Privacy Policy

Effective date: June 23, 2026

Privacy at a glance

• Audio stays on your device unless you use Précis end-to-end encrypted cloud audio backup. If you subscribe to Précis Pro and cloud audio backup is enabled, Précis encrypts audio on your device before upload. Précis cannot decrypt backed-up audio. Free-tier audio is not uploaded.
• Transcript text leaves your device so Précis can make notes. Transcription happens on your iPhone for recordings and audio imports. Transcript text and imported text are sent to the secure Précis backend for AI minutes, follow-up suggestions, sync, search, Ask Précis, Meeting Prep, research cards, and draft helpers.
• We do not use your meeting content to train AI models. Précis configures production AI requests so payload logging is disabled and responses are not cached.
• We do not sell your data or use it for advertising. Précis does not track you across other apps or websites and does not use your meeting content to build advertising profiles.
• Sharing creates a separate recipient copy. If you share a meeting with another Précis user, that user receives their own copy after accepting. Revoking the share stops future accepts and future shared-audio downloads, but does not erase a copy already accepted.
• You can delete your account in the app. Account deletion removes Précis data we control. It does not cancel your App Store subscription, which you must cancel with Apple.

1. Information We Collect

1.1 Account and device information

• CloudKit record identifier. Apple gives Précis an opaque identifier for your iCloud account inside the Précis app container. We use it as your account identity. We do not receive your Apple ID, name, or email address.
• Device verification information. Précis creates a device identifier and uses Apple’s App Attest system so the secure backend can confirm requests come from a genuine copy of the app. The private verification key stays on your device.
• Push token. If iOS issues a push token, Précis stores it with your device identifier and APNs environment so Apple Push Notification service can silently wake the app when minutes are ready. Silent pushes contain no audio, transcript text, generated minutes, or AI output.
• Session tokens. After device verification, Précis receives a short-lived token used to authenticate API requests.

1.2 Meeting content

• Audio recordings. Audio is recorded and stored on your device. Pro cloud audio backup uploads an end-to-end encrypted copy only when backup is enabled. Précis cannot decrypt backed-up audio.
• Imported content. If you share an audio file, plain text, or an extractable PDF transcript to Précis from another app, Précis copies that content into the app and treats it as meeting content. Audio imports are transcribed on your device. Text and extractable PDF imports use the imported or extracted text.
• Transcripts. For recordings and audio imports, Apple’s SpeechAnalyzer creates transcripts on your device. For text or PDF imports, Précis uses the text you import or the text extracted on your device. Transcript text is sent to the secure Précis backend so Précis can generate minutes, sync meeting history, power search, answer Ask Précis questions, prepare talking points, and support related features.
• Minutes, follow-ups, Ask Précis, research cards, and drafts. Précis stores AI-generated meeting minutes, suggested next moves, user-curated follow-up state, web-backed research cards, and draft outputs created from meeting context in secure, account-scoped storage. Ask Précis conversation history is stored locally on your device and is not synced.
• Templates. Précis stores built-in and user-customised templates that shape the minutes generated for your meetings.
• Shared meetings. If you share a meeting with another Précis user, Précis stores the invite, acceptance, recipient copy, and encrypted-audio grant information needed to deliver that shared meeting.
• Search data. For Pro semantic search, Précis creates search vectors from transcript text. Search vectors are not readable transcript text, but they reflect the meaning of your meetings, so we treat them as meeting content and keep them scoped to your account.

1.3 Subscription, security, and diagnostics

• Subscription status. Apple provides limited subscription status information so Précis can verify whether Précis Pro is active, expired, in billing retry, or in grace period. Apple processes payment; we do not receive your Apple ID, card number, billing address, or full payment information.
• Security and deletion records. Précis keeps operational records for authentication, App Attest, abuse prevention, deletion, erasure retries, and account lifecycle events. These records do not include names, email addresses, payment details, transcript text, audio, prompts, AI responses, or generated minutes.
• Request and sync logs. Précis keeps structured operational logs such as route, status code, timing, and sync activity. We do not log request bodies, authentication headers, transcript content, audio content, prompts, or AI responses.
• On-device diagnostics. Précis uses Apple system diagnostics such as MetricKit and unified logging on your device. These diagnostics are not automatically sent to our servers.

2. How We Use This Information

We use the information above only to operate Précis:

• Authenticate you, verify your device, and protect your account.
• Record, transcribe, summarise, sync, search, and reprocess meetings.
• Create follow-up suggestions, answer Ask Précis questions with source citations, prepare talking points, create research cards, and make editable drafts when you ask for those features.
• Back up end-to-end encrypted audio for Pro subscribers when cloud audio backup is enabled; Précis cannot decrypt that audio.
• Share a meeting snapshot with another Précis user when you choose to share.
• Verify subscriptions and unlock paid features.
• Detect abuse, fraud, and unauthorised access.
• Diagnose and fix software problems.

We do not use your data for advertising, behavioural targeting, sale of personal information, or profiling that produces legal or similarly significant effects.

3. On-Device vs. Cloud Processing

Précis separates audio, transcript text, and generated notes:

• Recording and audio-import transcription happen on your device. Précis uses Apple’s SpeechAnalyzer framework to transcribe recordings and audio imports locally.
• Transcript and imported text are sent to Précis. The secure Précis backend needs transcript text or imported text to create minutes, follow-ups, Ask Précis answers, Meeting Prep talking points, search data, research cards, and drafts.
• Audio backup is Pro-only and end-to-end encrypted before upload. If cloud audio backup is enabled, Précis encrypts audio on your device before sending it to cloud storage. Précis cannot decrypt backed-up audio; only devices with your iCloud Keychain audio-backup key can decrypt the backup for playback, download, or retranscription recovery.

4. AI Processing

Précis sends only the content needed for the AI feature you are using. For minutes, that is transcript text plus the selected template. For follow-up suggestions, research cards, and draft helpers, that is the relevant meeting-derived context needed for the requested output. Research cards may also use live web search and store the resulting card and source links in your account.

For Ask Précis, that content includes your question, recent local Ask conversation context when needed, and relevant parts of your own transcripts and minutes so Précis can answer with source citations. The local Meeting Prep brief is built on this iPhone. For AI Meeting Prep talking points, Précis sends the meeting title and relevant context from your own Précis meetings. Calendar agenda notes, attendees, attendee email addresses, locations, and join links are not sent for Meeting Prep talking points.

Précis does not use your meeting content to train AI models. Production AI requests are configured with payload logging disabled and response caching off. The gateway may keep operational metadata such as provider, model, token counts, status code, cost, and duration so we can monitor reliability and cost; that metadata does not contain transcript text, prompts, generated minutes, audio, payment information, or a direct account identifier.

5. Where Your Data Is Stored

Précis stores account data in cloud infrastructure and on your device:

• On your device. Précis stores local recordings, transcripts, minutes, settings, keys, local Ask Précis conversation history, and diagnostics needed to run the app.
• Object storage. Précis stores encrypted audio backups for Pro subscribers using cloud audio backup and transcript objects for synced meetings.
• Database. Précis stores account, meeting, transcript, minutes, sharing, template, subscription, audit, and deletion records.
• Vector index. Précis stores semantic search vectors for Pro search, scoped to your account.
• Transient cache. Précis briefly caches subscription status so paid-feature checks stay fast.

Cloud storage and databases are encrypted at rest by their providers. Data in transit between your device, Précis servers, and supported AI providers is encrypted with HTTPS/TLS. Audio downloads use signed URLs that expire after one hour.

6. Data Retention

Précis keeps data for as long as needed to provide the app or protect the service:

• Active meeting content. Audio backups, transcripts, minutes, search data, templates, follow-ups, research cards, and drafts are retained while your account is active unless you delete them sooner.
• Deleted meetings and templates. Deleted cloud audio is removed from cloud storage immediately. Deleted transcripts, minutes, and custom templates enter a 30-day backup window before permanent erasure.
• Shared meeting copies. Accepted shared meetings are retained in the recipient’s account until the recipient deletes them. Sender revocation stops future accepts and future shared-audio downloads.
• Inactive accounts. Précis may delete inactive accounts after a cancellable grace period. Empty accounts that never subscribed are eligible after 90 days of inactivity. Accounts with saved content or a lapsed subscription are eligible after 2 years of inactivity. Active subscribers are not deleted for inactivity. Signing in during the 30-day grace period cancels the deletion.
• Security and deletion records. Authentication events, App Attest key registrations, and object-deletion audit records are retained for up to 365 days. After account deletion, remaining object-deletion audit entries are anonymised.
• Erasure operation records. Précis keeps temporary operational records only as long as needed to finish deletion across storage systems, retry failed deletion steps, or confirm completion.
• Subscription records and cache. Subscription records are retained while your account is active and are deleted with your account except where law requires longer financial retention. Subscription status cache entries expire after 60 seconds.
• Session tokens. Session tokens expire after 24 hours and are not stored server-side.
• Local Ask Précis history. Ask conversation history stays on your device until you delete the thread, delete local app data, or delete the app.

