Privacy Policy ยท Terms of Use
Effective date: September 11, 2026
Luna Scribe is operated by Casey Floyd. This Policy explains how the Luna Scribe iOS app and cloud service handle personal information.
We process audio you record or import; transcripts; speaker labels within a recording; notes, chat, titles, questions, highlights, vocabulary, course/work context, and recording metadata. Your saved original remains on this device, and playback uses that local file. Private iCloud sync and sharing are separate choices.
Accepting the Terms authorizes secure cloud processing for transcription and notes. In signed-in recording and import flows, completed audio is sent to xAI Grok Speech-to-Text for transcription. Transcript text and optional profile, vocabulary, and course/work context are sent to the selected notes model for notes, chat, refinement, or title suggestions. Audio is not sent for those notes features. Cloud job audio, transcript, notes, and job metadata are retained for no longer than 24 hours and deleted within 24 hours; provider processing is subject to each provider's terms and privacy notice.
If you explicitly enable Remember participants, we retain only encrypted, account-scoped mathematical voice representations and encrypted participant metadata in order to offer review suggestions across recordings. We do not retain raw enrollment audio, transcript text, or plaintext voice vectors for this feature. You are responsible for obtaining any participant consent required to create or improve a remembered participant. You may delete an individual participant or turn the feature off to forget all at any time; remembered data remains only until one of those actions or account deletion.
We process authentication credentials and an opaque account ID to secure accounts and enforce limits. The service account database stores an opaque account key and HMAC-protected provider subject, not raw provider subjects, email, or names. We also retain pseudonymous operational records (provider, operation, model, result, coarse latency/duration, token, quota, and cost fields) for up to 90 days.
Required service telemetry contains only bounded feature events, app/build version, and coarse categories. It is necessary to operate, secure, measure reliability, and improve the service. It never contains audio, transcripts, notes, titles, prompts, speaker names, voice vectors, filenames, marker text, vocabulary, clipboard contents, contacts, precise location, raw IP/device identifiers, or provider response bodies. It is retained up to 90 days.
We use data to provide, secure, troubleshoot, and operate the service; honor your settings; enforce limits; and improve reliability and usability. We disclose data only as needed to Apple/CloudKit, Apple/Google/Firebase authentication, Cloudflare, xAI transcription, and a selected OpenAI, xAI, Google, or Anthropic AI provider. Their terms and privacy notices apply. We may disclose data when required by law or to protect rights, safety, or security. We do not sell personal information, share it for cross-context behavioral advertising, or use recordings or AI inputs to train our own models.
You can choose device-only storage, turn off private iCloud sync, and select whether original audio syncs to iCloud. If you do not want cloud processing, do not start or import a scribe for processing; your saved original remains on this device, and playback uses that local file. You can delete local data and iCloud copies in the app. Account deletion removes service-held account data, including remembered-participant rows, but does not automatically delete local, private-iCloud, exported/shared, or third-party copies; delete those separately. The service cannot recall content already sent for processing. Cloud job audio, transcript, notes, and job metadata are retained for no longer than 24 hours and deleted within 24 hours; provider processing is subject to each provider's terms and privacy notice. Library content remains until deleted; account deletion uses a 24-hour HMAC-protected tombstone to prevent immediate re-provisioning.
We use reasonable safeguards but no system is fully secure. Luna Scribe is not directed to children under 13. Do not use it for protected health information, highly sensitive financial information, or regulated data unless you have independently confirmed suitability and have all needed permissions. Depending on location, you may have privacy rights including access, correction, deletion, or restriction. California residents may exercise applicable CCPA rights; we do not sell or share personal information as defined by the CCPA. Contact [email protected]; we may verify requests.
We may update this Policy; material changes will have a new effective date and, where appropriate, require renewed in-app acceptance.