Privacy Policy

Effective date: November 10, 2026 · What changed

This policy explains what Requaint™, the iPhone app, and its server do with your information. It covers the app sold on the US App Store and the website requaint.app.

Who we are

Requaint is made and sold by Constantin Scholl, an individual in the United States ("we", "us").

Email: support@requaint.app

The short version

Your notes are stored on your iPhone, not on our servers. That includes your notes, the people in them and your recordings. A note you record on your Apple Watch goes to your iPhone first and is then handled like any other (Notes from your Apple Watch).
To turn what you say into a person card and suggest what to bring up next time, your words leave the phone. Your recording goes to ElevenLabs (speech to text). The text and some context go to Anthropic (Claude, the AI that drafts the card); what you noted about a person also goes to Anthropic to suggest what to bring up next time. While you record, the audio streams straight from your iPhone to ElevenLabs, so ElevenLabs sees your iPhone's IP address; a second, more careful pass of the recording and everything sent to Anthropic go through our relay on Cloudflare.
How long the AI vendors keep it: we ask ElevenLabs to delete each second-pass transcript once the app has it (if the upload is interrupted before ElevenLabs answers, it can stay, and we may not be able to delete it; deleted items stay up to 30 days in their backups, and their debugging and moderation logs may keep related data for an unstated period); live transcripts stay in our ElevenLabs history, and we cannot delete them yet; Anthropic deletes what it receives within 30 days (longer only if its safety systems flag a request). Details below.
Our relay passes on what goes through it and stores none of it. No recordings, no transcripts, no notes, no names.
No account. The app never asks for your name, email or phone number (if you write to support, we see the email address you write from: Emails to support). There are no ads and no tracking, and the app contains no third-party analytics, advertising or attribution code. To see how Requaint is used, our own server keeps a few counts (see What our server keeps) and nothing else. We do not sell or share your information for advertising.
Our server keeps what billing needs, and a few counts: a record for your iPhone, your purchase records from Apple, counts of how many notes you used, and the days you opened the app, which setup screen you reached, whether you saved a first note, and the day you first saved one started from the "Start a note" control or shortcut (Siri, Spotlight or the Shortcuts app). You can delete that record in the app at any time.

What stays on your iPhone

These live in the app's storage on your iPhone. We cannot open, change, restore or delete them:

your notes, the people in them, their facts and relationships;
your recordings (audio files) and transcripts;
person photos you add;
contacts and calendar events the app reads from your iPhone (Apple Contacts and Apple Calendar, only if you allow them);
your location, when you allow it, and your home, if you set one. The app suggests a home only from where you took your own notes and works this out on your iPhone. It never sends your home to us or to any service; like the rest of the app's data, it is in your own iCloud Backup and export (below). Near your home, the app looks up no places by itself; a place you search for there is searched without your location.

Two copies can leave your iPhone, and both stay under your Apple Account:

iCloud Backup. If iCloud Backup is on, Apple keeps a backup of the app's data, including what you said about other people, on Apple's servers. It is end-to-end encrypted only if you have turned on Advanced Data Protection. Apple keeps existing backups for 180 days after you turn Backup off.
Export to iCloud Drive. The app writes an export of your notebook to its folder in your own iCloud Drive: a copy of the app's data, written a few minutes after you change something, when you leave the app and each night, with a list of your people and a page per person. It never goes to us. You can stop it by turning off iCloud Drive for Requaint in your iPhone's iCloud settings.

Notes from your Apple Watch

If you use the Requaint app on your Apple Watch, a note you record there travels to your iPhone over Apple's encrypted connection between your watch and your iPhone, with when you recorded it, how long it is and, if you allow Location on the watch, where you were. Nothing goes from the watch to us or to any service. The watch keeps the recording only until your iPhone has it, then deletes it; it holds no notes, people or keys. On your iPhone the note is then handled like a note recorded on the iPhone: it stays there, and it is sent as described below only after you agreed on the "Where your notes go" screen. One difference: it is not streamed live to ElevenLabs; the recording is uploaded only through our server.

What leaves your iPhone, to whom and why

When you record or type a note, the app sends it out to make the card you review. It does this only after you agree on the "Where your notes go" screen. If you choose "Not now", none of your notes, recordings or people are sent; you can still browse, search and edit. (The app still registers your iPhone with our server and tells it which setup screen you reached; neither sends anything from your notes. See What our server keeps.)

ElevenLabs, Inc. (speech to text)

What: your recording, including anyone else who speaks in it. With it go "name hints", so names are spelled right: names of people you already saved and, if you allow Location, names of places near you. If you typed something before you started recording, its last few words (at most 50 characters) go with the live audio, so the transcript follows on from them.
Why: to turn speech into text.
How: while you record, the app streams the audio straight to ElevenLabs, using a one-time pass our server issues for each connection. A second, more careful pass and any retry upload the recording through our server. Because the live audio comes straight from your iPhone, ElevenLabs sees your iPhone's IP address. A note recorded on your Apple Watch, or while your iPhone has no connection, is not streamed: it is uploaded only through our server.
How long: ElevenLabs keeps recordings and transcripts in our account's history until we delete them.
- Second pass and retries (uploaded through our server): we ask ElevenLabs to delete the transcript once the app has it. If that fails, our server tries again after a few minutes, after an hour, then daily, for about a week. If the upload is interrupted before ElevenLabs answers (for example the app is closed or the network drops during a long recording), our server never learns which transcript it was. ElevenLabs offers no documented way for us to find such a transcript, so it can stay in our ElevenLabs history and we may not be able to delete it; we have asked ElevenLabs for a way and will update this policy if they provide one.
- The recording itself: ElevenLabs keeps uploaded audio until it is deleted. ElevenLabs has not yet confirmed to us that deleting a transcript also deletes its audio; we will update this policy when it does.
- Live transcription while you record (streamed straight to ElevenLabs): the transcript stays in our ElevenLabs history. We cannot delete these yet, and will update this policy when ElevenLabs confirms how. ElevenLabs' backups and logs (below) apply to these as well.
- After deletion, ElevenLabs keeps deleted items in its backups for up to 30 days, and its debugging and moderation logs may keep related data for a period ElevenLabs does not state.
Training: we have turned off ElevenLabs' setting that allows our data to be used to improve their models (from 7 November 2026).
Where: ElevenLabs stores data in the United States.
We do not use ElevenLabs' speaker identification.
ElevenLabs' privacy policy: https://elevenlabs.io/privacy-policy

Anthropic, PBC (Claude)

What: the text of your note; any words the speech to text was unsure of; a web link you share into Requaint (for example the address of someone's profile page); the names, other names, short notes, relationships and the day you last saw them of people you already saved who might be the person you mean, and when two or more of them share a first name or a short form of it (like Mike and Michael), also where each works, their job title, the city they live in, how you'd recognize them, where you first met and up to two more of your short notes on them; if you saved another note a few minutes before, who was in it (met, with them, or mentioned); the calendar event you are in (title, time, place, and the attendees' names and email addresses), if you allow Calendar; up to eight nearby place names, with their kind and distance, if you allow Location; and the time.
Also: what you noted about a person, to suggest what to bring up next time: their first name, up to twelve things you noted about them (open follow-ups, short notes, facts such as a move or a birthday, topics, their children's first names and ages, and the first names of people you both know), the day you noted each and where (the calendar event's title or the place's name), a new LinkedIn role if you connected LinkedIn, and today's date. What you noted can name other people, and a calendar event's title can too.
Why: to draft the person card you review before saving, and to suggest what to bring up next time you talk to someone.
How: through our server, which stores none of it.
Which models: Claude Opus 5.5 and Claude Haiku 5.5. If Opus 5.5 declines a request, Anthropic may run that request again on Claude Opus 5 or Claude Opus 4.8.
How long: Anthropic deletes it within 30 days, or keeps it for up to 2 years if its safety systems flag a request, or longer if the law requires.
Training: Anthropic's commercial terms do not allow it to train its models on this content.
Where: Anthropic may process it outside the United States.
AI drafts can be wrong. You review every card before it is saved.
Anthropic's terms: https://www.anthropic.com/legal/commercial-terms · privacy: https://privacy.claude.com