7. Account Deletion

You can delete your account in the app: Settings → Account → Delete Account. Once deletion is accepted, your account is disabled and Précis begins deleting account data we control, including:

• Meetings, transcripts, minutes, transcript segments, templates, follow-ups, research cards, and drafts.
• Cloud audio backups and shared audio copies associated with your account.
• Share links, acceptance records, encrypted-audio grant envelopes, and sharing keys.
• Search vectors, push tokens, and cached subscription status.
• Authentication audit events, App Attest device keys, subscription event records, and the account record itself.

Deletion uses temporary erasure records so Précis can complete and retry deletion across object storage, the database, the vector index, and cache. These records are used only to complete deletion and are removed or anonymised when no longer needed.

Deleting your Précis account does not cancel your App Store subscription. Cancel subscriptions through Apple Account settings (Settings → [Your Name] → Subscriptions on iOS). If you do not cancel, Apple may continue billing you.

For data access, correction, or deletion requests that you cannot complete in the app, contact us as described in §15. We will respond after verifying your identity.

8. International Data Transfers

Our cloud infrastructure providers operate in many countries; your data may be processed in any region where they run the services we use. Our LLM providers are based in the United States.

For users in the European Economic Area, the United Kingdom, or Switzerland, cross-border transfers rely on each processor’s data-processing terms, including Standard Contractual Clauses where applicable. You may request a copy of relevant safeguards by contacting us (see §15).

9. Your Privacy Rights

9.1 GDPR (EEA, United Kingdom, Switzerland)

If you are in the EEA, the UK, or Switzerland, you have the following rights under the GDPR or local equivalent:

• Access — obtain a copy of the personal data we hold about you.
• Rectification — correct inaccurate personal data.
• Erasure — request deletion of your personal data. The in-app account deletion described in §7 satisfies this for the data Précis controls.
• Restriction of processing — ask us to limit how we use your data.
• Data portability — receive a structured, machine-readable copy of data we can export for you.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where we rely on consent, you may withdraw it at any time.
• Lodge a complaint — with your local supervisory authority.

Lawful basis. We process your data primarily because it is necessary to provide Précis to you (Article 6(1)(b) GDPR). For security, abuse prevention, diagnostics, and deletion audit records, we also rely on legitimate interests (Article 6(1)(f) GDPR).

Controller and processors. Pliologik LLC is the data controller. Cloud infrastructure providers and supported AI providers act as processors under their data-processing terms. Pliologik personnel may access data only as needed to operate, support, and secure Précis.

To exercise these rights, contact us (see §15). We will respond to GDPR requests within 30 days after verifying your identity.

9.2 CCPA (California)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the CPRA. The business responsible for Précis is Pliologik LLC.

• Right to know — what categories of personal information we collect and disclose.
• Right to access — a copy of the specific pieces of personal information we hold about you.
• Right to delete — deletion of your personal information.
• Right to correct — correction of inaccurate personal information.
• Right to opt out of sale or sharing — Précis does not sell or share your personal information, including for cross-context behavioural advertising. There is no opt-out to exercise.
• Right to limit use of sensitive personal information — Précis uses audio recordings only to provide the app’s features; no further limitation applies.
• Right to non-discrimination — we will not deny service or charge different prices because you exercise your privacy rights.

Categories of personal information Précis collects include:

• Identifiers (CloudKit record name, device identifier, App Attest key identifier, push token).
• Commercial information (subscription status, product identifier, transaction identifier).
• Internet or other electronic network activity (request logs, sync logs).
• Audio information (meeting recordings; cloud copy only for Pro cloud audio backup).
• User content (transcripts, minutes, templates, follow-ups, Ask Précis questions and answers, shared meeting copies, research cards, and drafts).
• Inferences drawn from user content (AI-generated summaries, action items, topics, decisions, suggested next moves, and search vectors).

