Privacy Policy
Your privacy is fundamental to everything we do at Jotley.
Last Updated: February 17, 2026
At Protomota, LLC, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Jotley application and related services. By using our Services, you acknowledge that you accept the practices and policies outlined below.
1. Information We Collect
Account and Profile Information
- Email address and authentication credentials
- Account preferences and settings
- Subscription and billing information
- Support communications and feedback
Device and Usage Information
- Device identifiers and operating system information
- IP address and general location data
- App usage patterns and feature interactions
- Performance data and error logs
- Browser type and version when using our website
Content and Audio Data
Privacy First Approach:
- Audio is temporarily sent to our secure transcription services for processing only
- No audio files or transcriptions are stored on Jotley servers - they are immediately deleted after processing
- Your notes and transcriptions remain exclusively on your device
- Content syncs only to your personal iCloud account when you enable this feature
- Data backup is handled optionally through iCloud and/or Time Machine on your device
- We do not retain, access, or store your transcribed content or audio files
2. How We Use Your Information
We use the information we collect for the following purposes:
- Service Provision: To provide, maintain, and improve the Jotley application
- Account Management: To create and manage your account, process payments, and provide customer support
- Communication: To send you service-related notifications, updates, and respond to your inquiries
- Analytics: To understand how our app is used and identify areas for improvement
- Security: To detect, prevent, and address technical issues and unauthorized access
- Legal Compliance: To comply with applicable laws, regulations, and legal processes
3. Third-Party Services We Use
To provide our transcription and summarization features, we use the following third-party services. We do not store your audio recordings or transcription content on our servers — data is processed in real-time and only billing metadata (e.g., transcription minutes used, summary requests made) is retained.
Deepgram (Speech-to-Text Transcription)
Audio from your recordings is streamed to Deepgram's servers for real-time transcription. Deepgram processes the audio and returns the transcribed text. Deepgram does not retain your audio data after processing is complete.
OpenAI (AI Summarization)
When you request a summary, your transcription text is sent to OpenAI's API (GPT models) to generate summaries, key points, and action items. OpenAI does not use API data for training per their data usage policy for API customers.
OpenAI Privacy Policy · OpenAI Terms of Use · API Data Usage Policy
Supabase (Authentication & User Data)
We use Supabase for user authentication (Google Sign-In, Apple Sign-In) and to store account information such as your email, subscription status, and usage metrics. Your notes and recordings are NOT stored in Supabase — they remain on your device and iCloud.
Stripe (Payment Processing)
Subscription payments are processed securely through Stripe. We do not store your credit card details — Stripe handles all payment information directly.
Apple iCloud (Optional Sync)
If you enable iCloud sync, your notes and recordings are stored in your personal iCloud account using Apple's CloudKit. This data is encrypted and controlled by Apple's privacy policies — we cannot access your iCloud data.
4. What We Store vs. What We Don't
✓ What We DO Store (Billing Metadata Only)
- • Your account email and authentication provider (Google/Apple)
- • Subscription tier and billing status
- • Usage metrics: transcription minutes used, summary requests made
- • Timestamps of when features were used (for billing periods)
✗ What We DO NOT Store
- • Audio recordings (never stored on our servers)
- • Transcription text content (processed in real-time, not retained)
- • Summary content (generated and returned, not stored)
- • Your notes (stored only on your device and your iCloud)
5. Information Sharing and Disclosure
We do not sell, rent, or trade your personal information. Beyond the third-party services listed above, we may share your information only in the following limited circumstances:
Service Providers
We work with the trusted third-party service providers listed in Section 3 above. These providers are contractually obligated to protect your information and may only use it to provide services to us.
Legal Requirements
We may disclose your information if required by law, regulation, or legal process, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the same privacy protections.
6. Data Security and Retention
We implement industry-standard security measures to protect your information, including encryption, secure servers, and regular security assessments. However, no method of transmission over the internet is 100% secure.
Retention Periods
- Account information: Retained while your account is active and for a reasonable period thereafter
- Usage data: Retained for up to 2 years for analytics and improvement purposes
- Payment information: Retained as required for tax and accounting purposes
- Support communications: Retained for 3 years to maintain service quality
7. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request information about what personal data we have about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information
- Portability: Request a copy of your data in a structured, machine-readable format
- Restriction: Request that we limit how we use your information
- Objection: Object to our processing of your information for certain purposes
- Withdraw Consent: Withdraw consent for data processing where consent is the legal basis
To exercise these rights, please contact us at privacy@jotley.ai. We will respond to your request within 30 days.
8. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience, analyze usage patterns, and maintain security. Types of cookies we use include:
- Essential Cookies: Required for basic app functionality and security
- Preference Cookies: Remember your settings and preferences
- Analytics Cookies: Help us understand how you use our service
- Performance Cookies: Monitor app performance and identify issues
You can control cookies through your browser settings, though disabling certain cookies may limit app functionality.
9. International Data Transfers
Our services are primarily hosted in the United States. If you are located outside the US, your information may be transferred to, stored, and processed in the US or other countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses where required.
10. Children's Privacy
Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn that we have collected information from a child under 16, we will delete that information promptly. If you believe a child under 16 has provided us with personal information, please contact us at privacy@jotley.ai.
11. State-Specific Privacy Rights
California Residents
Under the California Consumer Privacy Act (CCPA), California residents have additional rights including the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal information. We do not sell personal information.
European Union, United Kingdom, and Swiss Residents
Under the General Data Protection Regulation (GDPR), you have enhanced rights regarding your personal data. These include all the rights listed in Section 5 above, plus the right to lodge a complaint with your local data protection authority.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting a notice on our website, sending an email notification, or through the app. Your continued use of our services after such changes indicates your acceptance of the updated policy.
Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: privacy@jotley.ai
Company: Protomota, LLC
General Support: support@jotley.ai
This Privacy Policy is effective as of February 17, 2026 and governs your use of the Jotley application and related services provided by Protomota, LLC.