Privacy Policy.

heyv16 is made and operated by Perfroute Inc., a company incorporated in Delaware, United States (“Perfroute,” “we,” “us”). Perfroute is the data controller for the processing described here. For anything in this policy, write to contact@heyv16.com.

heyv16 does one thing: it records what you say, transcribes it, cleans it up, and gives you the text. This policy describes exactly what that involves — no more, no less.

heyv16 has no sign-up. We do not ask for, and do not have, your name, email address, or phone number. On first launch the app generates a random identifier, stored in your iCloud Keychain so your own devices can share history if you turn saving on. To us, you are that random identifier and nothing else.

To protect the service from abuse, the app uses Apple’s App Attest / DeviceCheck integrity signals and short-lived service tokens. These prove a request comes from a genuine copy of the app; they do not identify you as a person.

Out of the box, saving is off. In this mode each dictation is processed transiently: your audio is transcribed and cleaned to produce your text, the text is returned to your device, and we store nothing — no audio, no transcript, no text — on our servers. The recorder shows “Not saved” and that label is accurate.

A per-recording Incognito option does the same for a single dictation even when saving is on. Incognito recordings are never stored, synced, or indexed.

Recordings that have not been processed yet (for example while you are offline) exist only on your device until processing succeeds.

You can optionally turn on Save history and sync. Then, and only then, we store your transcripts and cleaned text (and original audio only if you additionally enable audio retention) so your notes sync across your devices. What you should know about that storage:

• It is encrypted in transit and at rest, with content encrypted at the application level. Access is limited to the automated systems that serve your notes back to your devices — our staff cannot browse your content, and support tooling is blind to it by design.
• It is used for exactly one purpose: showing your notes back to you. We do not read it, analyze it for marketing, advertise with it, sell it, share it, or use it to train AI models. There are no exceptions to this.
• A separate opt-in, Personalize from my saved notes, lets the app use your saved transcripts to personalize results for you (for example, learning the spelling of names you use). It is off by default, applies only to content you chose to save, and can be turned off at any time — with the option to wipe the derived data.

Because your text is processed on our servers, heyv16 is not end-to-end encrypted in the cryptographic sense — processing could not work otherwise. What we promise, and build for, is narrower and honest: your content is encrypted where it rests, no human looks at it, and it is never used for anything except serving you.

To produce your text, your audio (and the resulting transcript) is processed by established AI service providers — speech-to-text and a text cleanup model — acting on our instructions as processors. Under our agreements with them, your content may not be used to train their models, and is retained by them only transiently as needed to provide the service and for abuse prevention, per their disclosed retention policies. We select providers and configurations to minimize retention.

This processing happens in both modes. In “Not saved” mode it is the only processing that ever touches your content.

We collect content-free operational metrics — things like request latency, retry counts, and whether a clipboard write succeeded — to keep the service fast and reliable. These metrics never contain your audio, transcripts, or text. The apps contain no third-party advertising or tracking SDKs, and we do not track you across other apps or websites.

Export: you can export all of your saved data (transcripts, versions, and audio if kept) as a file, from the app, at any time.

Delete: deleting a single note removes it everywhere — storage, sync, and any derived index. “Delete everything” wipes all of your content from our active systems immediately, invalidates your identifier, and issues a fresh one; encrypted disaster-recovery backups expire within a maximum of 30 days. There is no account to “deactivate” — deletion is the end of the relationship.

Depending on where you live (including the EU/UK under GDPR, Brazil under LGPD, and various US states), you have rights to access, correct, export, delete, and restrict processing of your data. The app’s export and delete controls exercise the main ones directly, without asking us. For anything else — or if you have no device access anymore — email contact@heyv16.com and we will respond within the timelines required by applicable law. We do not discriminate against you for exercising any right. We do not sell or share personal information as those terms are defined in US state privacy laws.

Legal bases where required: performance of a contract (turning your speech into text), your consent (saving history, audio retention, personalization — each separately opt-in), and legitimate interests (abuse prevention, content-free service metrics).

Our servers run on global edge infrastructure, and AI providers may process content in the United States. Where required, transfers are protected by recognized safeguards such as standard contractual clauses.

heyv16 is not directed at children under 13, and we do not knowingly process their data. If you believe a child under 13 has used the service, contact us and we will delete the associated data.

If we change this policy, we will update the effective date above and, for material changes, tell you in the app before they take effect. We will never weaken the core commitments — no ads, no data sales, no sharing, no training on your content, delete means delete — without asking for your explicit consent first.