Privacy Policy — Regesh

Last updated: 2026-08-30

Regesh is a personal voice journal. This policy explains what data the app handles.

What stays on your device

Your journal entries, transcriptions, AI summaries, and audio recordings are stored locally on your device (SwiftData and the app's Documents folder on iOS; Room and the app's files directory on Android). Regesh does not run a server that stores your journal content, with one small exception — a single mood word, described under AI features below.

What is sent off the device, and to whom

• Sign-in (Descope): when you sign in, your email, name, and a user identifier are handled by our authentication provider (Descope) to manage your account.
• Transcription (Apple, on iOS): audio you record is sent to Apple's speech-recognition service to convert it to text, per Apple's Speech framework. When the Hebrew on-device model is installed, transcription happens on the device and the audio is not sent anywhere.
• Transcription (Android): audio you record is sent through our proxy to a speech-to-text provider (currently Google Gemini) to convert it to Hebrew text. The audio is transmitted for transcription only and is not stored by the proxy.
• AI features (Anthropic): to produce summaries and answer your questions, the relevant text is sent to Anthropic (Claude) through our proxy. The proxy validates your session and then uses either your own Anthropic API key (stored in Descope's secure vault) or, for accounts we have enabled it on, a key we fund ourselves. Either way the proxy does not retain your content — not the text it forwards, not the summary, not the reply. One exception, and it is a single word: summaries ask Claude for mood labels from a fixed list, and when it answers with a word outside that list we store just that word, with a count and the day we first and last saw it, so the app's Hebrew mood dictionary can learn it instead of showing you raw English. It must be one run of letters, 24 characters at most — anything longer or containing a space is discarded unread. Nothing is stored beside it: no entry, no transcript, no summary, no identifier. Deleted 90 days after we last saw it.
• App preferences (Descope): your settings — theme, reply tone, audio retention period, whether summaries include a reflection question, and whether the daily reminder is on — are saved to your account so they follow you across devices. This is preferences only. No journal entry, transcript, summary, or audio recording is ever synced or stored on our servers.
• Quality ratings (only if you tap one): each transcript and summary has a thumbs-up / thumbs-down. Tapping it sends at most six things and nothing else: whether it is about a transcript or a summary; the rating; an optional reason from a short fixed list ("wrong words", "too long"); which AI model and which prompt version produced the output (both absent for a transcript your phone made itself); and a random one-time id for that single output. That id is generated on the device, used once, never reused, and derived from nothing about you — not your account, session, device, or entry — so it cannot be linked to you or to your other entries. No journal content and no identifier of any kind travels with it, anonymized stand-ins included. We check your session so only real accounts can rate, then discard who you are. Deleted 90 days after we receive it. Entirely optional — nothing is sent unless you tap.

What we do not do

• No advertising, no analytics SDKs, no tracking across apps or websites.
• We do not sell your data.
• We do not sync, back up, or store your journal content anywhere off your device. The single mood word described above is the only thing we keep that is derived from an entry, and it is kept without the entry.
• We do not build a profile of you or your usage. Our proxy does record each AI request it handles — day and hour, which model, which platform and app version, which attempt, how long it took, how many tokens, whether it succeeded, and the same random one-time id — plus daily totals of the same, so we can tell whether the service is working and what it costs.

  iPhone transcription is the exception: your phone's own recognizer performs it, so no request reaches us and we see neither the audio nor the text. That also means we cannot tell whether it worked, and a failed transcription leaves no entry to ask you about. So the app queues up to twenty small reports about those transcriptions and sends them with the next request it was making anyway — never a request made solely to carry them. Each says only: that a transcription happened, that your phone ran it, whether it produced text or why not (nothing said, the recognizer failed, no Hebrew recognizer on the device, speech access not granted, or the network was needed and missing), which attempt, how long it took, the day and hour, and the one-time id. No audio, no transcript. Nothing records which reports were sent together, and an unsent one is dropped once twenty newer ones arrive or after thirty days.

  None of these records holds journal content or any identifier, so nothing in them can be traced back to you or gathered into a history of your use. Nothing finer than the hour is recorded. We check your session so only real accounts can report, then discard who you are. A scheduled job deletes each per-request record 30 days after the operation it describes, each rating 90 days after we receive it, and each mood word 90 days after we last saw it; only the daily totals remain.

  There is one count we do keep against your account, and only if you are using the AI key we fund rather than your own: how many questions you asked the Ask tab today. It is a number and a date, nothing else — no question, no answer, no journal content — and it exists so that key cannot run away with our costs. It resets every day, is deleted within three days, and is deleted immediately if you delete your account.

Notifications

If you turn on the daily reminder, the app schedules a local notification on your device. It is generated on the device, contains no journal content, and involves no push service — nothing is sent to us or to anyone else.

Your control

• You can delete any entry in the app (its audio file is removed too).
• You can turn the daily reminder off at any time in Settings.
• You can disconnect your Anthropic key or sign out at any time in Settings.
• You can permanently delete your account and all associated data from Settings → Delete account, or via our account deletion page. That removes the account and everything stored with it — your sign-in details, your stored Anthropic key, and your synced preferences, and today's question count if you have one. The quality ratings, the operation records, and the mood words described above carry no identifier of any kind, so none of them is tied to you and there is nothing in them to delete.
• Deleting the app removes all locally stored journal data from the device.

Contact

Questions: barsaar92@gmail.com · Source: github.com/Bars92/regesh