Privacy Policy

1. Who We Are

SpokenAudio™ ("the App") is developed and published by Create Simple Code LLC ("we," "us," or "our"). This Privacy Policy explains what information we collect (and what we do not), how it is stored, and your rights with respect to that information. By downloading, installing, or using SpokenAudio, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, do not install or use the App.

2. Information We Do Not Collect

We are committed to a privacy-by-design architecture. The following categories of data are expressly not collected, transmitted, or stored by Create Simple Code LLC:

• Voice recordings or audio files
• Transcripts or any text derived from your speech
• Your name, email address, phone number, or any identifying information
• Account credentials of any kind (SpokenAudio has no account or login system)
• Location data (precise or approximate)
• Health or medical information
• Device identifiers, IDFA, or advertising IDs
• Usage analytics, session data, or behavioral metrics
• Crash logs or diagnostic reports
• Any data that leaves your device in any form

3. Information Stored on Your Device

SpokenAudio stores the following data locally on your iPhone, under your device's iOS sandbox, accessible only to the App:

3.1 Voice Recordings

Audio samples are encrypted using AES-256-GCM authenticated encryption before being written to local storage. Encryption keys are generated per-device and stored in the iOS Secure Enclave. Neither Create Simple Code LLC nor any third party has access to these keys or the encrypted data.

3.2 Transcripts

Text transcripts are stored in encrypted form on your device using the same AES-256-GCM encryption scheme. Transcripts are produced entirely on-device using Apple's built-in Speech Recognition framework. No audio or text data is transmitted to any server during transcription.

3.3 App Preferences

User preferences such as audio quality setting, seek audio mode, default recording mode, and biometric lock preference are stored locally in iOS UserDefaults. These contain no personal information and are never transmitted.

3.4 Modification Logs

When you use Overwrite (OVR) or Insert (INS) editing, a plain-text log of edit events and timestamps is stored locally alongside your recording. This log contains no personal health information or transcribed speech — only structural edit metadata. It is stored on your device only and is never transmitted.

4. Microphone and Speech Recognition

4.1 Microphone Access

The App requests microphone permission exclusively to capture voice dictations. Microphone access is only active when you have explicitly started a recording session. The App does not listen in the background and does not retain raw audio in any unencrypted form.

4.2 On-Device Speech Recognition

SpokenAudio uses Apple's Speech framework for transcription in on-device mode exclusively. No audio is transmitted to any server. We make no representations about Apple's own data practices — users are encouraged to review Apple's Privacy Policy.

4.3 Revoking Access

You may revoke microphone or speech recognition permission at any time in iPhone Settings → Privacy & Security. Previously saved recordings and transcripts stored on your device are not affected.

5. Face ID and Touch ID

SpokenAudio offers an optional biometric lock using Face ID or Touch ID via Apple's LocalAuthentication framework. SpokenAudio does not access, store, transmit, or process any biometric data. All biometric authentication is handled exclusively by iOS and the Secure Enclave. We receive only a boolean success or failure result. No facial geometry, fingerprint data, or biometric templates ever pass through our code.

6. Encryption and Security

• AES-256-GCM authenticated encryption for all audio and transcript files
• Encryption keys stored in the iOS Secure Enclave — a hardware-isolated security processor
• iOS Data Protection applied to all recording files
• No data transmitted over any network connection by the App
• No third-party SDKs with network access are included in the App

While we employ industry-standard security measures, no system is completely immune to all security risks. We recommend enabling biometric lock within SpokenAudio and using a strong device passcode. If you lose your device, use Settings → Secure Deletion within SpokenAudio to destroy all encryption keys, rendering stored recordings permanently unreadable.

7. Third-Party Services and SDKs

SpokenAudio does not integrate any third-party analytics platforms, advertising networks, crash reporting services, social login providers, or data brokers. The App uses only Apple-provided system frameworks: AVFoundation, Speech, LocalAuthentication, CommonCrypto/CryptoKit, Security/Keychain Services, and StoreKit (purchase processing handled entirely by Apple). No data is shared with any third party. No advertising is displayed. No user data is sold, licensed, or disclosed to any third party for any commercial purpose.

8. Children's Privacy

SpokenAudio is intended for adult professional users and is not directed at children under the age of 13. We do not knowingly collect any information from children. If you are a parent or guardian and believe your child has used SpokenAudio, you may delete the App to remove all locally stored data.

