Privacy Policy
gitnotes is built so your voice notes stay yours. The short version: we do not run a server, do not host an account system, and do not collect analytics. Everything lives on your device or inside the GitHub repository you connect.
What gitnotes stores on your device
- Audio recordings — captured while you record. By default they are discarded after transcription. You can opt to keep them; they never leave your device through gitnotes.
- Transcripts and drafts — kept locally until you commit or discard the note.
- Your GitHub access token — stored in the iOS Keychain via
expo-secure-store. Signing out deletes it. - Your preferences — repository slug, branch, folder, filename pattern, transcription provider, language. All local.
- Optional provider API keys — if you choose a cloud transcription provider (OpenAI, Mistral), the key you supply is stored in the Keychain the same way as your GitHub token.
Transcription
By default, transcription runs on device using Apple's Speech framework through @react-native-ai/apple. Audio does not leave your phone in this mode.
If you explicitly select a cloud transcription provider (currently OpenAI or Mistral AI) and supply your own API key, that note is sent directly from your device to the provider's transcription endpoint under your own API account. gitnotes does not operate a backend — there is no gitnotes server in between that proxies, logs, or retains the request.
Exactly what is sent to the provider
When you use a cloud transcription provider, the request contains only:
- The audio file of the note you just recorded.
- The resulting transcript returned by the provider (this is the provider's response, which naturally traverses the same connection).
- The IP address that your device uses to reach the provider's endpoint — this is visible to the provider as a normal property of any HTTPS request and is not something gitnotes can hide.
That is the complete list. gitnotes does not attach your name, email, GitHub username, GitHub token, repository slug, device identifier, location, other notes, or any telemetry to the request. The provider receives the audio, returns a transcript, and has no knowledge of who you are beyond the API key you authenticated with and the IP you connected from.
What the provider may do with that data
Once audio and transcript reach the provider, their own terms and privacy policy govern retention, training use, and deletion — not this policy. Please read them before enabling a cloud provider:
- OpenAI Privacy Policy and API data usage terms — OpenAI states that API inputs and outputs are not used to train their models by default.
- Mistral AI Privacy Policy and Terms of Service — Mistral describes how audio/text submitted to their API is handled and retained.
Switching back to on-device transcription at any time stops all communication with these providers.
GitHub
gitnotes talks to the GitHub REST Contents API using the token you provide when you connect your account. It uses that token to read, write, and delete files in the repository you choose. No other GitHub data is read or stored. You can revoke the token at any time from your GitHub settings; doing so immediately stops gitnotes from reaching the repository.
Microphone access
gitnotes requests microphone permission only to capture the note you are recording. Recording starts when you tap the record control and stops when you tap stop or cancel. The app does not run the microphone in the background for any purpose other than continuing an in-progress recording.
What gitnotes does not do
- No account system, no sign-up, no server we operate.
- No analytics SDKs, no crash-reporting SDKs, no advertising SDKs.
- No tracking across apps or websites.
- No selling, renting, or sharing of data — there is no data leaving your device through gitnotes itself.
Children
gitnotes is not directed at children under 13 and is not intended for use by them.
Changes to this policy
If the app changes in ways that affect privacy — for example, adding a new optional cloud provider — this page will be updated, and the "Last updated" date at the top will change.
Contact
Questions or concerns? Email murru7@gmail.com.