Effective date: October 14, 2026 Version: 2026-10-14
This policy explains how TalkBrief handles your personal information. In short: your recordings and notes are stored on your devices and in your own iCloud, and belong to your TalkBrief account; our servers keep only what sign-in, subscriptions and usage limits need; cloud transcription and AI features process the relevant content temporarily, only when you use them.
1. Who we are
TalkBrief is operated by Lin Zhiwu (林志武), the controller of the personal information described here. Contact: [email protected]. This policy covers the TalkBrief iPhone app, Apple Watch app, widgets and web viewer.
2. How your four accounts relate
| Account | Role |
|---|---|
| TalkBrief account | Created with Apple or Google; owns your library, settings, Pro access and usage |
| Sign-in methods (Apple, Google) | Prove it is you; we receive only the identifier from the sign-in service and the name and email you choose to share |
| iCloud account | Where your library is stored; each TalkBrief account has its own separate area in it |
| App Store purchase account | Payment and renewal, handled by Apple; we only verify transaction proofs |
3. Information we process
| Context | Information | Purpose | Where |
|---|---|---|---|
| Sign-in | Apple or Google user identifier; name (optional); email (Apple's Hide My Email allowed); TalkBrief account ID; linked sign-in methods | Create and recognise your account, show it on the Account page, support | AWS Cognito (Singapore), Cloudflare |
| Consent records | Versions of the Terms and Privacy Policy you accepted, and when | Show that we obtained your consent | Cloudflare |
| Devices | Device attestation identifier (Apple App Attest), device model (e.g. iPhone 17 Pro, not the name you gave the device), last active time | Abuse prevention, signed-in device list, remote sign-out | Cloudflare |
| iCloud check | One-way hash of your account ID and an anonymous iCloud identifier (up to 5) | Tell you when some recordings may be in a different iCloud | Cloudflare |
| Subscriptions | App Store transaction ID, product, environment, expiry or refund status | Verify Pro access and link it to your account | Cloudflare |
| Usage | Monthly AI summary and Ask counts, cloud transcription time | Apply Free and Pro limits | Cloudflare |
| Library | Audio, transcripts, summaries, tags, tasks, meeting briefs, Ask history, templates and vocabulary | Provide the app's features | Your devices; your iCloud when sync is on |
| Cloud transcription (when you choose it) | The selected audio | High-accuracy transcription | Temporarily uploaded to Cloudflare R2 and the transcription provider, deleted after processing |
| AI features (when you use them) | Relevant transcript, summary, question, cited snippets, template instructions and output language | Summaries, Ask and translation | Sent through Cloudflare to the AI provider; not kept long term |
| Integration requests (optional) | Random request ID, selected tool, optional text, app version, interface language | Plan new integrations | Cloudflare |
We do not use advertising identifiers, track you across apps, or collect location, contacts or photos. Microphone, Reminders and speech recognition permissions are requested only when you use the related feature.
4. Data ownership, signing out and deleting your account
- Your library and personal settings belong to your TalkBrief account and are stored separately per account on devices and in iCloud. Another account signed in on the same device cannot see your data.
- Signing out hides your data and keeps it; it returns when you sign in again. You can choose Sign Out and Remove from This iPhone to delete only this device's copy; the iCloud copy stays.
- Deleting your account (Profile › Account › Delete Account, confirmed with Apple): we revoke Sign in with Apple authorization (if linked), ask Google to revoke access (if linked), and delete all sign-in accounts of your TalkBrief account and its server-side profile; the app deletes all recordings, transcripts, summaries and notes of that account on the device and in iCloud.
- If iCloud is unavailable at that moment, the app finishes deleting the iCloud copy when iCloud becomes available. Your other devices delete their local copies the next time they go online; a device that never goes online keeps its copy until it does.
- Account deletion does not affect files you exported, content already sent to Notion, Slack, Discord, Google Docs, OneNote or Obsidian, or tasks added to Apple Reminders. iCloud share links created by the account stop working. Deleting your account does not cancel your App Store subscription.
- If you stop using Sign in with Apple for TalkBrief in Apple settings, we sign out all your devices; if your Apple Account is deleted, we delete the corresponding TalkBrief account.