9. HIPAA and Protected Health Information

SpokenAudio's architecture — on-device storage, AES-256-GCM encryption, Secure Enclave key management, and absence of any network transmission — is consistent with the technical safeguard requirements of the HIPAA Security Rule (45 CFR § 164.312).

10. Your Rights

10.1 Right of Access

There is no personal data held by us to provide. All data is on your device under your control.

10.2 Right to Deletion

Delete all data at any time via Settings → Secure Deletion (destroys encryption keys), deleting individual recordings in the Files tab, or deleting the App from your device.

10.3 Right to Portability

Export your recordings and transcripts at any time using the in-app export features (WAV audio, TXT and SRT transcript formats).

10.4 California Residents (CCPA)

SpokenAudio does not sell personal information and does not share personal information with third parties for cross-context behavioral advertising. The answer to "what personal information is collected" is none.

10.5 EU/EEA/UK Users (GDPR)

SpokenAudio does not process personal data within the meaning of the GDPR. No data is transferred outside your device. If you have a concern, contact us at the address in Section 18.

11. Data Retention

We retain no data because we collect no data. All recordings, transcripts, and preferences are stored locally on your device for as long as you choose to keep them. You are in complete control of retention. Using Secure Deletion destroys all encryption keys, making all encrypted data permanently irrecoverable.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date above and post the revised policy at spokenaudio.com/privacy. Continued use of SpokenAudio after the effective date of any revised Privacy Policy constitutes your acceptance of the changes.

13. Disclaimer of Warranties

THE APP IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, OR ACCURACY. CREATE SIMPLE CODE LLC DOES NOT WARRANT THAT THE APP WILL BE ERROR-FREE, UNINTERRUPTED, OR SECURE AGAINST ALL THREATS. YOUR USE OF THE APP IS AT YOUR SOLE RISK. SOME JURISDICTIONS DO NOT ALLOW EXCLUSION OF CERTAIN WARRANTIES; IN THOSE JURISDICTIONS, EXCLUSIONS APPLY TO THE FULLEST EXTENT PERMITTED BY LAW.

14. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, CREATE SIMPLE CODE LLC AND ITS OFFICERS, DIRECTORS, EMPLOYEES, AND AGENTS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, LOSS OF DATA, LOSS OF GOODWILL, OR BUSINESS INTERRUPTION, ARISING OUT OF OR IN CONNECTION WITH YOUR USE OF THE APP, DEVICE LOSS OR THEFT, OR FAILURE OF ANY SECURITY MEASURE. IN NO EVENT SHALL CREATE SIMPLE CODE LLC'S TOTAL LIABILITY EXCEED $100.00 OR THE AMOUNT YOU PAID FOR THE APP IN THE PRECEDING TWELVE (12) MONTHS, WHICHEVER IS GREATER. THESE LIMITATIONS APPLY REGARDLESS OF THE THEORY OF LIABILITY.

15. Indemnification

You agree to defend, indemnify, and hold harmless Create Simple Code LLC and its officers, directors, employees, agents, successors, and assigns from and against any and all claims, damages, obligations, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from or related to: (a) your use of the App; (b) your violation of any term of this Privacy Policy; (c) your violation of any third-party right; (d) your violation of any applicable law or regulation including HIPAA or professional licensing obligations; or (e) any content you record, transcribe, store, or export using the App.

16. Professional and Regulated Use Disclaimer

SpokenAudio is a general-purpose voice dictation tool. It is not a certified medical device, a certified legal transcription service, or a HIPAA-certified platform. Nothing in the App or this Privacy Policy constitutes legal, medical, regulatory, or compliance advice. Healthcare professionals, attorneys, and other regulated professionals are solely responsible for ensuring their use of SpokenAudio complies with all applicable professional, ethical, and legal obligations.

17. Governing Law and Dispute Resolution

This Privacy Policy shall be governed by and construed in accordance with applicable state law, without regard to conflict of law principles. Any dispute arising out of or relating to this Privacy Policy shall first be submitted to informal resolution by contacting us at the address below. If not resolved within thirty (30) days, it shall be finally resolved by binding arbitration under the rules of the American Arbitration Association.

YOU AND CREATE SIMPLE CODE LLC AGREE THAT EACH MAY BRING CLAIMS AGAINST THE OTHER ONLY IN YOUR OR ITS INDIVIDUAL CAPACITY AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS OR REPRESENTATIVE PROCEEDING.

18. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the data practices of SpokenAudio, please contact us: