Privacy Policy

Local recordings and transcripts

WordMarker stores recordings, markers, local transcripts, and completed summaries on your device. On-device transcription uses Apple system transcription support when it is available for your device and language. Local recordings, transcripts, and summaries are not removed merely because you sign out, cancel a subscription, or a subscription expires.

When you delete a local recording in the app, it is moved to Recently Deleted and can be restored for 30 days before permanent deletion cleanup.

Optional iCloud Sync

WordMarker's iCloud Sync setting is optional and is off until you enable it. If you enable Sync Recordings with iCloud, WordMarker uses Apple's CloudKit service and your private iCloud database to sync recordings, audio, transcripts, markers, completed summaries, and Recently Deleted across devices signed in to the same iCloud account. Appearance settings and WordMarker account information stay on each device and are not included in this sync.

Synced content is processed and stored by Apple as part of your iCloud account and is subject to Apple's iCloud terms and privacy practices. Sync depends on your iCloud account, network connection, available iCloud storage, device settings, and Apple's service availability.

Turning iCloud Sync off stops WordMarker from continuing to synchronize on that device, but it does not automatically erase content already stored in iCloud or on another device. If the same recording is changed differently on multiple devices, WordMarker may pause sync for that recording and ask you to resolve the conflict instead of silently replacing one copy.

Sign in with Apple

Signing in is optional for recording audio and using available on-device transcription. It is required for online transcription, Summary, account balance, and subscriptions. When you sign in with Apple, WordMarker receives Apple sign-in information needed to authenticate you. The backend stores the Apple account link, optional Apple-provided profile information such as verified email or display name when available, and hashed session and replay data. It does not store plaintext Apple identity tokens, authorization codes, raw nonces, access tokens, or refresh tokens.

Online transcription

If you choose online transcription, WordMarker creates a server job, reserves the required transcription time from your account, uploads the selected audio to private temporary storage, and processes it through the online transcription provider. The backend stores account balance records, credit reservations, ledger entries, job state, idempotency records, normalized transcript text, transcript segments, transcript words or events, provider identifiers, and safe timestamps needed to operate and audit the service.

Uploaded audio is intended to be temporary. After a successful online transcription is saved and credit is finalized, the backend attempts to delete the uploaded audio immediately. If immediate deletion fails, scheduled cleanup can retry. If processing ends in a terminal failure, audio may be retained for a recovery window before scheduled cleanup deletes it.

Advertising and optional rewarded ads

For eligible free-plan users, WordMarker may show Google AdMob banner ads on completed offline or online transcript screens. Banner ads do not grant online-transcription time.

If you are signed in and do not have enough available online transcription time for a recording, WordMarker may offer an optional rewarded ad supplied by Google AdMob. You choose whether to open a rewarded ad. A completed rewarded ad grants exactly 120 online transcription seconds only after Google and WordMarker's backend verify the reward.

WordMarker uses the Google Mobile Ads SDK for banner and rewarded ads and Google User Messaging Platform for consent and privacy messages. Network requests to Google can expose your IP address, and Google's SDK privacy manifests list coarse location among the data that may be processed. Depending on your region, consent choices, device settings, and Google's configuration, Google may serve personalized, non-personalized, or limited ads. After applicable consent choices allow ad requests, WordMarker may request App Tracking Transparency permission. If you authorize tracking, WordMarker allows Google Mobile Ads to use a device identifier and enables its publisher first-party identifier and default personalization setting. If you deny or restrict tracking, WordMarker disables the publisher first-party identifier and ad personalization setting. Google's SDK privacy manifests indicate that Google Mobile Ads may process coarse location, device identifiers, advertising data, ad or product interactions, crash information, performance information, and other diagnostic information for third-party advertising, developer advertising, and analytics. Google User Messaging Platform may process coarse location, performance information, and product interactions for consent and privacy-message app functionality. Advertising and verification metadata may also be used to measure ad delivery, prevent fraud, protect security, and operate the reward flow.

WordMarker does not provide Google with your recordings, audio, transcripts, transcript language, markers, recording titles, or Summaries for advertising. Banner and rewarded ads are separate from online transcription and Summary processing.

