Your context is not our commodity.
This is a product-design statement, not the final jurisdiction-specific legal notice. The final policy will identify the operating company, processors, regions, legal bases and contact channels before real user data is accepted.
Recording is a physical decision.
What the product needs to process
Depending on the features enabled, the service may process device identifiers and state, intentional audio captures, transcripts, extracted people/projects/decisions/tasks, user corrections, bracelet-originated wellness measurements, connected-agent credentials, access history and support diagnostics.
Control is granular
Raw audio, transcripts, extracted context and health are separate data domains. Agent permissions cover extracted context, full transcripts and health independently; raw audio is used only by the trusted processing path and is never retrievable by an agent. Health is off until the user explicitly enables it.
Retention is explicit
The recommended default deletes raw audio seven days after a transcript is verified. A user can preserve a specific recording or choose a different supported duration. Transcript and structured context remain until the user deletes them or the account, subject to a documented backup-expiry period.
No hidden recording
The product is designed for deliberate button-controlled recording with visible and tactile feedback. It is not an always-listening service. Users remain responsible for obtaining any consent required when recording other people.
No sale and no product training
The intended business model does not sell personal data or train product models on private user content. Processing vendors must be configured contractually and technically not to use submitted content for model training where such controls are available.
Your rights and controls
The product will provide access history, correction, export, connector revocation and deletion. Revoking a connector or deleting data from BEFORE stops future BEFORE access, but it cannot erase a copy already present in a ChatGPT, Claude or other provider-held conversation; the user must use that provider's history controls too. A production privacy notice will explain how to exercise applicable rights.
Health and medical boundaries
Bracelet measurements and derived summaries are intended for general wellness. They are not diagnostic. Apple Health data will not be imported into general AI context in the first version; verified bracelet measurements may be written to Apple Health only after per-type authorization.
Open items before pilot
- Operating company identity, privacy contact and data-protection responsibility.
- Swiss versus EU hosting and subprocessors.
- Exact backup, account-deletion and legal-retention windows.
- Age eligibility and regional recording-consent guidance.
- Final processor agreements and international-transfer mechanism.
Read enough? Your context stays yours.
Reserve your band