Glyph Notes
Privacy Policy
1. Who we are
Glyph Notes (formerly LooseLeaf Voice Notes) is an iPhone app operated by Ryan Anselman, a sole proprietor based in Englewood, Colorado, USA. You can reach us at support@rantrecorder.com.
2. How the app works
When you press record, the app records your microphone to a file on your iPhone. The words are recognised on the phone, by a speech model that lives inside the app, and the transcript, the cleaned reading copy, the title and the topic words are written to a database on the phone. Search and Ask read that database. These work with or without a signal.
The cleaned copy, the title, the topic words and Ask answers use Apple Intelligence, which runs on the phone. On an iPhone without Apple Intelligence those features are not available, and you can still search by the words you said.
The app does not send a recording, a transcript, a search or a question to us or to anyone. These parts of the app use the network:
- The weekly email, if you turn it on. In Settings › Weekly email you sign into Google and grant one permission, to send email as you. Each Sunday evening the app composes a summary of your week (tasks due, tasks done, ideas) from the data on your phone and sends it through Gmail from your address to your address. We do not receive that email. The app stores the Google sign-in token on your phone and uses it for nothing but sending that email. Turning the switch off signs you out and revokes the token; you can also revoke it at myaccount.google.com/permissions. Glyph Notes’ use of Google user data follows the Google API Services User Data Policy, including its Limited Use requirements.
- Our mailing list, when you turn the weekly email on with “News from Glyph Notes” left on. The email address you signed in with is sent once to Buttondown, the service that runs our list, so we can write to you about Glyph Notes. That is the one piece of personal data we hold from the app. Every message has an unsubscribe link, and unsubscribing removes you.
- The speech model, from Apple. It is delivered by Apple with the app when you install it. If it is missing, for example when an install was interrupted, iOS downloads it from Apple in the background, and a recording waits for its words until that finishes. The app does not fetch the model from anywhere else.
- TestFlight and the App Store. While the app is in beta, Apple’s TestFlight may collect crash logs and any feedback you choose to send, under Apple’s privacy policy. Apple shares crash logs with us in a form that does not identify you.
3. Google user data
This section applies only if you turn on the weekly email and sign into Google.
What the app accesses. The app asks Google for three permissions and nothing more: openid and email, which give the app your Google account’s email address, and https://www.googleapis.com/auth/gmail.send, which lets the app send an email from your Gmail account. The app cannot read, search, change or delete any email in your Gmail account, and it does not access your contacts, files or any other Google data.
How it is used. The app uses the send permission for one thing: each Sunday evening it sends your weekly summary from your address to your own address. It uses your email address to address that message and, only if “News from Glyph Notes” is left on, to join our mailing list at Buttondown (section 2). Google user data is not used for advertising, is not sold, and is not used to train any model.
Where it goes. The app talks to Google directly from your iPhone, only at accounts.google.com, oauth2.googleapis.com and gmail.googleapis.com. We run no server in between and never receive your Google sign-in, your access tokens or the emails the app sends. Apart from your email address going to Buttondown as described above, no Google user data is shared with anyone.
How it is protected. Every connection to Google uses HTTPS (TLS). The sign-in uses OAuth 2.0 with PKCE, so no password and no client secret ever pass through the app. Your Google sign-in tokens and email address are stored only in the iPhone’s Keychain, Apple’s encrypted storage for credentials, with the setting “this device only”: they are not synced to iCloud, are not included in backups, and other apps cannot read them.
Keeping and deleting it. The tokens stay on your phone until you turn the weekly email off, which signs you out, deletes them from the Keychain and revokes the app’s access at Google. You can also revoke access at any time at myaccount.google.com/permissions.
Glyph Notes’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4. Permissions the app asks for
- Microphone, to record.
- Calendars, only if you tap “Show my iPhone calendar here”. The app reads the events of the day you are looking at to show them beside your tasks. It does not change them, store them or send them anywhere. Tasks you say with a time are added to a calendar of its own named Glyph Notes, which you can turn off in Settings; that calendar syncs wherever your phone’s calendar account syncs, by iOS, not by the app.
- Reminders, only if you choose to add items from a checklist answer to the Reminders app. The app adds the items you pick. It does not read your existing reminders.
The app also lists your rants in the iPhone’s Spotlight search. That index lives on your phone and is managed by iOS.
5. What we collect
From the app: your email address, only if you turn on the weekly email and leave “News from Glyph Notes” on. It goes to our list at Buttondown. We do not receive your recordings, your words, your tasks, your searches or your questions.
Support email. If you write to us, we keep the conversation so we can help you.
This website. It sets no cookies, loads nothing from third parties and runs no analytics. Our hosting provider keeps ordinary server logs, which include the IP address and pages requested, for security and troubleshooting.
6. What we do not do
- We do not receive your audio or your transcripts.
- We do not sell or share your email address, or anything else, with anyone.
- We do not use your recordings or words to train any model, ours or anyone else’s.
- We do not run advertising, tracking pixels or behavioural trackers, in the app or on this site.
7. Third parties
The complete list of parties involved in running Glyph Notes:
- Apple: the App Store and TestFlight distribute the app, deliver the speech model, and provide the on-device Apple Intelligence features.
- Google: if you turn on the weekly email, the app sends it through Gmail as you, under Google’s privacy policy.
- Buttondown: runs our mailing list and holds the addresses on it, under Buttondown’s privacy policy.
- Hostinger: hosts this website and the support mailbox.
8. Sharing and deleting
A rant leaves your phone only when you share it, using the iPhone share sheet, to whatever app or person you choose. Deleting a rant in the app removes it and takes its words out of search. Its recording file stays on the phone until you delete the app, which removes everything the app holds.
9. Data retention
Your recordings and words are kept in the app for as long as you keep them. Your email address stays on our list until you unsubscribe or ask us to remove it. Support emails are kept as long as they are useful for helping you.
10. Your rights
Wherever you live, including under GDPR and CCPA, you can email support@rantrecorder.com to access, correct or delete the data we hold about you: your address on the list, if you joined it, and any support correspondence.
11. Children
Glyph Notes is not directed at children under 13, and we do not knowingly collect data from anyone under 13. If you believe a child has joined the list or emailed us, contact us and we will delete the address and the correspondence.
12. Changes to this policy
If we change this policy in a material way, we will post the change here at least 14 days before it takes effect. The current version is always at glyphnotes.app/privacy.
13. Contact
Questions, requests or complaints: support@rantrecorder.com.