Privacy policy
Aparté records your meetings, transcribes them on your iPhone or iPad, then writes a summary. This page explains what stays on your device, what leaves it, where it goes and what the Aparté server keeps.
Who is responsible
The data controller is Matthieu Milliot. Contact for any question or request about your data: matthieu.milliot@gmail.com.
What stays on your iPhone or iPad
- The audio of your meetings: it is never sent off your iPhone or iPad. Transcription happens on the device.
- Your meetings, their transcripts, your notes and your summaries: they are stored on the device and in its iCloud or local backups, depending on your settings.
- When you record from Apple Watch, the audio is transferred to the iPhone, which does the rest.
What leaves, and to whom
To write the summary, Aparté sends the following to its server, then to Anthropic, the company that operates the Claude model:
- the meeting transcript;
- its context: the date and times, the time zone, the title, the client or project, the participants and the notes you entered, and, if you linked it, the title of your calendar event and the names of the people invited to it.
Never sent to the Aparté server or to Anthropic: the audio, the meeting location, email addresses. To find the address of the location, the device queries Apple's maps service; the address obtained stays on the device.
The Aparté server passes these items on to Anthropic without storing them. Aparté's contract is with Anthropic Ireland, Limited. Anthropic stores the data in the United States, and the summary may be computed in other regions where Anthropic operates. Your data therefore leaves the European Union: this transfer relies on the European Commission's standard contractual clauses, included in Anthropic's data processing agreement. Anthropic deletes the data within 30 days, except where required by law or for content its systems flag as violating its usage policy, which it may keep for up to 2 years. It does not use the data for training its models.
This transfer is based on your consent, which is requested on the welcome screens, before anything is sent. Until you give it, no transcript leaves your iPhone or iPad, and neither do the title, the names or the notes of a meeting. You can withdraw it at any time in Settings, under Privacy: your meetings then stay on the device, without a summary, until you give your consent again.
Each time you open the app, even before your consent
Each time you open the app (and when you open Settings), Aparté contacts its server to display the free minutes counter. This request carries the install identifier described below, the app version and, if you are a subscriber, the proof of subscription signed by Apple. It is sent before you have given your consent for summaries, since it contains no meeting: no transcript, title, name or note. The first of these requests makes the server record the install identifier and the date of this first connection, which starts the 3 free months.
What the Aparté server keeps
- An install identifier, generated at random the first time you open the app, and the date of its first connection to the server. They are used to display the counter and to count the free hour each month, during the 3 free months. The identifier is kept in the device's keychain, without iCloud sync: it survives reinstalling the app, so that a reinstall restores neither the month's free hour nor the 3 free months. On its own, it does not identify you.
- For each summary: the meeting identifier, the time counted, the recorded duration, the model that wrote it and the writing time, the number of tokens used, the date, and a cryptographic fingerprint (SHA-256) of the transcript. This fingerprint cannot be used to recover the text; it is used to avoid counting the same meeting twice.
- A log of summary attempts (install identifier, meeting identifier, transcript fingerprint, estimated duration, status), kept for two days, used to cap the service's spending and to prevent abuse.
- If you are a subscriber: the original identifier of your Apple subscription, the plan (monthly or yearly), its expiry date and, where applicable, the trial period, to count your usage for the month. Aparté receives neither your name nor your payment method.
- The days on which the app contacted the server (the day, without the time) and the app version, linked to the install identifier and kept for 13 months.
- Daily counters without any identifier: number of summaries, failures and refusals.
- A technical log of requests (install identifier and time), purged after two hours, used to limit the number of requests per hour.
The server keeps neither the transcript, nor the context, nor the summary: they only pass through. The service's technical logs contain no meeting content, only identifiers, durations, statuses and token counts; the host keeps them for 7 days at most. The service's host (Cloudflare) processes the IP addresses of connections in order to route them.
This data is kept for the duration of the beta, then deleted when the beta closes, or earlier on simple request.
Usage measurement
The publisher tracks how Aparté is used in order to run the service: how many installs use it each day and each month, how many come back, the time and cost of summaries, the move to a subscription. This relies on the data above, viewed only as totals, in a private dashboard that shows no identifier. No audience measurement or advertising tool is built into the app; this data is not used for tracking and is shared with no one.
Apple also gives the publisher aggregated statistics on downloads, sales, subscriptions and where visits to the App Store page come from (for example a campaign link). They cannot be used to identify you.
This measurement is based on the publisher's legitimate interest in running and improving its service. You can object to it by writing to matthieu.milliot@gmail.com: the activity days linked to your install will then be deleted.
Subscription and payment
The Aparté Premium subscription is sold and managed by Apple. Aparté never sees your payment details. The app sends the server the proof of subscription signed by Apple to check that it is valid.
Your rights
You have the rights of access, rectification, erasure, objection, restriction and portability regarding your data, as well as the right to withdraw your consent at any time. To exercise them, write to matthieu.milliot@gmail.com. You can also lodge a complaint with the CNIL (cnil.fr), the French data protection authority. You can delete all meetings in Settings; deleting the app erases the data on the device. The settings available to you are gathered on the Your privacy choices page.
Informing participants
Recording people's voices without their knowledge is a criminal offense: Article 226-1 of the French Criminal Code punishes recording, without their consent, words spoken in a private or confidential capacity. Before recording, inform the participants and obtain their consent. You are responsible for your recordings.
Changes
This policy may change along with the app. The date of the last update appears at the top of the page.
See also your privacy choices and the terms of use.