Cloudflare, Inc. (our server and our website)

Our server (the relay) runs on Cloudflare Workers, and our database on Cloudflare D1, stored in the United States.
Your words, and the recording when it is uploaded for the second pass, pass through it on the way to Anthropic and ElevenLabs. They are not stored and not written to logs.
The live audio while you record, with its name hints and any typed words that go with it, does not pass through it: it goes straight from your iPhone to ElevenLabs. Our server only issues the one-time pass for it.
Our server's log lines hold only ids, statuses, reasons and counts, never what you said. Cloudflare keeps them for 7 days.
Cloudflare handles your IP address to deliver each request. Our server uses it only to count requests over short windows (seconds to a minute) to stop abuse. It does not store or log it, and it does not use it to find your location.
Requests are handled at the Cloudflare location nearest you, which can be outside the United States.
Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/

Apple

Apple Maps receives your location, if you allow it, to suggest nearby places. Only place names, never your coordinates, go to Anthropic and, as name hints, to ElevenLabs.
App Store runs purchases and subscriptions. We receive a transaction record (below), never your name, email or card.
App Attest and DeviceCheck prove the app is a genuine copy on a genuine iPhone, and keep the free trial to once per iPhone. Apple stores two yes/no values for your iPhone. We cannot clear them, but we can reset your trial on our side (see Your choices).
Age check. In states where the law requires it (Texas today), the app asks Apple whether your Apple Account belongs to an adult. The app uses the answer on your iPhone only to apply that check. It is not sent to our server.
iCloud, as described above.
Apple's privacy policy: https://www.apple.com/legal/privacy/

Gravatar (Automattic Inc.), only if you turn it on

Gravatar photos are off unless you turn them on, and the app asks first. Then the app asks Gravatar whether a person's email address has a public photo. It sends a one-way scrambled form (hash) of the address, not the address itself, straight from your iPhone. Gravatar sees your IP address and keeps its web logs for about 30 days. Anyone who already knows the address can compute the same hash, so the hash is not anonymous. Gravatar's privacy policy: https://automattic.com/privacy/

Our service providers

ElevenLabs, Anthropic and Cloudflare act as our service providers under their terms. They may not sell your information. Anthropic and Cloudflare may use it only to provide their service to us; for ElevenLabs, model training is described in the "Training" line above, and its other uses are limited to providing its service to us. Each of them is bound to protect it at least as well as this policy describes.
Apple processes data under its own terms and privacy policy.
Gravatar receives only an email hash, and only if you turn Gravatar photos on.
Nobody else receives your information from the app.

Not in the App Store version

The App Store version has no Google sign-in, no Gmail, no Google Maps and no web lookups of people. If we add a feature that sends information somewhere new, we will tell you in the app and ask first (see Changes).

What our server keeps

There is no account. Our server keeps a record for each iPhone and for each subscription:

