Sotto privacy policy
Sotto is made by Mark Marshall, an independent developer. This policy explains what Sotto does with information, in plain terms. Questions: support@sotto-ai.co.
The short version
- Audio never leaves your device. Speech is turned into text on your iPhone, iPad, or Mac, and the audio is discarded. It is never recorded, stored, or uploaded.
- Short pieces of the conversation's text are sent to Sotto's server to decide what to show and to write the cards. They are used for that request only and are not stored or logged by Sotto.
- Saved sessions stay on your device. They are never uploaded, synced, or included in device backups.
- No ads, no tracking, no selling or sharing data for advertising.
What Sotto handles, and where it goes
Audio
Sotto uses your device's microphone only while you have it listening. Apple's speech recognition runs on the device itself. Audio is held in memory only long enough to be transcribed, then discarded.
Conversation text
To choose and write cards, Sotto sends its server the words just said and up to about the last minute of conversation before them, along with your lens (the description of the room you chose) and content rating. Sotto's server passes this text to Google's Gemini API, which picks out topics and writes the cards; for deep dives, Gemini also searches the web with Google Search. Sotto does not store or log this text: its server keeps only technical records of each request (time taken, size, cost, and errors). Google processes the text under its terms for the paid Gemini API, which do not use it to improve Google's products; see Google's Gemini API terms.
Your account
When you create an account, Sotto keeps your email address and password with Supabase, the service that runs Sotto's accounts and database. Passwords are stored by Supabase in hashed form; Sotto never sees them in plain text. Sotto also records how much of your monthly allowance you have used (the cost of the requests your account made, and how many there were), to show how many hours are left and to keep use within the allowance. These records contain no conversation text.
Sotto sends account emails (to confirm your address, or to reset your password) through Resend, an email delivery service, which receives your email address and the message.
Saved sessions
Transcripts and the cards shown are saved on your device, if you allow it, so you can look back at them. They are not uploaded, synced to iCloud, or included in backups. In Settings you choose to keep them forever, for 30 days, or not at all, and you can delete any or all of them. Sotto shares a session only when you choose Share.
Settings and lenses
Your settings and lenses are stored on your device. The lens and rating in use are sent with each request so the cards fit the room.
Hosting
Sotto's server runs on Vercel. Like any web service, Vercel and Supabase see the network address your requests come from and keep standard operational logs for a limited time.
What Sotto does not do
- It does not record or upload audio.
- It does not identify who is speaking.
- It does not use your data for advertising, sell it, or share it with data brokers.
- It does not include third-party analytics or advertising code.
Your choices
- Stop listening at any time; Sotto's TV screen always shows when it is listening.
- Delete saved sessions on your device, or turn saving off, in Settings.
- Delete your account in Settings → Account → Delete Account. Your email address, sign-in, and usage records are deleted from Sotto's server immediately.
- Ask what Sotto holds about you, or to correct or delete it, by emailing support@sotto-ai.co.
Everyone in the room
Sotto hears everyone in the room. Please let people know it is listening; the "Sotto is listening" notice on the TV helps. Laws about recording conversations vary by place, and it is up to the person using Sotto to follow them.
Children
Sotto is not directed to children under 13, and does not knowingly collect information from them.
Changes
If this policy changes, the new version will be posted here with a new date. Significant changes will also be noted in the app.