Privacy Policy

• Cloud transcription (Pro). Your audio goes through the Avaan API to a speech-to-text provider, and the transcript comes back to your device. We do not store dictation audio or transcripts on our servers. The provider processes the audio under its own terms.
• Local transcription (Mac). Audio is processed on your Mac and is not sent to Avaan.
• Text editing and AI Modes (Pro). The transcript text goes to a language model so it can clean up or reformat it, along with the context that guides the edit: the name of the app and the title of the window you are dictating into (a window title can include a document name or email subject), your custom vocabulary, and the instructions of the mode you chose. No audio is sent.
• Dictation history. If you are signed in, history syncs as metadata only: duration, model, timestamp, and favorite or tag state. It never includes transcript text or audio.
• Notes (iPhone, signed in). Note titles, transcript text, folders, and tags sync to your account so they appear on your devices. Note audio uploads only if you turn on audio upload, and you can turn it off at any time. Deleting a synced Note deletes its cloud and account-local audio.
• Speaker labels. For conversation Notes with uploaded audio, we send the audio to a speech-to-text provider to label who spoke.
• Vocabulary, modes, and settings. Your custom vocabulary, custom AI modes, and settings sync to your account.

Memories let Ask, weekly reflections, suggestions, related Notes, and voice conversation draw on your Notes. They are Pro-only and stay off until you turn them on. When they are on, the title and transcript of each included Note (with speaker labels for conversations), the Note identifier and type, and the recording date go to Supermemory, our memory provider. Each account has its own container there. Audio is never sent to Supermemory.

When you ask a question or hold a voice conversation, Avaan retrieves excerpts of your Notes and memories and sends them with your question to a language model (OpenRouter and the model host) or, for voice conversation, to OpenAI.

You control what the memory engine holds:

• Exclude a Note from memories, or forget one memory, from the Note or memory view.
• Correct a memory. A correction is stored as a newer version of that memory.
• Turn memories off. This deletes your container at Supermemory.

What forgetting means. When you exclude or delete a Note, we delete its document at Supermemory and ask it to forget the memories derived from it. Supermemory soft-forgets: forgotten memories stop appearing in search and in Ask, but the provider may keep the underlying records until its own deletion process removes them. Supermemory does not publish a deadline for that process, so we cannot promise one. Deleting a container uses the same provider-side process.

When you create an account we collect your email address, an optional name, and the sign-in method you use (email and password, Google, GitHub, or Apple). We store session records, including IP address and user agent, so you can stay signed in. Billing records hold your plan, trial state, and how many seconds of cloud transcription you have used.

Subscriptions bought on the web are billed through Stripe, with plans managed by Autumn. Stripe collects your card details; Avaan never sees your card number. Subscriptions bought in the iPhone app are billed by Apple, and RevenueCat validates the purchase receipt and reports it to Autumn. Trials need no card.

Samva sends our email: account verification and password reset, a welcome message, trial and billing notices, and the changelog newsletter if you subscribe. You can unsubscribe from the newsletter with the link in any issue. Account and billing notices continue while your account exists.

Sentry receives crash and error reports from the website, the API, and the Mac app. Axiom stores one log event per API request with identifiers, plan, route, model, durations, text lengths, and error codes. Both are built to leave out audio and transcript text. The Mac app attaches streaming timings and counters to a report only if you turn on diagnostics. Avaan does not use advertising trackers.

We use Cloudflare for hosting, the AI gateway, and storage; PlanetScale for the account database; Meta, OpenAI, AssemblyAI, Deepgram, and Sarvam for speech to text; OpenRouter, Google, and TypeSafe for text models; Supermemory for memories; Autumn, Stripe, Apple, and RevenueCat for billing; Samva for email; Google, GitHub, and Apple for sign-in; and Sentry and Axiom for diagnostics. The subprocessors page lists what each receives, why, and where. Requests to AI providers go through our Cloudflare AI Gateway with logging and caching turned off. Each provider handles the data it receives under its own policy, and we have no control over how long a provider keeps it.

We do not sell personal information or share it for advertising.

• Account deletion. Delete your account in the iPhone app (Settings, then Delete Account) or on the Account page of your dashboard. You can no longer sign in once you confirm, and we remove the rest without you: your sign-in records and sessions, your Notes, history, settings and the rest of your synced data, uploaded Note audio, your memories container at Supermemory, stats share links, your billing customer at Autumn (which cancels a web subscription), and your contact at Samva. If you can no longer sign in, email privacy@avaan.app from your account address and we delete it for you.
• Before then. Synced data stays until you delete it or the account. Deleting a Note removes it and its audio from your account.
• What may remain. Stripe and Apple keep payment and purchase records as the law requires, and RevenueCat keeps receipt records under its policy. Supermemory may keep soft-forgotten records as described above. Operational logs at Sentry and Axiom expire on those services' retention schedule and contain no audio or transcript text. A shared stats link stops working 30 days after you create it; email us to have one removed sooner.
• Audio. Dictation audio is not kept by Avaan. Providers may retain what they receive under their own terms.

Traffic between your device and Avaan uses HTTPS. Account data is stored with our infrastructure providers, and access to production systems is limited to the people who operate them. No system is perfectly secure; tell us at the address below if you find a problem.

You can ask us to access, correct, export, or delete the personal data we hold about you, and you can opt out of the newsletter at any time. Account deletion is self-serve as described above. For anything else, email privacy@avaan.app. If you live in the European Economic Area or the United Kingdom, you can also object to or ask us to restrict processing, and you can complain to your data protection authority.

Avaan is not directed to children under 13, and we do not knowingly collect their data.

When we change this policy in a way that matters, we update the date above and tell you by email or in the app. We add a provider to the subprocessors page before we send data to it.

Privacy questions and data requests: privacy@avaan.app.