The short version

Your data stays on your device. We don't store your notes, articles, meetings, or anything you save. When we use AI to help with transcription or summaries, that data is processed and discarded—never used to train models. We track basic usage stats (like how many minutes of audio were transcribed) to understand costs and usage patterns, but we never see the actual content.

That's the gist. The rest of this document explains exactly how it all works.

1. Who we are

We are a bunch of indie developers who miss some of the iconic apps like Pocket, wanderlust etc, and are strong believers in AI making humans smarter and more efficient, and not yet doing things for them (might get there soon).

If you have questions about this policy, contact us at: hello@getpopy.com

2. What data we collect

2.1 Data you create in Popy

This includes:

Where this data lives: On your device. Locally. We do not upload, sync, or store this data on our servers.

2.2 Account information

If you create a Popy account, we collect:

2.3 Usage data

We collect anonymized, aggregate usage statistics to understand how Popy is used and to manage costs. This includes:

What we don't collect: The actual content of your notes, articles, meetings, voice memos, or any other data you create. We see that "a transcription request was made" but not what was said.

2.4 Data collected automatically

When you use Popy, we may automatically collect:

3. How we use your data

3.1 To provide Popy's features

Your local data powers all of Popy's features—search, organization, connections between items, and more. This processing happens on your device.

3.2 To provide AI-powered features

Certain features require sending data to third-party AI providers. Our agreements with these providers ensure:

3.3 To improve Popy

We use anonymized, aggregate usage data to:

3.4 To communicate with you

If you've provided your email, we may send:

We will never sell your email address or share it with third parties for marketing.

4. How we protect your data

4.1 Local-first architecture

Your content never touches our servers. It lives on your device, under your control.

4.2 Encryption

Data sent to AI providers is encrypted in transit (TLS/HTTPS).

4.3 Minimal data collection

We follow the principle of data minimization—we only collect what we need to provide and improve the service.

5. Third-party services

Popy uses third-party services for audio transcription, AI processing, and payment processing. We select providers with strong privacy practices and data protection agreements.

6. Data retention

6.1 Your content

Your notes, articles, meetings, and other content are stored locally on your device. We don't have copies, so we don't have retention policies for this data—you control it entirely.

6.2 Account information

If you have an account, we retain your email and account details for as long as your account is active. If you delete your account, we delete this information within 30 days.

6.3 Usage data

Anonymized usage statistics may be retained indefinitely for aggregate analysis. This data cannot be tied back to you or your content.

7. Your rights

Depending on where you live, you may have the following rights:

7.1 Access

You can request a copy of any personal data we hold about you (primarily account information and usage data associated with your account).

7.2 Deletion

You can request deletion of your account and associated data. Since your content is stored locally, deleting it is as simple as deleting it within the app or uninstalling Popy.

7.3 Correction

You can update your account information at any time in the app settings.

7.4 Opt-out

You can opt out of non-essential communications at any time.

To exercise any of these rights, contact us at hello@getpopy.com.

8. Data deletion

8.1 Deleting content in Popy

When you delete something in Popy, it's deleted from your device. We never had a copy, so there's nothing for us to delete.

8.2 Deleting your account

If you delete your Popy account:

8.3 Uninstalling Popy

When you uninstall Popy, all local data is removed from your device.

9. Children's privacy

Popy is not intended for children under 13 (or under 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.

10. International data transfers

If you're located outside the United States, please note that data sent to our AI providers may be processed in different countries. We ensure appropriate safeguards are in place through our data processing agreements with these providers.

11. Changes to this policy

We may update this privacy policy from time to time. If we make significant changes, we'll notify you through the app or via email before the changes take effect.

The "Last updated" date at the top indicates when this policy was last revised.

12. Contact us

If you have questions, concerns, or requests regarding this privacy policy or your data, contact us at:

Email: hello@getpopy.com

Summary table

Data type Stored where Shared with Retention
Your content (notes, articles, etc.) Your device only AI providers for processing (then discarded) You control it
Account info (email) Our servers Payment provider Until account deletion
Usage statistics Our servers No one Indefinitely (anonymized)
Payment info Payment provider Per provider policy