LoopNotes AI Privacy Policy
This policy explains what LoopNotes AI handles, where it is processed, why it is used, how long it is kept and the choices available to you. LoopNotes AI is published by Dorji Holdings Ltd, trading as Dorji Labs.
The short version
LoopNotes AI has no app account, no ads, no behavioral analytics and no tracking. Notes are stored on your device and, when enabled, in your private iCloud. Transcription, speaker separation, standard OCR and retrieval run on-device. Cloud AI features send only the content and context needed for the requested feature through our Cloudflare proxy to Anthropic. We do not store note content or AI responses on our servers and do not sell personal data.
Data stored on your device and in iCloud
Notes, transcripts, to-dos, attachments, briefings, people you save in the app, settings and related metadata are stored locally. When iCloud is enabled, this data syncs through your private CloudKit database under your Apple ID. Dorji Labs cannot browse that private database. Apple's iCloud terms and security practices apply.
Meeting and voice-note audio is used temporarily on-device. Voice-note audio is deleted when its transcript is saved. Meeting audio is retained only while on-device speaker separation is attempted and is deleted when that finishes or within 24 hours. Audio is not uploaded to Dorji Labs, Cloudflare or Anthropic.
On-device processing
- Voice and meeting transcription uses Apple's on-device speech frameworks.
- Speaker separation uses temporary mathematical representations within that recording only. LoopNotes AI does not create reusable voiceprints or identify people biometrically across recordings.
- Standard paper-note recognition and eligible Apple Intelligence improvements run on-device.
- Search and retrieval select relevant notes on-device before any cloud AI request is made.
Cloud AI processing
When AI processing is enabled for a note, or when you use Ask, a briefing, a drafted nudge or “Use cloud AI for harder handwriting,” the relevant content is sent over an encrypted connection through our Cloudflare Worker to Anthropic's commercial Claude API. Depending on the feature, this may include note or transcript text, a selected paper-note image, note titles, the name or nickname you entered, calendar event titles, attendee names and relevant excerpts from other notes.
This information is used only to provide the feature you requested or enabled. Dorji Labs does not store the request content or AI response after relaying it. Anthropic states that commercial API data is not used to train its models and may retain API inputs and outputs for up to 30 days for trust, safety and abuse prevention. If you do not want content sent to cloud AI, use the per-note “Just a note — skip AI” option and do not invoke cloud AI actions.
Service, security and subscription data
LoopNotes AI creates a random allowance identifier, stored in Keychain and potentially synchronized by iCloud Keychain, to provide complimentary use and enforce fair-use limits. It does not contain your name, email address or Apple ID. Apple App Attest provides an app-installation security key. Subscribers send an Apple-signed StoreKit transaction so the Worker can verify access; we store only one-way hashes derived from allowance and transaction identifiers, not the raw Apple transaction identifier.
Our application stores limited feature labels (for example, “briefing”), token-cost totals, allowance balances, attestation records and anti-abuse counters. These records are used for app functionality, subscription verification, security, fraud prevention and cost control — never advertising or tracking.
Retention
- One-time App Attest challenges expire after 5 minutes.
- Per-IP challenge counters expire after approximately 25 hours.
- StoreKit verification cache entries expire after 1 hour.
- Monthly usage totals are retained for up to 40 days.
- App Attest key records and hashed lifetime-allowance balances are retained while needed to authenticate the app, prevent repeated free-allowance claims and operate the service.
- Anthropic may retain commercial API inputs and outputs for up to 30 days under its commercial terms.
- Cloudflare processes network information such as IP address, request time and routing metadata as our infrastructure provider under its applicable terms and security controls.
Permissions and Apple data sources
- Microphone and Speech Recognition — record and transcribe voice notes and meetings on-device.
- Camera and Photos — scan or select paper notes. A photo leaves the device only when you explicitly choose the cloud handwriting option.
- Calendar — read upcoming events and attendee names for meeting matching and briefings, and add events you approve. Relevant event context may be included in a cloud AI request.
- Reminders — create or update reminders you approve, including items covered by an automatic-approval preference you choose.
- Contacts — LoopNotes AI does not read your existing contacts. It requests permission only when you choose to copy a person from a scanned business card into Apple Contacts.
- Notifications — deliver local reminders and meeting prompts on your device.
Permissions are requested when needed and can be changed in iOS Settings. Features that depend on a denied permission will be unavailable, but the rest of the app continues to work.
Third-party processors
We share data only with providers needed to deliver the service: Apple for iCloud, StoreKit and App Attest; Cloudflare for secure proxy infrastructure; and Anthropic for cloud AI. We require these providers to handle data under protections consistent with this policy and applicable law. We do not use advertising networks, third-party analytics SDKs or tracking pixels.
Recording other people
You are responsible for complying with local law and workplace rules when recording. Some places require every participant to consent. LoopNotes AI asks you to acknowledge this responsibility before your first meeting recording. On-device processing does not remove your obligation to obtain consent.
Your choices, deletion and rights
You can edit or delete content in the app. Deleted notes remain in Recently Deleted for 30 days unless you empty it sooner, then are permanently removed from your device and private iCloud. Deleting the app removes local copies; iCloud copies can be removed through Settings → Apple ID → iCloud → Manage Storage. There is no LoopNotes AI account to close.
You can stop future cloud AI processing by using “Just a note — skip AI” and not invoking Ask, briefing, nudge or cloud handwriting actions. You can revoke system permissions in iOS Settings. To ask about access, correction or deletion of limited service-security records, or to exercise data-protection rights, email loopnote@dorjilabs.com. Because our identifiers are deliberately pseudonymous and there is no account, we may need information from the app to locate a record and may be unable to associate a record with you.
UK data-protection law may give you rights to access, correct, delete, restrict or object to processing, portability and withdrawal of consent. Our lawful bases are performance of the service you request, your consent where required, and legitimate interests in securing the service and preventing abuse. You may complain to the UK Information Commissioner's Office at ico.org.uk.
International transfers
Providers may process data outside the UK or EEA. Where required, transfers rely on safeguards such as an adequacy decision or standard contractual clauses.
Children
LoopNotes AI is not specifically directed to children under 13. We do not knowingly use the app to collect personal data from children for advertising or tracking.
Security
We use encryption in transit, Apple App Attest, signed StoreKit verification, access controls and data minimisation. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Changes
If this policy changes, the updated version and effective date will be posted here. Material changes will also be described in app release notes or otherwise communicated where required.
Contact
Dorji Holdings Ltd, trading as Dorji Labs
71–75 Shelton Street, Covent Garden, London, WC2H 9JQ
loopnote@dorjilabs.com