This Privacy Policy describes how Almanack (operated by Fabio Jonathan Arifin via EchoForge, the "Operator") handles information when you use the Almanack iOS application. Almanack is built local-first: your voice recordings never leave your device, and your memory database exists only on your phone. There is no cloud copy.
Contact
Operator: Fabio Jonathan Arifin (EchoForge)
Email: support@echoforge.to
Your Memory Stays on Your Device
All entries, decisions, commitments, tasks, and transcripts you create in Almanack are stored exclusively on your device in a local database encrypted at rest with SQLCipher. The encryption key is stored in the iOS keychain. You can additionally enable a Face ID lock inside the app. There is no cloud database. We cannot read, access, or recover your memory because no copy of it ever reaches our servers.
Voice and Transcription
Transcription runs entirely on your device using a local Whisper model. Your audio is never uploaded anywhere. By default, the audio recording is deleted from your device immediately after transcription completes. Only the resulting text remains, stored in your encrypted local database.
AI Processing of Transcript Text
Two features require a network call: structuring your spoken notes into decisions, commitments, and tasks, and answering questions about your own history. For these, transcript text (and the relevant stored text needed to answer a question) is sent from your device to a Cloudflare Worker proxy we operate, which forwards it to AI providers (OpenAI and Anthropic models accessed via OpenRouter) solely to generate the structured output or answer. The proxy does not store your content. These providers process text under their API terms. We do not use your content to train models, and these API providers state that API inputs are not used to train their models. See OpenRouter, OpenAI, and Anthropic privacy policies.
No Accounts
Almanack has no sign-up and no account system. We do not maintain a server-side account database. Your subscription is tied to your Apple ID through the App Store and can be restored on any device signed into that Apple ID.
Purchases and Subscriptions
All purchases are processed by Apple through the App Store. We never receive or store your payment card data. Subscription status is managed via RevenueCat, which receives a pseudonymous app user identifier and your entitlement status, not your name or payment details. See RevenueCat's privacy policy.
Analytics
Almanack may collect optional anonymous product analytics via PostHog (for example, which features are used and in-app errors) to fix bugs and prioritize improvements. Analytics events never include your entries, decisions, commitments, or transcripts, and are not linked to your real-world identity. See PostHog's privacy policy.
What We Do Not Do
- We do not sell your data. Ever.
- We do not show ads or share data with advertisers.
- We do not upload your audio. It never leaves the device.
- We do not keep a cloud copy of your memory. There is nothing for us to read, leak, or hand over.
- We do not use your content to train AI models.
Data Deletion
Go to Settings, then Delete all data inside the app. This erases everything: your encrypted database and transcripts. Because there is no cloud copy, deletion is immediate and complete. Deleting the app from your phone has the same effect on your local data. To request deletion of anonymous analytics events or RevenueCat purchase records, email us at support@echoforge.to.
Security
Your memory is encrypted at rest on your device with SQLCipher, keyed from the iOS keychain, and protected by your device's own security (passcode, Face ID, Secure Enclave). All network calls use TLS encryption in transit. No system is perfectly secure, but keeping your data off our servers entirely removes the largest class of risk.
Children's Privacy
Almanack is not directed to children under 13 and children under 13 are not permitted to use it. We do not knowingly collect any data from children under 13. If you believe we have, email us and we will delete the records.
International Transfers
Our third-party service providers are located primarily in the United States. By using the AI structuring and question-answering features outside the United States, you acknowledge that transcript text may be processed in the United States.
Changes to This Policy
We may update this policy from time to time. Material changes will be communicated through the app and reflected in the effective date above.
Contact
Questions or requests: support@echoforge.to