To exercise these rights, contact us (see §15). We will respond to CCPA requests within 45 days after verifying your identity.

10. Tracking and Advertising

Précis does not track you across other apps or websites. We do not use advertising identifiers, third-party SDKs, analytics services, or data brokers. The app’s privacy manifest declares NSPrivacyTracking = false. As such, the App Tracking Transparency prompt does not appear in Précis.

11. Permissions Précis Requests

• Microphone — required to record meetings. Used only when you start a recording. We do not access the microphone in the background unless you start a recording and then move the app to the background or lock your device.
• Background audio — declared so that recordings continue when your screen locks.
• iCloud — required for identity. Précis uses CloudKit only to read your account’s opaque record name; it does not read or write to your iCloud Drive, Photos, Notes, Contacts, or any other iCloud data. CloudKit data sync is not configured.
• Notifications — optional. Requested only if you turn on Calendar-aware capture or Meeting Prep reminders. Reminders are scheduled on this iPhone and may show the meeting title or a short carry-over line, depending on your iOS notification preview settings. Précis also uses silent remote notifications to wake the app after processing; those pushes do not display an alert.
• Face ID — optional. Requested only if you turn on the in-app App Lock. Face ID is handled entirely by iOS; Précis receives only the unlock success or failure result and never your biometric data.
• Calendar (write-only) — optional. Requested only when you choose to turn a meeting action item or Suggested Next Move into a calendar event. Précis uses write-only access to open Apple’s native calendar editor pre-filled with the event you selected; it cannot read your existing calendar.
• Calendar (full access, for Calendar-aware capture) — optional, off by default. If you turn on Calendar-aware capture, Précis reads your upcoming events on this iPhone only, so it can show your next meeting, local reminders, and Prepare or Record actions. Précis does not upload your calendar, does not modify or delete your events, and reads only the calendars you choose. Attendee email addresses, agenda notes, locations, and join links are not uploaded. A meeting title can leave your device when you start recording from a calendar event or ask Précis Pro to generate Meeting Prep talking points. You can turn this off in Précis Settings, or revoke access in iOS Settings, at any time.
• Reminders — optional. Requested only when you choose to turn a meeting action item or Suggested Next Move into a reminder. Apple’s Reminders API requires access to add a reminder, so Précis requests it at that moment and uses it only to add the reminder you selected.

Précis does not request access to your camera, photo library, location, contacts, or health data.

12. Security

• App Attest. Every API request is bound to a key in your device’s Secure Enclave. We will reject requests from devices that fail attestation.
• HTTPS/TLS. All transit between your device, our servers, and supported AI providers is encrypted.
• Audio backup encryption. Cloud audio backups are encrypted on your device before upload. The server stores ciphertext and non-secret metadata. If no device has the required audio-backup key, Précis cannot recover the encrypted audio backup.
• Encryption at rest. Cloud storage and databases are encrypted at rest by their providers. On-device data is protected by iOS file protection.
• Per-user data isolation. Every server-side query that touches your data carries a user-scope clause. Audio file paths are namespaced under your account identifier. Search vectors are namespaced per user.
• Rate limiting. All API routes are rate-limited per device to mitigate abuse.
• Credentials. Secrets are managed through our secret-management system, not committed to source control.

No system is perfectly secure. If you discover a vulnerability, please report it to us (see §15).

13. Children’s Privacy

Précis is not directed to children under 13 or to anyone under the age required to consent to digital services in their country without parent or guardian consent. We do not knowingly collect personal information from children below that age. If you believe a child has provided personal information through Précis, please contact us (see §15) and we will delete it promptly.

14. Changes to This Policy

We may update this policy from time to time. For material changes, we will:

• Update the effective date at the top of this page.
• Where possible, surface a brief notice in the app on your next launch.

Your continued use of Précis after a material change means you accept the updated policy. If you do not accept it, you can delete your account as described in §7.

15. Contact

Précis is operated by Pliologik LLC. For privacy enquiries, data-subject requests, vulnerability reports, or company contact, email contact@pliologik.com.