Privacy policy

Last updated: November 2, 2026 · MySefa is made by ACMINC (Canada). Questions: [email protected].

This policy is available in English and French. For consumers in Quebec, both versions are equally authoritative.

The short version

Your audio and transcripts stay on your devices and in your own private iCloud. MySefa has no accounts, no analytics, no ads and no tracking. Your notes only leave your devices when you choose to send them to an AI or to another app — and this page says exactly what goes where, and who handles it.

What MySefa stores, and where

Recordings, transcripts, speakers, people, topics, to-dos and settings are stored on your device and synced through your private iCloud database — storage that belongs to your Apple ID, which we cannot read. The yearly archive writes plain Markdown and audio files to your iCloud Drive. iCloud is run by Apple under Apple's privacy policy, and Apple may store it outside Canada. We run no server that holds your notes.

You decide how long things are kept: Settings → Privacy & data → Keep audio and Keep transcripts (30 days to Forever; Forever by default).

Voices

To tell speakers apart, MySefa analyses voices on your device. When you name a speaker and turn on Remember this voice, MySefa keeps a small voice profile so it can suggest that name next time — it always asks before applying it. Voice profiles stay on your devices and your private iCloud, are never sent to us or to any AI provider, and are deleted when you forget that voice or delete MySefa's data. If you record other people, please tell them; see the terms.

Transcription and on-device AI

Transcription happens on your device using Apple's speech models. Your device may download a language model from Apple; that is an Apple system service under Apple's privacy policy. Summaries and Ask with Apple Intelligence also run on your device. None of this reaches us.

Speaker models download. The first time MySefa finds speakers, it downloads its speaker-recognition models (a fixed, published version) from Hugging Face (huggingface.co). That download is an ordinary file request: like any web request it reveals your IP address to Hugging Face, but it carries no audio, text or identifier of yours. After that the models run offline.

If you bring your own AI key

When you connect your own OpenRouter, Anthropic or OpenAI key, the text you choose to send (a transcript, a question, the notes an answer needs) goes directly from your device to that provider, under that provider's terms and privacy policy — and, for OpenRouter, to the model provider you pick there. We are not in the middle and never see it. Your key is kept in the Apple Keychain (synced to your Watch through iCloud Keychain), never in our hands and never in MySefa's database.

If you subscribe to MySefa AI

When you ask MySefa AI for a summary or an answer, the text of that request is sent over an encrypted connection to our service and on to the AI model. Before your first request, MySefa asks for your permission and names who processes it.

• Only text you act on is sent. The transcript of the note you summarise, or your question plus the parts of your notes needed to answer it. Your audio and voice profiles never leave your device. Notes you don't ask about are never sent.
• Who processes it. MySefa AI runs on Amazon Bedrock, a service of Amazon Web Services (AWS), using Claude models made by Anthropic. Under AWS's terms for Bedrock, your requests and answers are not stored by Bedrock, not used to train any model, and not shared with Anthropic. AWS acts as our service provider.
• We don't keep your text. Requests are processed and answered, not stored. Our logs hold metadata only — time, endpoint, status, model, token counts, errors and a hashed subscription ID — never the text you send or the answer.
• No account, no name. We never ask for your name, email or phone. Requests are authorised with a pseudonymous identifier: the original transaction ID of your App Store subscription, plus an Apple App Attest key that proves the request comes from a genuine copy of MySefa. Like any internet service, our servers (Amazon CloudFront) see your IP address in order to answer and to stop abuse; we don't store it with your usage.

Where MySefa AI requests are processed

• Our service runs in AWS Canada (Montreal, ca-central-1).
• Summaries and to-dos (Claude Haiku class) are processed in Canada, in AWS data centres in Canada only.
• Ask across your notes (Claude Sonnet class) is processed in the United States: Amazon Bedrock routes each Ask request to an AWS region in the US (for example Virginia, Ohio or Oregon), because that model is not yet offered in Canada. The question and the note text needed to answer it leave Canada for the time it takes to answer; nothing is stored there. While in the United States, it is subject to US law, and US authorities may be able to access it under that law.

