Security & data protection

How your data is protected

VoiceBrain follows a simple principle: the safest data is the data we do not keep. The app captures a short voice recording, turns it into a text entry, and then only needs the text to work. Because of that, the audio does not have to live on our servers for long, and we delete it automatically.

Everything you send to and from the app travels over an encrypted HTTPS/TLS connection, your entries are stored on servers located in the European Union, and access to your data is tied to your own account. There are no advertising networks and no third-party tracking SDKs sitting in the middle collecting information about you.

This page describes how the product works in plain terms. The Privacy Policy is the full, binding legal document — if you need the exact wording on data processing, retention, and your rights, read it there.

Where your data lives

VoiceBrain's servers are hosted in the European Union, and both your text entries and your voice recordings are stored in the EU. Keeping storage in the EU is a deliberate choice: it means your data sits under European data-protection rules rather than being scattered across regions.

The design is aligned with the ideas behind the GDPR — data minimisation, short retention, hosting in the EU, and a straightforward way to delete everything. We do not claim any specific external certification; we describe what the system actually does and let the Privacy Policy carry the legal detail.

Audio is deleted after 7 days

When you speak into VoiceBrain, the recording is transcribed into a text entry. That text is what powers your tasks, notes, reminders, and events — the original audio is only needed briefly, for example so you can re-check what was heard.

For that reason, voice recordings are automatically deleted after 7 days. You do not have to remember to clear anything: the audio ages out on its own, while your text entry stays until you decide to remove it. Short audio retention is one of the most effective ways to reduce how much sensitive data exists in the first place.

No tracking, no ads, no selling your data

VoiceBrain does not embed third-party tracking SDKs, does not run advertising networks, and does not sell your data. There is no behavioural ad profile being built from what you capture.

Because the business is not built on advertising, there is no incentive to hoard your entries or watch how you use the app for resale. The product exists to capture your thoughts quickly and keep them private.

You own your data — and can delete it

Your entries are yours. From inside the app you can delete your account together with all of the data associated with it. This is a full account deletion, not a hidden deactivation: it is the mechanism for removing your information when you are done.

Combined with the automatic 7-day deletion of audio, this gives you two layers of control — recordings expire on their own, and you can wipe the rest whenever you choose.

Sign in with Apple

VoiceBrain supports Sign in with Apple, so you can create and access your account using Apple's authentication instead of handing over extra personal details. It is a fast, privacy-respecting way to sign in that keeps your credentials with Apple.

API keys are scoped to your account

VoiceBrain has an open API so you can read your entries from scripts, Shortcuts, or your own AI agents; writing entries via the API is coming. Access uses a private API key that is scoped to your own account — it reaches your data and nobody else's.

Treat an API key like a password: keep it secret, and only put it into tools you trust. Because the key is scoped to your account, you stay in control of what it can touch.

Transport security

All traffic between the app and our servers is served over HTTPS/TLS. That means the connection is encrypted in transit, protecting your entries from being read or tampered with as they travel across the network — including on shared or public Wi-Fi.