Your iPhone's record: a random device id, a short support code made from it, the App Attest key id and public key for your iPhone with Apple's receipt for that key, the app version, when the record was created and last used, and whether the free trial was used. It also holds which setup screen you reached, whether you finished setup and whether you saved a first note (the last two with the date our server first heard them), the day you first saved a note that you started from the "Start a note" control or shortcut (Siri, Spotlight or the Shortcuts app), and when the app last reported these. The app tells our server when one of them changes, usually right after the save that changed it, so that last time is often when you saved that note; it never tells what a note says.
Access tokens for the app and a reinstall secret (so a reinstalled app can find its record again), stored only in a scrambled (hashed) form.
Purchase records from Apple: transaction ids, product, purchase, expiry and refund dates, whether a purchase came through Family Sharing, whether it was a test (sandbox) purchase, and Apple's notifications about renewals and refunds. Never your name, email, card or the price you paid.
Which iPhones use a subscription, by device id.
Counts: notes used per period, the random ids of the notes counted (so a retry is not counted twice), AI usage in tokens and audio minutes and what it cost (Claude and speech to text apart), daily request counts, and the days on which you opened the app (one mark per day, with no time of day; work the app does in the background does not count).
Totals for all iPhones together: each night our server adds up the day before, for example how many iPhones were set up, opened the app or saved a note, what the AI cost, how far the iPhones set up on one day got through setup, how many of them saved a note started from the "Start a note" control or shortcut in their first week, and how many of them came back a week and four weeks later. The totals hold no device id or support code; we use them to see how Requaint is doing.
ElevenLabs transcript ids: if deleting a second-pass transcript at ElevenLabs fails, the id ElevenLabs gave it (never its text), so we can try again. It is removed once the transcript is deleted, or after about a week; if we give up, the id (only the id) can also appear in our server logs, which are kept 7 days.
Interrupted uploads: for a second-pass upload whose transcript our server could not identify, a marker with only the time it started and why, so we know how many such transcripts there are. Removed after 30 days.

It never keeps a recording, a transcript, a note, a person's name, an email address or a location.

In the terms Apple's App Store privacy labels use, the app and our server collect, linked to you: Audio Data and Other User Content (sent to ElevenLabs and Anthropic, above); Contacts (calendar attendees and people you saved, sent to Anthropic; names of people you saved also to ElevenLabs as name hints); Precise Location (nearby place names, sent to Anthropic and ElevenLabs); Email Address (only the Gravatar hash, if you turn it on); Device ID and User ID (your iPhone's record and the id on your purchases); Purchase History; Product Interaction (note counts, the days you opened the app, which setup screen you reached, whether you saved a first note and the day you first saved one started from the "Start a note" control or shortcut); and Other Diagnostic Data (our server's log lines). All of it is used to make the app work; Product Interaction is also used for analytics (our own counts of how Requaint is used, above). None of it is used to track you.

How long:

Daily counters: 35 days. The days you opened the app: 45 days. Access tokens and one-time challenges: 7 days after they expire or are revoked.
Your setup progress, first-note date and first "Start a note" date: as long as your iPhone's record.
Counts, counted note ids and Apple notifications: 12 months.
An iPhone record not used for 12 months is deleted. So is a subscription that ended 12 months ago and has no iPhone left. We keep the record while it still holds top-up notes you bought and have not used, because those never expire.
Totals for all iPhones together: kept. They hold no device id, so deleting your iPhone's record does not change totals already counted.
When a top-up is refunded or its record is deleted, we keep only Apple's transaction id, with nothing linking it to an iPhone or a subscription, so the same purchase cannot be credited twice.

"Delete my data on the server" (Settings > Plan) works with or without a purchase:

It deletes your iPhone's record at once: its counts, counted note ids, the days you opened the app, its setup progress, trial records, App Attest key and links to any subscription. Its access tokens stop working at once and are deleted 7 days later. A stripped row (the random device id, support code, dates and whether the trial was used) stays for 30 days, then it is deleted too.
Top-up notes you bought during the free trial on this iPhone and have not used are removed with it. Top-ups bought on a subscription stay with the subscription.
Notes you used on a shared subscription stay counted on that subscription.
It does not cancel a subscription. Billing continues through Apple until you cancel in your App Store settings.
Apple's DeviceCheck mark that this iPhone used its trial stays with Apple.
It does not touch the notes on your iPhone. To delete those, use Settings > Data > Delete all data.
If you keep using the app, it registers your iPhone again as a new record and tells that record your setup progress again.

People you write about

Your notes can be about other people: what they told you, who they are related to, where you met. Those people did not sign up for Requaint.

