Privacy Policy for KUU
Last updated: May 28, 2026
In short: What you spoke is yours. Your spoken content is not sent outside your device. Speech transcription and AI organization happen entirely on your iOS device, and the result is stored only in your own iCloud private database. The developer has no access. You can delete everything from inside the app at any time. The app uses minimal networking only for Apple StoreKit (KUU+ subscription) and Google AdMob ads — your spoken content is never sent to either (ads disappear with KUU+). For app quality improvement and immediate crash awareness, Firebase Analytics / Crashlytics are used only if you explicitly opt in; your spoken content is never sent there either (see Article 14).
Article 1 (General)
KUU (the "App") is an iOS application that helps you offload thoughts from your head by speaking them out loud and organizing them. The App processes information only to the minimum extent necessary to provide its features, prioritizing user privacy.
Article 2 (Information Handled)
The App handles only the following:
- Audio you record — Stored temporarily in a device-local cache only during transcription. Deleted immediately after processing. Never sent to any server.
- Transcribed and organized text — Saved locally on your device and in your iCloud private database so you can review what you have said.
- App settings — Theme, text size, head-water-level state, and other values required to run the App.
The App does not collect names, email addresses, phone numbers, location, contacts, calendar, photos, or device identifiers.
Article 3 (Speech Recognition and AI Organization)
Speech recognition (transcription) is performed entirely on your iOS device:
- Speech recognition: Apple's Speech framework (on-device). Your voice itself is never sent off the device.
AI organization (categorization) uses an external AI by default:
- Only the text of what you said (the transcript) is sent. Your voice is never sent.
- It is sent to an external cloud AI, relayed through the developer's server.
- The sent text is used only for categorization and is never stored. It is not used to train the AI either.
- You can switch to on-device-only organization (Apple's FoundationModels / on-device rules) anytime via "On-device" in Settings. In that case, the transcript never leaves the device.
Article 4 (iCloud Storage and Sync)
The App stores transcribed and organized text in your iCloud Private Database (CloudKit Private Database). This is Apple-provided storage that only you can access. The developer cannot view or retrieve any stored content.
The use of iCloud is subject to Apple's privacy policy.
Article 5 (Purpose of Use)
Handled information is used only for:
- Generating transcriptions from your voice and displaying them to you
- Categorizing transcriptions into Now / Later / Park / Release and displaying them
- Storing and displaying what you have spoken so you can review it
- Maintaining app settings
Article 6 (External Services)
The App uses the following external services. Your voice itself is not sent to any of them.
- iCloud / CloudKit (Apple, only your own private database)
- Speech framework (Apple, runs entirely on-device)
- An external cloud AI (default AI organization. Only the text of what you said is sent; used solely for categorization, never stored, never used for AI training. Can be turned off via "On-device" in Settings.)
- FoundationModels (Apple, runs entirely on-device. Used when "On-device" is enabled, or as fallback.)
- Apple StoreKit (KUU+ subscription purchase, renewal, cancellation. No spoken content is sent.)
- Google AdMob (Google Mobile Ads SDK) (Only when KUU+ is not active: one native ad slot between sections in the "What you said" screen. No spoken content is sent. See Article 13.)
- Firebase Analytics / Crashlytics (Google. For app quality improvement and stability monitoring. Used only when you explicitly opt in via Settings. No spoken content is sent. See Article 14.)
The App operates a minimal stateless server only to relay AI organization requests (no content is stored). It does not use authentication services requiring personal accounts. Analytics and crash reporting are gated on user opt-in.
Article 7 (Third-Party Disclosure)
The developer has no means to access your spoken content, transcripts, or organized results, and discloses none of them to any third party.
To deliver ads to users not subscribed to KUU+, the App sends information required by Google AdMob for ad delivery — including device identifiers, advertising ID, device language and region, coarse location, and ad interaction data — to Google (see Article 13; Google's AdMob privacy policy applies). While KUU+ is active, this transmission does not occur.
Information will only be disclosed when required by law.
Article 8 (Data Deletion)
You can delete all data at any time from "Settings → Voice & Data → Delete what's stored" inside the App. This permanently removes data both on the device and in iCloud (Private Database). Deleted data cannot be recovered.
Uninstalling the App deletes local data. iCloud data can be removed via Settings → Apple ID → iCloud → Manage Storage.
Article 9 (Security)
- Temporary audio files during recording are encrypted by iOS file protection (
FileProtectionType.complete) and inaccessible while the device is locked - Communication with iCloud is encrypted by Apple via SSL/TLS
- The App operates without any developer-managed server, so no developer-side information exists
Article 10 (Use by Minors)
The App is rated 4+, but its nature (thought organization) presumes literacy. Minors should use it with the consent of their guardian.
Article 11 (Changes to This Policy)
This policy may be updated due to changes in law, additions to features, or changes to Apple's framework specifications. Significant changes will be announced via an app update or on the public page of this policy.
Article 12 (Contact)
For inquiries regarding this policy, please contact us through the "Developer" section on the App Store page of the App.
Article 13 (Ads and App Tracking Transparency)
When you are not subscribed to KUU+, the App displays one native ad slot between sections in the "What you said" screen, served by Google AdMob. Ads are rendered quietly to fit KUU's tone.
- Your spoken content is never used for ads. Ads do not consult your transcripts, organized results, or themes.
- For ad delivery, Google AdMob may collect device identifiers (including IDFA), advertising ID, coarse location, diagnostics, and product interactions (ad-related interactions within the App).
- An iOS App Tracking Transparency (ATT) prompt is shown once, right before the first ad. Ads will still be shown if you decline, but the information sent to Google is restricted (non-personalized).
- You can change ATT permission at any time in iOS "Settings → Privacy & Security → Tracking".
- Subscribing to KUU+ stops all ads and their related data transmission.
- For details on AdMob's data handling, see the Google AdMob privacy policy.
Article 14 (Use of Firebase Analytics / Crashlytics)
For app quality improvement and immediate awareness of production incidents, the App may use Google's Firebase Analytics (aggregated usage signals) and Firebase Crashlytics (crash reporting). This feature is OFF by default (no data sent) and only operates when you explicitly opt in via "Settings → Data & Diagnostics".
- Information sent:
- Anonymized install ID auto-issued by Firebase (derived from IDFV; not a direct personal identifier)
- Aggregated in-app event signals (recording-session completion, paywall view / conversion, onboarding completion etc. Numeric values are bucketed into coarse granularity.)
- Symbolicated crash stack traces when the App terminates abnormally
- Information not sent: Your spoken content (audio), transcripts, AI-organized result text, and theme names you set are made unsendable at the type level (the implementation's API prevents passing string values to the analytics SDK).
- While opt-in is OFF, no communication with Firebase occurs at all (including all of the above categories).
- How to stop sending: Toggle "Settings → Data & Diagnostics" OFF at any time. When turned OFF, past install IDs are discarded and any unsent crash logs stored on-device are deleted.
- The recipient is Google LLC (United States). Google's Firebase Privacy Information applies.