5. Service providers
| Provider | Purpose | Information | Region |
|---|---|---|---|
| Apple | Sign in with Apple, iCloud, App Store, App Attest | Under Apple's privacy policy | Per Apple |
| Amazon Web Services (Cognito, Lambda, DynamoDB) | Sign-in accounts and verification | Sign-in identifiers, email and sign-in tokens | Singapore |
| Google (Sign in with Google) | Sign in with Google | Under Google's privacy policy; we receive your Google identifier, name and email | Per Google |
| Cloudflare (Workers, D1, R2) | Account, subscription, usage and device records; relaying AI requests; temporary audio for transcription | See Section 3 | Requests handled across its global network; account and usage database and temporary audio storage in the western United States; transcription task records in Asia-Pacific |
| Google Cloud Speech-to-Text (alternatives: Gemini, Speechmatics) | Cloud transcription | Audio you select | Google's global endpoint; in the United States when speaker identification is on. Alternatives use their default service regions |
| DeepSeek | AI summaries, Ask, translation | Relevant text | People's Republic of China |
| Hugging Face | Model download for on-device speaker identification, first use only | Network request only, no recordings | Global content delivery network |
Providers may process information only for these purposes. We do not sell personal information and do not use your content to train AI models. We disclose information to authorities only when the law requires it. In a merger or transfer, we will require the new controller to keep to this policy and will tell you.
6. International transfers
These providers may process information outside your country or region, including in the United States, Singapore and the People's Republic of China. We protect it with encryption in transit, data minimisation and contractual safeguards.
7. Retention
| Information | Kept until |
|---|---|
| Library (devices and iCloud) | You delete recordings or your account; Recently Deleted items are permanently removed after 7 days |
| Temporary audio and results for cloud transcription | Cleanup attempts remove audio after processing or failure and results after the app retrieves them. Interrupted processing, failed cleanup or an absent acknowledgement can delay removal. Task and usage records are retained separately from audio |
| Account profile, consent records, device records, iCloud check hashes | Account deletion |
| Sign-in account (Cognito) | Deleted after account deletion, target within 30 days |
| Old identity mappings | 30 minutes after sign-in account deletion is confirmed |
| In-flight usage accounting | Up to 24 hours after deletion |
| Deletion records | 12 months after deletion completes |
| Disabled random account ID | At least 12 months after deletion, then removed once related device migration records expire |
| Legacy per-device usage counters | Rolling 13 months |
| Cloud transcription usage per subscription | 24 months after the subscription last expires or is refunded |
| Integration requests | No longer than 12 months |
| Admin console audit records | 24 months |
Retained random identifiers and accounting records remain protected personal information and are used only to prevent duplicate allowances and handle refund disputes.
8. Security
Sign-in credentials stay in this device's Keychain without iCloud sync; all connections are encrypted; server requests verify both the account and the device; logs do not record tokens or recording content. The operator accesses account records only for support, security and legal obligations (never recording content, which our servers do not hold), and every access is logged. No system is perfectly secure; if a security incident occurs, we will notify you and report it as the law requires.
9. Your rights
- Access and export: Account › Export All Data exports recordings, transcripts and summaries.
- Correction: edit your display name on the Account page; edit or delete recording content in the app.
- Deletion: see Section 4.
- Withdrawing consent: delete your account, or simply do not use cloud transcription and AI features. Withdrawal does not affect processing before it.
- Other requests or complaints: email [email protected]; we reply within 15 business days. You may also complain to your local data protection authority.
10. Children
TalkBrief is not intended for anyone under 16. If you believe we have processed a minor's information, contact us and we will delete it.
11. Third-party integrations
When you connect Notion, Slack, Discord, Google Docs, OneNote or Obsidian, credentials stay in this device's Keychain and belong to your current TalkBrief account. What is sent and how it is kept is described in each integration's in-app privacy note and is subject to that provider's policies. When you disconnect or delete your account, we ask the provider to revoke access where it supports this.
12. Changes to this policy
We will tell you in the app about material changes and ask you to agree again. Previous versions are kept at https://www.talkbrief.app/support/.