For server-side reward verification, WordMarker creates a bounded reward-session identifier when the app prepares a production rewarded ad. After an ad event, Google sends signed verification metadata to WordMarker's backend, such as a transaction ID, ad-unit and reward details, and the app-provided custom reward data. WordMarker uses this information to validate the reward, credit the correct signed-in account, prevent duplicate grants, detect abuse, and keep necessary operational records. WordMarker does not send Google your email address, name, audio, transcript, markers, recording title, or Summary as part of this reward-session custom data.

Reward verification records are retained as needed to operate the account balance, prevent duplicate or fraudulent grants, support security, and maintain service records. No fixed deletion period is currently implemented for these operational reward records apart from account deletion and normal service maintenance.

If Google User Messaging Platform reports that privacy options must remain available, WordMarker shows a Privacy Choices control in Settings. You can also review Google's privacy information at Google Privacy Policy and Google advertising information.

Online Summary and AI processing

If you choose Summary, WordMarker uses the selected completed transcript to generate a concise review of the recording. WordMarker may process transcript text, locale, duration, timing, speaker labels when present, transcript source details, and related service metadata. For Summary, WordMarker sends transcript text and related request details to its server and to OpenAI. WordMarker does not send recording audio to OpenAI for Summary processing.

WordMarker's backend temporarily stores Summary inputs while the request is processing or retrying. When a completed Summary is available, the app retrieves it, saves it on your device, and then tells the backend delivery succeeded. After that confirmation, WordMarker deletes the server copy of the completed Summary content and any remaining transcript input connected only to that Summary request.

A completed Summary may remain on the backend temporarily if the app closes, the network fails, or delivery confirmation cannot be sent. Scheduled cleanup deletes completed but unconfirmed Summary content after 24 hours. WordMarker keeps non-content operational records, such as job state, identifiers, hashes, timestamps, cache, rate-limit, idempotency, account, subscription, allowance, security, and diagnostic records, to operate the service, prevent duplicate work, prevent duplicate grants or charges, and support security and diagnostics. Regenerating a Summary creates another Summary request.

OpenAI is WordMarker's Summary service provider. WordMarker sends Summary requests with store: false. Under OpenAI's standard API data handling, OpenAI may retain request and response content for up to 30 days, or longer when legally required. OpenAI states that API content is not used to train models unless the account explicitly opts in.

You can avoid Online Summary processing by not using Summary. Deleting your WordMarker account removes server-side Summary data and related operational metadata. Local recordings, transcripts, summaries, markers, and other local content remain on your device until you delete them locally or remove the app and its data.

Subscriptions and purchases

WordMarker subscriptions are processed by Apple through StoreKit and the App Store. WordMarker receives verified subscription transaction information from Apple so it can maintain your online transcription allowance, subscription period, and transaction idempotency. Subscription minutes reset each billing period and unused subscription minutes do not roll over.

Service providers

WordMarker uses Apple services for Sign in with Apple, StoreKit subscriptions, on-device transcription support, optional iCloud and CloudKit synchronization, and App Store purchase management. Optional online transcription uses Cloudflare Workers, D1, R2, and Queues for backend processing and temporary storage, and ElevenLabs Scribe for speech-to-text processing. Optional Online Summary uses Cloudflare backend services and OpenAI for Summary generation. Banner and optional rewarded ads use Google AdMob and Google User Messaging Platform.

Security

WordMarker uses HTTPS for network requests, private upload URLs for online transcription audio, server-side authentication checks, hashed session tokens in backend storage, and idempotency protections for jobs and subscription transactions. No system can be guaranteed perfectly secure.

Retention and deletion

Recordings, transcripts, summaries, markers, and other content stored on your device remain there until you delete them in the app or remove the app and its data. If iCloud Sync is enabled, synchronized copies and deletion state may also remain in or propagate through your private iCloud database and other connected devices. Turning sync off or deleting your WordMarker service account does not by itself remove device or iCloud content. Backend records for accounts, credits, jobs, subscription events, online transcript results, rewarded-ad verification, Summary operational metadata, and related service records are retained to operate the service, prevent duplicate charges or grants, and support account history. Completed Summary content is stored on your device after delivery and removed from the WordMarker backend after confirmed delivery, with 24-hour fallback cleanup for completed but unconfirmed content. Account deletion removes server-side WordMarker account data, including server-side Summary data and metadata, but it does not cancel an App Store subscription.

For privacy questions or requests concerning your account data, contact support@wordmarker.app.