Privacy Policy

Local recordings and transcripts

WordMarker stores recordings, markers, local transcripts, and completed summaries on your device. On-device transcription uses Apple system transcription support when it is available for your device and language. Local recordings, transcripts, and summaries are not removed merely because you sign out, cancel a subscription, or a subscription expires.

When you delete a local recording in the app, it is moved to Recently Deleted and can be restored for 30 days before permanent deletion cleanup.

Sign in with Apple

Signing in is optional for recording audio and using available on-device transcription. It is required for online transcription, Summary, account balance, and subscriptions. When you sign in with Apple, WordMarker receives Apple sign-in information needed to authenticate you. The backend stores the Apple account link, optional Apple-provided profile information such as verified email or display name when available, and hashed session and replay data. It does not store plaintext Apple identity tokens, authorization codes, raw nonces, access tokens, or refresh tokens.

Online transcription

If you choose online transcription, WordMarker creates a server job, reserves the required transcription time from your account, uploads the selected audio to private temporary storage, and processes it through the online transcription provider. The backend stores account balance records, credit reservations, ledger entries, job state, idempotency records, normalized transcript text, transcript segments, transcript words or events, provider identifiers, and safe timestamps needed to operate and audit the service.

Uploaded audio is intended to be temporary. After a successful online transcription is saved and credit is finalized, the backend attempts to delete the uploaded audio immediately. If immediate deletion fails, scheduled cleanup can retry. If processing ends in a terminal failure, audio may be retained for a recovery window before scheduled cleanup deletes it.

Optional rewarded ads

If you are signed in and do not have enough available online transcription time for a recording, WordMarker may offer an optional rewarded ad supplied by Google AdMob. You choose whether to open a rewarded ad. A completed rewarded ad grants exactly 120 online transcription seconds only after Google and WordMarker's backend verify the reward.

WordMarker uses the Google Mobile Ads SDK for rewarded ads and Google User Messaging Platform for consent and privacy messages. Network requests to Google can expose your IP address, and Google's SDK privacy manifests list coarse location among the data that may be processed. Depending on your region, consent choices, device settings, and Google's configuration, Google may serve personalized, non-personalized, or limited ads. WordMarker does not request App Tracking Transparency permission in the current rewarded-ad implementation. Google's SDK privacy manifests indicate that Google Mobile Ads may process coarse location, device identifiers, advertising data, ad or product interactions, crash information, performance information, and other diagnostic information for third-party advertising, developer advertising, and analytics. Google User Messaging Platform may process coarse location, performance information, and product interactions for consent and privacy-message app functionality. Advertising and verification metadata may also be used to measure ad delivery, prevent fraud, protect security, and operate the reward flow.

WordMarker does not provide Google with your recordings, audio, transcripts, transcript language, markers, recording titles, or Summaries for advertising. Rewarded ads are separate from online transcription and Summary processing.

For server-side reward verification, WordMarker creates a bounded reward-session identifier when the app prepares a production rewarded ad. After an ad event, Google sends signed verification metadata to WordMarker's backend, such as a transaction ID, ad-unit and reward details, and the app-provided custom reward data. WordMarker uses this information to validate the reward, credit the correct signed-in account, prevent duplicate grants, detect abuse, and keep necessary operational records. WordMarker does not send Google your email address, name, audio, transcript, markers, recording title, or Summary as part of this reward-session custom data.

Reward verification records are retained as needed to operate the account balance, prevent duplicate or fraudulent grants, support security, and maintain service records. No fixed deletion period is currently implemented for these operational reward records apart from account deletion and normal service maintenance.

If Google User Messaging Platform reports that privacy options must remain available, WordMarker shows a Privacy Choices control in Settings. You can also review Google's privacy information at Google Privacy Policy and Google advertising information.

Online Summary and AI processing

If you choose Summary, WordMarker uses the selected completed transcript to generate a concise review of the recording. WordMarker may process transcript text, locale, duration, timing, speaker labels when present, transcript source details, and related service metadata. For Summary, WordMarker sends transcript text and related request details to its server and to OpenAI. WordMarker does not send recording audio to OpenAI for Summary processing.

WordMarker's backend temporarily stores Summary inputs while the request is processing or retrying. When a completed Summary is available, the app retrieves it, saves it on your device, and then tells the backend delivery succeeded. After that confirmation, WordMarker deletes the server copy of the completed Summary content and any remaining transcript input connected only to that Summary request.

A completed Summary may remain on the backend temporarily if the app closes, the network fails, or delivery confirmation cannot be sent. Scheduled cleanup deletes completed but unconfirmed Summary content after 24 hours. WordMarker keeps non-content operational records, such as job state, identifiers, hashes, timestamps, cache, rate-limit, idempotency, account, subscription, allowance, security, and diagnostic records, to operate the service, prevent duplicate work, prevent duplicate grants or charges, and support security and diagnostics. Regenerating a Summary creates another Summary request.

OpenAI is WordMarker's Summary service provider. WordMarker sends Summary requests with store: false. Under OpenAI's standard API data handling, OpenAI may retain request and response content for up to 30 days, or longer when legally required. OpenAI states that API content is not used to train models unless the account explicitly opts in.

You can avoid Online Summary processing by not using Summary. Deleting your WordMarker account removes server-side Summary data and related operational metadata. Local recordings, transcripts, summaries, markers, and other local content remain on your device until you delete them locally or remove the app and its data.

Subscriptions and purchases

WordMarker subscriptions are processed by Apple through StoreKit and the App Store. WordMarker receives verified subscription transaction information from Apple so it can maintain your online transcription allowance, subscription period, and transaction idempotency. Subscription minutes reset each billing period and unused subscription minutes do not roll over.

Service providers

WordMarker uses Apple services for Sign in with Apple, StoreKit subscriptions, on-device transcription support, and App Store purchase management. Optional online transcription uses Cloudflare Workers, D1, R2, and Queues for backend processing and temporary storage, and ElevenLabs Scribe for speech-to-text processing. Optional Online Summary uses Cloudflare backend services and OpenAI for Summary generation. Optional rewarded ads use Google AdMob and Google User Messaging Platform.

Security

WordMarker uses HTTPS for network requests, private upload URLs for online transcription audio, server-side authentication checks, hashed session tokens in backend storage, and idempotency protections for jobs and subscription transactions. No system can be guaranteed perfectly secure.

Retention and deletion

Local recordings, local transcripts, local summaries, markers, and other local content remain on your device until you delete them in the app or remove the app and its data. Backend records for accounts, credits, jobs, subscription events, online transcript results, rewarded-ad verification, Summary operational metadata, and related service records are retained to operate the service, prevent duplicate charges or grants, and support account history. Completed Summary content is stored locally after delivery and removed from the backend after confirmed delivery, with 24-hour fallback cleanup for completed but unconfirmed content. Account deletion removes server-side account data, including server-side Summary data and metadata, but it does not remove local content from your device or cancel an App Store subscription.

For privacy questions or requests concerning your account data, contact support@wordmarker.app.