Your data
What is collected
| Data | Where | Why | Kept until |
|---|---|---|---|
| Name, email, account id | Firebase Auth | Sign in, ownership of notes | You delete your account |
| Note text, summaries, lines, tags, times, author name | Firestore, Sydney | The kitchen's record | Deleted by a member, or the kitchen is deleted |
| Notebooks, summaries, home layout, theme, experience spec | Firestore, Sydney | How your Marcus looks and works | You delete your account |
| Audio | Nowhere | Speech becomes text on the phone | Never stored |
| Note text sent for sorting, summaries and answers | OpenAI API | Titling, sorting, summarising, answering | Not retained for training; OpenAI abuse-monitoring window up to 30 days |
| Anonymous usage events | analytics.takr.io | Counting what gets used | Aggregated; no account link |
| Feedback text, email, screen | Firestore, Sydney | Replying to you | 12 months |
| Beta sign-up email and venue | Firestore, Sydney | Sending the TestFlight link | Public launch, or on request |
What is not collected
- No audio, ever.
- No location, contacts, photos or calendar.
- No advertising identifier, no cross-app tracking, no third-party analytics SDK.
- No note text in analytics.
Export
In the app: Settings, Your data, Export every note. You get a JSON file with every note in your kitchen, including transcripts with timestamps, summaries, sorted lines, tags, authors and times. Share it anywhere from the iOS share sheet.
Delete
- A note: open it, tap Delete. Gone for the whole kitchen.
- Your account: Settings, Delete my account. Your sign-in, your personal settings, your theme and your experience spec are removed immediately. You may be asked to sign in again first; that is Apple's and Google's rule for destructive actions.
- Your notes after you leave: they stay with the kitchen under the name you used, because the kitchen's record is the point of the product. If you and the kitchen owner both want them gone, email us and we remove them within 30 days.
- A whole kitchen: the owner emails us from the account address and we remove the workspace, its notes and notebooks within 30 days.
Access and correction
Everything we hold about you is visible in the app and in the export. If something is wrong, edit it in the app or write to us. Requests under the Australian Privacy Act or the GDPR: [email protected], answered within 30 days. Where the GDPR applies, Redchair AI is the controller and the lawful basis is performance of the contract with you; for analytics it is legitimate interest in knowing what gets used, with no identifier tied to you.
Security
Everything travels over TLS. Firestore security rules check kitchen membership on every read and write. Model calls carry note text only; never your email, name or account id. Keys never ship in the app's source repository.