What is sent about them, and to whom, is listed above: names and short notes go to Anthropic (when several people you saved share a first name or a short form of it, also where each works, their job title, city, how you'd recognize them and where you first met), voices in a recording go to ElevenLabs, attendees' names and emails go to Anthropic with a calendar event, and, if you turn Gravatar photos on, a hash of a person's email goes to Gravatar.
We store none of it. We cannot open, change or delete what a user wrote about someone.
If you think someone keeps notes about you in Requaint, you can write to support@requaint.app. We will tell you that we hold no notes and cannot reach them.
We never sell this information or use it for advertising.
You are responsible for having the right to record and keep what you note about others (see our Terms).

Health information

A note can contain health facts about you or someone else. They go only to ElevenLabs (in the recording, and in the last few words of anything you typed just before recording; the live stream goes straight from your iPhone, the second pass through our relay) and Anthropic (in the text, through our relay), to make the card and, from what you noted about a person, to suggest what to bring up next time. We never store them or use them for anything else. Our Consumer Health Data Privacy Policy explains this for Washington and Nevada.

The website

requaint.app is hosted on Cloudflare.
If you join the waitlist, we keep your email in our Cloudflare storage and use it only to announce launch stages. We never sell it. Every email has a one-click unsubscribe.
We count page views without cookies (Cloudflare Web Analytics). There are no ad pixels.
Cloudflare keeps technical request logs as described above.

Emails to support

When you write to support@requaint.app, optionally from the app (Settings > Help & Support > Contact support), we get your email address and what you write. If you leave "Include diagnostics" on, the email also carries a diagnostics file that you see in full before you send it: the app and iOS versions, a few facts about your iPhone (model, free space, Low Power Mode, language and region), your support code and plan state, which permissions you allowed, counts (people, notes, and how many notes are waiting to finish), the last 20 timing rows and error codes with the time of each, and Anthropic's request ids for calls that failed. It never holds your notes, names, recordings or your iPhone's device id. Mail to this address is routed by Cloudflare and kept in our support mailbox at Google (Gmail) for as long as we need it to answer you; we delete it when you ask. We use it only to answer you and fix the problem you report.

Tracking, Do Not Track and Global Privacy Control

The app does not track you across other companies' apps or websites. It contains no third-party advertising, attribution or analytics code. Our own server's counts (above) stay with us and are never used for advertising.
No third party collects information about your activity over time and across websites or apps through Requaint.
Because nothing tracks you, a browser's "Do Not Track" or Global Privacy Control signal changes nothing: we already do what they ask.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the past 12 months.

Children

Requaint is for adults: you must be 18 or older to use it. It is not directed to children under 13. If we learn that we hold information from a child, we delete it. Contact support@requaint.app. Mentioning a child in your own notes is fine.

Your choices

On your iPhone:

Edit or delete any note or person in the app.
Export everything: Settings > Data.
Delete everything: Settings > Data > Delete all data.
Withdraw your agreement to AI processing: Settings > Privacy > AI processing > Withdraw. The app then works without new notes, as with "Not now".
Turn off Location, Calendar, Contacts or the microphone in your iPhone's Settings at any time.

On our server:

Delete your iPhone's record: Settings > Plan > Delete my data on the server.
Ask what our server holds about your iPhone: write to support@requaint.app with the support code from Settings > Plan. We answer within 45 days.
Reset the free trial on an iPhone you bought used: write to us with the support code.

We offer these rights to everyone, wherever you live. We do not treat you differently for using them.

Security and breaches

Every connection from the app uses HTTPS.
The app keeps its access token in the iPhone's Keychain, on this device only. The App Attest key never leaves the iPhone's secure hardware.
Our server keeps access tokens only in scrambled (hashed) form.
Our server holds no content to lose.
If a security breach affects your information, we will notify you as the law requires.

Changes to this policy

We post every change here with a new effective date, and we tell you in the app when a change matters.
A new use of your information (for example a new vendor, a new kind of data sent, or any AI training) applies only after you agree to it in the app. It never applies to information sent before.

Change log

Date	Change
November 10, 2026	First version.

Contact

Constantin Scholl
support@requaint.app