Privacy Policy

Effective 11 September 2026.

Hotline collects no data. There is nothing to log into, and there are no servers of ours for anything to be sent to. This page says exactly where your recordings and transcripts can go.

No accounts, no servers, no tracking

There is no sign-up, no login and no account. We run no backend for this app. There is no analytics SDK, no crash reporter, no advertising identifier and no tracking of any kind. Nothing you record reaches the developer.

Your recordings

Audio and transcripts are stored in the app’s own container on your device. They stay there until you delete them.

Where audio can go

With the default model, transcription runs on your iPhone with Apple’s on-device speech model. The audio never leaves the device and no network request is made.

If you choose a cloud model and paste your own provider API key, the audio is uploaded from your device straight to that provider, under your own account with them, and their terms govern it. That happens only for the model you selected, and only after you configured it. There is no proxy and no middleman of ours.

Where transcripts can go

If you configure a webhook, each finished transcript is POSTed to the URL you typed, and nowhere else. If you do not configure one, transcripts stay on the device.

Keys and the signing secret

Provider API keys are stored in the device keychain. The webhook signing secret is stored in the iCloud Keychain, so a reinstall or a new phone keeps signing with the same secret and your receiver keeps trusting it. iCloud Keychain is end to end encrypted by Apple and is not visible to us. Only “Regenerate Secret” in Settings changes it.

Permissions

The microphone is the only permission the app asks for, and it is used for recording.

Children

Hotline is not directed at children and collects no data from anyone.

Deleting everything

Delete a recording in the app to remove that recording and its audio. Delete the app to remove all of it, including your keys and the stored settings. Nothing of yours is left anywhere else, because nothing was sent anywhere else. Transcripts already delivered to your own webhook are yours to delete at that destination.

Changes

If this policy changes, the effective date above changes with it.

Contact

Questions about privacy: support@donado.co.