Privacy Policy

This policy explains what personal data Squidbrain ("we", "us") collects, why, and your rights over it.

In short: your audio is private. We never listen to it, analyse it, sell it, or use it to train anything. It passes through our servers only to reach your own devices, and is automatically and permanently deleted from our servers within 30 days.

1. What we collect

• Account details — the email address and basic profile from your chosen sign-in (email, Google, or Apple). If you use Apple's "Hide My Email", we only ever see the relay address.
• Audio you create — the recordings and audio files you upload, together with related metadata (filename, duration, size, a content checksum, timestamps, edit history linking edits to their original, and a compact waveform image used to browse your library). The waveform is a small visual summary, not your audio. When you use the Mac recorder, Squidbrain records only after you press record. We do not upload your screen, collect URLs, collect browsing history, or build lists of apps, pages, or files you use.
• Device & pairing data — device labels and pairing records used to connect your phone, desktop app, and the web editor to your account.
• Operational logs — limited technical records needed to run and secure the service.
• Usage analytics — how you interact with the app (events such as signing in, capturing, and delivering audio), used to understand and improve the product. Processed in the EU via PostHog.

2. How we use it

To provide the core service (moving your audio between your devices and into your Squidbrain folder), to keep the service secure, and to respond to support requests. Your audio is used for one thing only: delivering it to your own devices. We do not sell it, share it, listen to it, analyse it, or use it to train models, and we do not use it for any other purpose.

3. Legal basis (UK GDPR)

Performance of our contract with you (providing the service you sign up for); our legitimate interests in keeping the service secure and reliable; and your consent where it applies.

4. Where your data is stored

Audio files are stored in Cloudflare R2 and metadata in Cloudflare D1, hosted in the European Union. Authentication is handled by Google Firebase. Sign in with Apple is provided by Apple.

5. How long we keep it

We do not permanently store your recorded audio. Cloud copies are temporary and exist only to move a file to your devices. Once a capture is delivered it is cleared within 7 days, and any capture that is never delivered is cleared after 30 days at the latest. At that point the audio bytes are permanently and irreversibly deleted from our servers. The copies on your own devices are unaffected: your audio lives on your own machines, not ours. Account details and metadata are kept until you delete your account, which you can do at any time.

6. Processors we rely on

• Cloudflare — storage and compute.
• Google Firebase — authentication.
• Apple — Sign in with Apple.
• PostHog (EU region) — product analytics, to understand how the service is used and improve it.

7. Your rights

You can access, correct, export, or delete your data, and object to or restrict certain processing. You can permanently delete your account and all of your audio at any time using "Delete account" in the app, or by emailing us. You may also complain to the UK Information Commissioner's Office (ICO).

8. Security

Data is encrypted in transit and at rest, access is scoped to your account, and downloads use short-lived signed URLs tied to your authenticated session. Our servers route your audio as opaque files to move it between your devices; we do not listen to, analyse, or otherwise inspect the content of your recordings.

9. Children

Squidbrain is not directed at children under 16 and we do not knowingly collect their data.

10. Changes

We may update this policy; material changes will be reflected by the date above.

Monosonic · Support