If you'd rather nothing leaves Canada, use Apple's on-device AI, or your own key with a provider of your choice, for Ask. We will update this page if processing locations change.

What we keep for MySefa AI, and for how long

The text you send to MySefa AI — transcripts, questions and the answers — is processed to answer you and not stored, by us or by Amazon Bedrock. What we do keep is linked to your subscription, never to a name or email:

• Purchase and transaction IDs. The original transaction ID of your App Store subscription, as Apple reports it to us, with the product, whether it is a real or test (Sandbox) purchase, its status (active, expired, in billing retry, refunded or revoked) and the date it is paid until. That transaction ID is also the pseudonymous user ID every record below is filed under. Kept while you subscribe and for 12 months after the subscription ends, then deleted.
• Device (App Attest) IDs. For each of your devices using MySefa AI (up to 10), its App Attest key ID, public key and a counter that stops replayed requests. Kept 13 months after the device last used MySefa AI, then deleted.
• Monthly usage counts. Per month: tokens used for summaries and for Ask, number of requests, and what they cost us — to apply the fair-use allowance. Kept 13 months, then deleted.
• Service logs. Metadata only: time, endpoint, result status, task, model, token counts, error type and a hashed form of your subscription's transaction ID. Never the text you send or the answer, and never your IP address. Kept 30 days, then deleted.
• Sign-in challenges. A random one-time code your device uses to get a 15-minute access token. Deleted after 5 minutes.

Our database keeps encrypted backups for up to 35 days, so a deleted record can remain in a backup for that long before it is gone too. All of it is stored in AWS Canada (Montreal).

Sending notes to other apps

When you send a note to Claude, ChatGPT, Gemini, Messages, Mail or any other app, or add to-dos to Apple Reminders or Calendar, you hand that text to the app you picked, under its terms. MySefa only prepares the text; it sends nothing itself.

Payments

Subscriptions are bought and billed by Apple. We never see your name or payment details — Apple tells us only that a subscription exists, its status and its transaction ID.

Support emails and crash reports

If you email us, we receive your email address and whatever you include, and use it only to answer you. We keep support emails for up to 2 years, or delete them sooner on request. If you have chosen in your device settings to share analytics with app developers, Apple may share crash reports with us; those come from Apple, contain no notes, and you can turn them off in Settings → Privacy & Security → Analytics & Improvements.

What we never do

No analytics or usage tracking. No advertising and no sale or rental of personal information, ever. No reading of your notes. No third-party SDKs that phone home. No training of AI models on your data.

This website

mysefa.app sets no cookies, runs no analytics and loads nothing from third parties — fonts and images are served from this site. It is hosted on Cloudflare, which processes visitors' IP addresses to deliver the pages and protect against attacks, under Cloudflare's privacy policy.

Your rights and deleting your data

Your notes are yours to take or destroy. The archive keeps plain files you can move anywhere, and Settings → Privacy & data → Delete everything removes MySefa's data from your device and your private iCloud (files you keep in iCloud Drive yourself stay until you delete them). Deleting the app does not remove your iCloud data; use Delete everything first, or iCloud settings on your device.

For MySefa AI records, you can ask us to see, correct or delete what we hold, or withdraw your consent, by writing to [email protected]. Because we hold no name or email, include the order ID from your Apple receipt so we can find the record. We answer within 30 days. Withdrawing consent means MySefa AI can no longer answer for you; the rest of the app keeps working.

Who is responsible

ACMINC, Ontario, Canada, is responsible for personal information handled under this policy. Our person in charge of the protection of personal information is Sola Akinnibosun, founder — reach him at [email protected] with "Privacy" in the subject. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.

Children

MySefa is not directed at children under 13 (under 14 in Quebec), and we do not knowingly collect personal information from them.

Changes

If this policy changes, the new version and its date appear here, and important changes are shown in the app before they apply. We will never weaken the promises above quietly.