Privacy Policy

1. Overview

Sayo is a voice-first note-taking app developed by 0ARCH, based in Miami, Florida. 0ARCH is the data controller for the limited processing described here, and can be reached at support@0arch.io. This Privacy Policy describes how we handle your information when you use Sayo on iOS and watchOS.

The short version: Sayo has no accounts and no sign-in, your recordings live on your device and in your own private iCloud, and we do not keep a copy of anything you record.

2. Information We Collect

Information you provide:

• Voice recordings (audio files stored on your device and optionally synced to your private iCloud)
• Feedback, if you choose to send us any through the feedback box. This is the only thing you write that we keep. See section 9.

Information generated by the app:

• Transcriptions of your voice recordings
• AI-extracted summaries, tasks, events, and ideas

Sayo does not require an account or sign-in, and does not collect your name, email address, phone number, location, contacts, or any advertising identifier.

The app does generate one random support code for itself, so that a purchase can be restored and so that two feedback messages about the same problem can be recognised as coming from the same person. It is not derived from anything about you, we cannot use it to identify you, and it is never attached to a recording, a transcript, or a usage count. The only place it is stored on our side is alongside feedback you chose to send, and section 9 explains how to have that deleted.

3. Cloud AI Processing

Cloud AI is off until you agree to it. When you turn it on, your audio recording and its transcript are sent to Sayo's backend, which runs on Cloudflare Workers AI in the United States, where the recording is transcribed and analyzed to produce your summary, tasks, and events. The result is returned to your phone. This data is used only to produce that result. It carries no identifier for you or your device, it is not used for advertising, and it is not sold.

We do not retain it. Your recording and transcript are processed in memory and discarded when the request finishes. There is no database of your memos on our side, so there is nothing on our servers for us to hand over, lose, or be breached of.

Apart from your memos, Sayo's backend stores three things. Two are not your content at all: request counters used to limit abuse, and the app's own configuration. The third is feedback you choose to send us, and it is covered in the next section.

4. On-Device Processing

If you turn Cloud AI off in Settings, or you are offline, Sayo transcribes and analyzes your recording using Apple's speech recognition and Apple Intelligence on your iPhone, and nothing is sent to 0ARCH.

One honest caveat about Apple's part of this. Apple's speech recognizer prefers to run on your device, but on some iPhones and for some languages it will fall back to Apple's own servers. As of Sayo 2.0 that can no longer happen in this mode: when Cloud AI is off, Sayo requires on-device recognition, and if a device cannot do it Sayo tells you and stops rather than sending your audio anywhere. Earlier versions of this page said that change was still coming; it has shipped. Either way, audio processed this way never reaches 0ARCH.

5. How Your Data Is Stored

• On-device: Audio files are stored in the app sandbox. All memo data (recordings, transcripts, extracted items) is stored via SwiftData. Preferences are stored via UserDefaults.
• iCloud sync: Memos, extracted items, and extracted events may be synced to your private iCloud via Apple CloudKit if you have an iCloud account. That data lives in your Apple account, not ours, and we cannot read it. If iCloud is unavailable, the app operates in local-only mode.
• On our servers: Nothing. See Section 3.

6. Third-Party Services

• Cloudflare Workers AI: Sayo's cloud transcription and extraction backend, used when Cloud AI is enabled. It receives your recording and transcript, runs them through hosted AI models, and returns the result. Subject to Cloudflare's privacy policy and terms.
• Apple CloudKit: Used for iCloud sync of memo data into your own private iCloud. Subject to Apple's privacy policy.
• Apple Speech and Apple Intelligence: Used for on-device transcription and extraction. See Section 4.
• Apple StoreKit: Used for subscription and purchase management. No third-party payment processor is involved and 0ARCH never receives your payment details.

7. What We Do NOT Do

• No third-party analytics or tracking SDKs
• No advertising identifiers and no advertising
• No location data, no contacts
• No accounts or sign-in of any kind
• No sale or sharing of personal information, as those terms are defined under California law
• No retention of your recordings or transcripts on our servers

8. Anonymous Usage Counts

Sayo sends anonymous, aggregate usage counts to its own backend on Cloudflare — for example, that a memo was recorded, or that the upgrade screen was opened. These are bare counts only: they carry no identifier for you or your device, no recordings, no transcripts, and no memo content, and they cannot be traced back to an individual. They exist so we can tell which parts of Sayo people actually use. No third-party analytics service is involved, and you can turn this off entirely under Settings → Privacy in the app.

9. Feedback You Send Us

Sayo has a feedback box, in the home menu and at the top of Settings. It is entirely optional and nothing is sent unless you type something and press send. Unlike everything else described above, what you send here is stored, so it is worth being exact about it.

We keep the message you wrote, the date, which version of Sayo and which iPhone model and iOS version you were on, and a short support code. The support code is a random identifier created by the app; it is not your name, your email address, or your Apple ID, and we cannot use it to look you up anywhere. It exists so that if you write twice about the same problem we can tell it is the same problem. We keep all of this for one year and then it is deleted automatically.

Please do not put anything sensitive in the box, and remember that we read what you write. If you want your feedback deleted before the year is up, email support@0arch.io with your support code, which is shown in the app under Settings, and we will delete every message attached to it.

10. Data Deletion

You can delete your data at any time:

• Use the “Clear All Data” option in Settings to delete all memos and extracted items.
• Uninstalling the app removes all local data.
• iCloud data can be removed via iOS Settings > iCloud > Manage Storage.

There is no separate request to make of us for your memos, because we hold no copy of them to delete. Feedback you chose to send us is the one exception, and section 9 says how to have it removed.

11. If You Are in the EU, the UK, or California

Sayo is available worldwide, and the same practices apply everywhere: no accounts, no profiling, no sale of data, and no retention of your content on our servers.

Where the GDPR or UK GDPR applies, our lawful basis for the cloud processing in Section 3 is your consent, which you give on first launch and can withdraw at any time by turning Cloud AI off in Settings, and our lawful basis for the anonymous counts in Section 8 is our legitimate interest in understanding which features are used, which you can also switch off. Processing happens in the United States. You have the rights of access, rectification, erasure, restriction, portability, and objection; because we hold no identifiable data about you, we will usually have to tell you that we have nothing to produce, and your content is under your control on your own device and in your own iCloud. You may complain to your local supervisory authority.

Where the CCPA and CPRA apply, we do not sell or share personal information and have not done so in the preceding twelve months, and we do not use it for cross-context behavioral advertising.

12. Recordings of Other People

If you record other people, you become responsible for their information as well as your own, and the law in many places requires their consent before you record. That obligation is yours, not ours, and it is set out in Section 3 of our Terms of Service.

13. Children's Privacy

Sayo is not directed at children under 13, and we do not knowingly collect personal information from them. Where local law sets a higher age for consenting to data processing, such as 16 in parts of the European Union, that age applies instead.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the “Last updated” date above. Continued use of the app constitutes acceptance of the updated policy.

15. Contact

If you have questions about this Privacy Policy, contact us at support@0arch.io.