Yours. Provably.
Local-first and end-to-end encrypted — private voice notes and meetings that never train AI.
Vozzle is local-first: your notes, tasks, and meetings live on your device and sync encrypted. AI runs only when you ask, the audio buffer never reaches our servers, and your content never trains anyone's models.
Your data.
Your phone.
Your keys.
Vozzle is built local-first. The phone is the source of truth — with encryption on by default, sync is encrypted before it leaves the device, and the key never leaves your iPhone's Keychain.
We can’t read your transcripts — that’s structural, not a policy. Recovery is narrower than people expect, but it isn’t nothing: your device key travels with your Apple ID through iCloud Keychain, so a new iPhone you sign into normally picks your data back up, and you can set a recovery passphrase as a second route. Turn iCloud Keychain off and skip the passphrase, though, and nobody — us included — can bring it back.
Local-first by design
Your notes, tasks, meetings, and calendar all live on your phone first — in the iOS data store. Sync exists so your devices stay in step — and everything it carries is encrypted first.
The phone is the source of truth; our servers only hold encrypted copies for sync.
End-to-end encrypted
With encryption on — the default — sync uses AES-256-GCM, and the key lives in your iPhone's Keychain. The data is encrypted before it leaves your device, the key never leaves it, and connections to Vozzle's own servers are certificate-pinned, so the app only ever talks to Vozzle. You can turn encryption off if you'd rather.
Industry-standard primitives. No proprietary cryptography.
We can't read it
Zero-knowledge sync, on by default: with encryption on, the blobs that hit our servers are opaque to us — and to everyone else. Without your device's key, the ciphertext is just noise. (Turn encryption off and sync is readable by us, like any normal cloud app.)
With encryption on, a subpoena for your data gets us ciphertext.
No playback. No archive.
Meeting audio sits in a protected buffer with no playback UI and no archive. It stays on your device and is never uploaded in the background. It’s kept for up to 30 days, so a crash or dropped call can’t lose your meeting and you can re-run speaker detection, then it auto-deletes. The one time it leaves the device is when you ask for it to: re-transcribing or refining speakers uploads that recording to private storage only your account can reach, runs the job, and deletes it when the job finishes. Syncing that buffer to your own iCloud Drive is off by default.
The buffer stays on your devices unless you ask us to re-process it.
What we're honest about
Live transcription & AI features need network
During a live meeting, audio passes through a transcription service and comes back as text. AI summaries and re-analysis requests go to a cloud model. We don't store either side; once it's text, the audio is gone.
The fine print, in plain English.
Data categories, retention windows, sub-processor categories, and your rights — all in the policy.
Questions about privacy
Where is my Vozzle data stored?
On your device first. Sync runs through Vozzle's encrypted sync service — and with end-to-end encryption on, only your devices hold the keys.
Is my content used to train AI models?
No. Our terms rule it out, and AI requests are routed with no-training enforced at the provider level. Two things run in the background rather than on request: auto-tagging classifies each note and task as you save it, and opening Chat sends a list of your recent items so the assistant knows what you have. Everything else goes only when you ask for it.
What happens to the audio after a meeting?
The protected buffer exists so a crash or dropped call can't lose your meeting — and so you can re-run speaker detection afterward. It stays on your device, never on our servers, has no playback UI, and auto-deletes after up to 30 days. You can optionally switch on iCloud sync for it in Settings; it's off by default, and those copies sit in your own iCloud Drive under Apple's keys, outside Vozzle's end-to-end encryption.
Which third parties see my data, and when?
Only what a feature needs: live transcription streams audio to our speech provider, and AI features send the text you select to our AI providers — under no-training terms. The full list of sub-processor categories is in the privacy policy.
Start with the first word.
Free forever. Ten AI trials on us. No card needed, no commitment. Upgrade only when the AI feels essential.
