Effective July 30, 2026
Sotto is developed by Decanlys.
Sotto collects no data. There are no accounts, no analytics, no ads, no tracking, and no Decanlys servers. Your audio and transcripts stay on your device unless you connect an outside service yourself — and nothing below changes that default.
Everything in Sotto’s core loop happens on your device: voice detection, recording, transcription (Apple’s on-device speech models), and note generation (Apple’s on-device foundation models).
Recordings and transcripts are stored in Sotto’s Documents folder on your device, where you can see and manage them in the Files app. By default, a conversation’s audio file is deleted as soon as its transcript is safely written; you can instead choose to keep audio for 7 days or forever. You can delete any conversation from within the app at any time, and deleting it also removes it from any backups you’ve enabled below.
Each of the following is off by default, is enabled only by you, and uses your own account or API key. When enabled, data goes directly from your device to that provider and is handled under that provider’s privacy policy — Decanlys is never in the middle and never sees it.
API keys and passwords you enter are stored in the iOS Keychain on your device and are sent only to the provider they belong to.
The one-time speech model download comes from Apple and sends no personal data. Notifications are generated locally on your device. If you have opted in to sharing analytics with developers in iOS Settings, Apple may provide Decanlys with aggregated crash reports as described in Apple’s privacy policy.
Sotto records conversations. Laws about recording vary by region — some require the consent of everyone involved. You are responsible for using Sotto lawfully; the app explains this before your first session and keeps recording visibly indicated while it listens.
Sotto is not directed at children under 13.
If this policy changes, the updated version will be posted at this address with a new effective date.
Questions or requests: connor@decanlys.com, or open an issue at github.com/maybenotconnor/sotto.