13. Contact
Lin Zhiwu (林志武) Email: [email protected]
简体中文
生效日期：2026-10-14 版本：2026-10-14
本政策说明 TalkBrief 如何处理你的个人信息。简单说：你的录音和笔记存在你的设备和你自己的 iCloud 中，归你的 TalkBrief 账号所有；我们的服务器只保存登录、订阅和用量所需的信息；云端转写和 AI 功能只在你使用时临时处理相关内容。
1. 我们是谁
TalkBrief 由林志武运营，是本政策所述个人信息的处理者。联系邮箱：[email protected]。本政策适用于 TalkBrief iPhone App、Apple Watch App、小组件和网页版。
2. 四个账户的关系
| 账户 | 作用 |
|---|---|
| TalkBrief 账号 | 通过 Apple 或 Google 登录创建；拥有你的录音库、设置、Pro 权益和用量 |
| 登录方式（Apple、Google） | 证明是你本人；我们只拿到登录服务给出的编号，以及你选择共享的姓名和邮箱 |
| iCloud 账户 | 存放你的录音库的地方；每个 TalkBrief 账号在其中有独立区域 |
| App Store 购买账户 | 付款和续费；由 Apple 处理，我们只核验交易凭证 |
3. 我们处理哪些信息
| 场景 | 信息 | 用途 | 存放位置 |
|---|---|---|---|
| 登录 | Apple 或 Google 用户编号；姓名（可不共享）；邮箱（Apple 可使用隐藏邮箱）；TalkBrief 账号 ID；已绑定的登录方式 | 创建和识别账号，账户页显示，客服联系 | AWS Cognito（新加坡）、Cloudflare |
| 同意记录 | 你同意的协议和政策版本、时间 | 证明已取得你的同意 | Cloudflare |
| 设备 | 设备验证标识（Apple App Attest）、设备型号（如 iPhone 17 Pro，不含你设置的设备名称）、最近活跃时间 | 防滥用、显示已登录设备、远程退出 | Cloudflare |
| iCloud 核对 | 由你的账号 ID 和 iCloud 匿名编号生成的单向哈希值（最多 5 个） | 提示“部分录音可能在另一个 iCloud 中” | Cloudflare |
| 订阅 | App Store 交易编号、产品、环境、到期或退款状态 | 核验 Pro 权益，关联到你的账号 | Cloudflare |
| 用量 | 每月 AI 摘要和问答次数、云转写时长 | 执行免费和 Pro 额度 | Cloudflare |
| 录音库 | 音频、转写、摘要、标签、任务、会议简报、问答记录、模板和词库 | 提供 App 功能 | 你的设备；开启同步时在你的 iCloud |
| 云端转写（你选用时） | 所选音频 | 生成高精度转写 | 临时上传到 Cloudflare R2 和转写服务商，处理后删除 |
| AI 功能（你使用时） | 相关转写、摘要、问题、引用片段、模板说明和输出语言 | 生成摘要、问答和翻译 | 经 Cloudflare 发送到 AI 服务商，不长期保存 |
| 集成需求反馈（自愿） | 随机请求编号、所选工具、可选文字、App 版本、界面语言 | 规划新集成 | Cloudflare |
我们不使用广告标识符，不做跨 App 追踪，不收集位置、通讯录或照片。麦克风、提醒事项、语音识别等权限仅在你使用对应功能时申请。
4. 数据归属、退出登录与删除账号
- 录音库和个人设置归你的 TalkBrief 账号所有，在设备和 iCloud 中按账号分开存放。同一台设备上登录其他账号，看不到你的数据。
- 退出登录：数据被隐藏并保留，重新登录后恢复；可选“退出并从此 iPhone 移除”，仅删除本机副本，iCloud 副本保留。
- 删除账号：在“我的 › 账户 › 删除账号”操作，需再次验证身份。我们会撤销 Apple 登录授权（如已绑定）、请求撤销 Google 授权（如已绑定）、删除该账号的全部登录账户和服务器上的账号资料；App 会删除该账号在本机和 iCloud 中的全部录音、转写、摘要和笔记。
- 若删除时 iCloud 暂不可用，App 会在 iCloud 恢复后自动完成删除。该账号的其他设备在下次联网时会删除其本机副本；一直未联网的设备，副本会保留到其联网为止。
- 删除账号不影响：已导出的文件；已发送到 Notion、Slack、Discord、Google 文档、OneNote、Obsidian 的内容；已添加到 Apple 提醒事项的任务。该账号创建的 iCloud 共享链接将失效。删除账号不会取消 App Store 订阅。
- 如果你在 Apple 设置中停止对 TalkBrief 使用“通过 Apple 登录”，我们会退出你的所有设备；如果你的 Apple 账户被删除，我们会删除对应的 TalkBrief 账号。
