Record.org

Privacy Policy

Effective August 13, 2026 · Applies to the Record.org app for iPhone and iPad and the web app at expaproject.com.

Record.org records conversations, transcribes them, and summarizes them with AI. Doing that requires processing your audio and text on our servers. This policy explains exactly what we collect, why, who processes it on our behalf, and how to delete it. The short version: your content belongs to you, we only use it to provide the service, we don't sell it, and we don't show ads.

What we collect

Account information. You sign in with Apple — we receive your name, your email address (or Apple's private relay address), and an Apple account identifier. We never see a password. You can optionally add profile details such as a photo, birthday, phone number, or location; all are optional.

Your content. Audio recordings, live and final transcripts, speaker names, AI-generated summaries, notes, imported files and photos, folders, tags, custom prompts and templates, and chat messages you exchange with your recordings.

Voice profiles. When you name a speaker in a recording, we create a voice profile (a numeric voiceprint) for that person so they can be recognized in your future recordings. Voice profiles are private to your account, are never shown to other users, and can be deleted at any time. You are responsible for having any consent required to record and identify other people.

Sharing information. The names and email addresses of people you choose to share recordings or prompts with, and delivery/viewing status for those shares.

Device and usage data. A push notification token for your device, session tokens, and basic usage measurements (for example, that a playback or sync happened and how long it took) that we use to operate and improve the service.

Diagnostics. Crash reports and performance data collected via Sentry when the app or server encounters a problem.

How we use it

We use your information only to provide the service: to transcribe and summarize your recordings, recognize speakers you've named, sync your content across your devices and the web app, deliver shares and notification emails you initiate, send push notifications, keep you signed in, fix bugs, and understand how the service is performing. We do not sell your data, use it for advertising, or use your content to train our own or anyone else's AI models.

Who processes it on our behalf

We rely on a small number of service providers, each receiving only what it needs:

These providers process data under their own contractual commitments to us and may process it on servers in the United States.

Sharing you control

Nothing you record is visible to anyone else unless you share it. When you share a recording, each recipient gets an email with a private link to its transcript and audio — including the live transcript if you share while still recording. Recipients who use Record.org and verify their email also see the recording inside their own app. You can see who has viewed a share and revoke it at any time; revoking stops the link from working.

Retention and deletion

We keep your content until you delete it. Deleting a recording removes its audio, transcript, summaries, and share links from our servers. Deleting a saved speaker removes their voice profile. To delete your entire account and everything in it, email support@expaproject.com from the address on your account; we verify the request and complete the deletion promptly. Backup copies age out of our systems within 30 days of deletion.

Security

Data moves between your device and our servers over encrypted connections (TLS), and audio files are stored in private storage accessible only through short-lived signed requests. Session tokens are stored in your device's Keychain. No system is perfectly secure, but we design for the sensitivity of what you record.

Children

Record.org is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information. Most of these you can exercise directly in the app; for anything else, email support@expaproject.com and we will respond within 30 days.

Changes and contact

If we make material changes to this policy, we will update this page and note the new effective date above. Questions? Email support@expaproject.com.