iCloud > Manage Storage.

There is no separate request to make of us, because we hold no copy of your content to delete.

10. If You Are in the EU, the UK, or California

Sayo is available worldwide, and the same practices apply everywhere: no accounts, no profiling, no sale of data, and no retention of your content on our servers.

Where the GDPR or UK GDPR applies, our lawful basis for the cloud processing in Section 3 is your consent, which you give on first launch and can withdraw at any time by turning Cloud AI off in Settings, and our lawful basis for the anonymous counts in Section 8 is our legitimate interest in understanding which features are used, which you can also switch off. Processing happens in the United States. You have the rights of access, rectification, erasure, restriction, portability, and objection; because we hold no identifiable data about you, we will usually have to tell you that we have nothing to produce, and your content is under your control on your own device and in your own iCloud. You may complain to your local supervisory authority.

Where the CCPA and CPRA apply, we do not sell or share personal information and have not done so in the preceding twelve months, and we do not use it for cross-context behavioral advertising.

11. Recordings of Other People

If you record other people, you become responsible for their information as well as your own, and the law in many places requires their consent before you record. That obligation is yours, not ours, and it is set out in Section 3 of our Terms of Service.

12. Children's Privacy

Sayo is not directed at children under 13, and we do not knowingly collect personal information from them. Where local law sets a higher age for consenting to data processing, such as 16 in parts of the European Union, that age applies instead.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the “Last updated” date above. Continued use of the app constitutes acceptance of the updated policy.

14. Contact

If you have questions about this Privacy Policy, contact us at support@0arch.io.