5. 受委托的服务商
| 服务商 | 用途 | 处理的信息 | 地区 |
|---|---|---|---|
| Apple | 通过 Apple 登录、iCloud、App Store、App Attest | 按 Apple 隐私政策 | 按 Apple |
| Amazon Web Services（Cognito、Lambda、DynamoDB） | 登录账户、登录验证 | 登录服务用户编号、邮箱、登录令牌 | 新加坡 |
| Google（通过 Google 登录） | 通过 Google 登录 | 按 Google 隐私政策；我们收到 Google 用户编号、姓名和邮箱 | 按 Google |
| Cloudflare（Workers、D1、R2） | 账号、订阅、用量、设备记录；转发 AI 请求；临时存放待转写音频 | 见第 3 条 | 请求经全球节点处理；账号与用量数据库、临时音频存储位于美国西部；转写任务记录位于亚太地区 |
| Google Cloud Speech-to-Text（备选 Gemini、Speechmatics） | 云端转写 | 你选择的音频 | Google 全球服务端点；开启说话人识别时在美国处理。备选服务商按其默认服务地区 |
| DeepSeek | AI 摘要、问答、翻译 | 相关文字内容 | 中华人民共和国 |
| Hugging Face | 首次使用本机说话人识别时下载模型 | 仅网络请求，不含录音 | 全球内容分发网络 |
服务商只能为上述用途处理信息。我们不出售个人信息，不用你的内容训练 AI 模型。只有法律要求时才会向有关机关披露。若发生并购或转让，我们会要求新的处理者继续遵守本政策并告知你。
6. 跨境传输
上述服务商可能在你所在国家或地区以外处理信息，包括美国、新加坡和中华人民共和国。我们通过加密传输、最少必要信息和合同约束保护你的信息。
7. 保存期限
| 信息 | 保存至 |
|---|---|
| 录音库（设备和 iCloud） | 你删除录音或删除账号为止；回收站中的录音 7 天后永久删除 |
| 云转写临时音频和结果 | 处理完成或失败后尝试清理音频，结果在 App 取回后清理。处理被中断、清理失败或 App 尚未确认取回时，删除可能延迟。任务和用量记录与音频分别保存 |
| 账号资料、同意记录、设备记录、iCloud 核对哈希 | 删除账号时删除 |
| 登录账户（Cognito） | 删除账号后删除，目标 30 天内完成 |
| 旧的身份对应记录 | 登录账户删除确认后 30 分钟 |
| 进行中的用量记账 | 删除后最多 24 小时 |
| 删除记录 | 删除完成后 12 个月 |
| 已停用的随机账号 ID | 删除后至少 12 个月，相关设备迁移记录到期后移除 |
| 旧版设备用量计数 | 滚动 13 个月 |
| 按订阅记录的云转写用量 | 订阅最后一次到期或退款后 24 个月 |
| 集成需求反馈 | 不超过 12 个月 |
| 管理后台审计记录 | 24 个月 |
保留的随机编号和记账记录仍属于受保护的个人信息，只用于防止重复发放额度和处理退款争议。
8. 安全措施
登录凭证只存在本机钥匙串且不经 iCloud 同步；传输全程加密；服务器请求同时核验账号和设备；日志不记录令牌和录音内容。运营者仅因客服、安全和法律义务访问账号记录（不含录音内容，我们的服务器上没有录音），每次访问都会留下审计记录。没有绝对安全的系统；如发生安全事件，我们将按法律要求告知你并报告。
9. 你的权利
- 查阅和导出：在“账户 › 导出全部数据”导出录音、转写和摘要。
- 更正：在账户页修改显示名称；录音内容可在 App 内编辑或删除。
- 删除和注销：见第 4 条。
- 撤回同意：可通过删除账号撤回；也可不使用云转写和 AI 功能。撤回不影响此前处理的合法性。
- 其他请求或投诉：发邮件至 [email protected]，我们在 15 个工作日内答复。你也可以向所在地的个人信息保护监管机构投诉。
10. 未成年人
TalkBrief 不面向 16 周岁以下用户。如发现我们无意中处理了未成年人信息，请联系我们删除。
11. 第三方集成
连接 Notion、Slack、Discord、Google 文档、OneNote、Obsidian 时，授权凭证存在本机钥匙串，归当前 TalkBrief 账号；发送的内容和保存方式以 App 内各集成的隐私说明为准，并受对方政策约束。断开连接或删除账号时，我们会在对方支持时请求撤销授权。
12. 政策更新
政策重要变更时，我们会在 App 内提示并请你重新同意。历史版本在 https://www.talkbrief.app/support/ 保留。
13. 联系我们
林志武 邮箱：[email protected]