Weft’s privacy policy

What we collect

Nothing. Weft has no analytics, no crash reporting, no advertising identifiers, and no third-party SDKs of any kind. There is no account and no login. We do not receive your notes, your recordings, your photos, your calendar, or any information about how you use the app.

Because we receive nothing, there is nothing for us to sell, share, or hand over, and nothing to request deletion of. The controls that matter are in the app, and they are described below.

Where your record is kept

Your notes, transcripts, structured entries, and photos are stored on your iPhone, encrypted at rest with iOS file protection so they are unreadable while the device is locked.

Your iPhone’s own iCloud backup includes your notes, if you have that backup turned on, so a replacement phone can restore your journal. Recordings are deliberately excluded from it. This is Apple’s backup, governed by Apple’s terms, not ours. Whether anyone besides you holds a key to it depends on whether you have Advanced Data Protection enabled in iOS Settings; Weft has no way to read that setting and does not claim to know.

iCloud sync is optional and off until you turn it on. With it on, your notes are mirrored through your own private iCloud database — your Apple Account, never a server of ours. Recordings and photos are never synced. Turning sync off asks iCloud to delete the copy it holds; your journal on the iPhone is untouched.

When the app uses the network

Twice, and never to carry your words:

The App Store. To sell the one-time purchase and to restore it on a new device. Apple handles the transaction; we never see your payment details.

Apple’s speech model. The first time your language needs it, iOS downloads the on-device speech model. That request goes to Apple and carries none of your audio. Afterwards, transcription runs entirely on your iPhone.

If you turn on iCloud sync, your notes also travel to your own iCloud account. That is the only other network path, and you control it.

The permissions Weft asks for

Microphone. To record a note, only while you are recording one.

Speech recognition. Used on iPhones running iOS 17 to 25 to turn your recording into text on the device. Weft requires on-device recognition and refuses to transcribe rather than send audio to a server. On iOS 26 and later this permission is not needed at all.

Photos. Only the images you choose, through Apple’s picker. Weft never browses your library. Every photo is re-encoded on the way in, which strips its EXIF metadata — including the location where it was taken.

Face ID. Optional, to lock the app. The result is a yes or no from iOS; Weft never sees your biometrics.

Calendar. Optional, off by default. When enabled, Weft reads your upcoming events on the device to notice a medical appointment and offer, once, to have your summary ready the evening before. Event titles and locations are read and discarded in the same step. What is kept is an appointment’s start time and a one-way SHA-256 digest of its identity — unreadable, and stored only so the same appointment is never offered twice. Nothing about your calendar is sent anywhere.

Notifications

All notifications are scheduled locally by the app on your device; none are sent from a server, and Weft uses no push service. They deliberately carry no symptom, no note title, and no number, because a notification can appear on a lock screen in front of other people.

How long things are kept

Your transcript is the record and is kept until you delete it. The recording behind it is there so you can check what was heard, and is discarded a month after you have first read that note — never before, and never at all if the transcript failed or heard nothing. “Keep recordings” in Settings turns that off and keeps them all.

Deleting a note deletes its transcript, its recording, and its photos. Weft also records that the note was deleted, so that opening an older archive can never bring it back.

Taking your record with you

Settings can write your whole journal to a single encrypted archive file, wherever you choose to keep it. It is encrypted with a passphrase you set and that only you know: without it the file cannot be opened by us, by Apple, or by anyone else, and it cannot be recovered for you. This feature is free and always will be.

Children

Weft is not directed at children and does not knowingly collect information from anyone. Since the app collects nothing at all, there is no children’s data for us to hold.

Changes, and how to reach us

If this policy changes, the date at the top changes with it, and a material change will be described in the app’s release notes rather than quietly amended here.

Questions about privacy, or anything else: