Privacy Policy

last updated october 12, 2026 · en français

Karl is built so that your data never reaches us. We do not collect, sell, or share any personal data. The apps have no servers of our own and no analytics or trackers of our own. On Android, two Google components send Google their own diagnostics, which never include your meetings (see below). This website is a little different, see below too.

Your recordings and transcripts

• Audio is processed only on your device. Recording, transcription, summaries, and answers all run on-device. On Mac and iPhone that is Apple's speech and language frameworks. On Android, transcripts come from the open-source Vosk engine, or from NVIDIA's Nemotron speech model if you turn on high accuracy. Summaries, titles, and answers come from Gemini Nano on phones that have it, otherwise from a Gemma or Qwen model you choose to download. All of them run on the phone.
• Meetings, transcripts, and (if you enable "Keep audio") recordings are stored locally on your Mac, iPhone, or Android phone.
• If you purchase Karl Pro on Mac or iPhone, your meetings, including their audio, sync between your devices through your own private iCloud database (Apple CloudKit). This data is encrypted in transit and at rest, belongs to your Apple Account, and is not accessible to us.
• The Android app has no sync. Everything stays on the phone, and Karl opts out of Android's cloud backup.
• Backups. Once a day Karl saves a copy of your meetings' text, without audio, on the device itself: on Mac and iPhone in Karl's Backups folder, on Android in Downloads › Karl Backups, where you and file manager apps can see it. It keeps the last seven, and you can turn it off in Settings. On Android those backups stay after you delete the app.

Microphone and system audio

Karl asks for microphone access to record your meetings, and on macOS for system-audio access so remote call participants end up in the transcript. Both are used only while you are actively recording and only for transcription on your device.

Calendar, Reminders and voice profiles

• Calendar (if you allow it): Karl reads the event you are in to name the meeting and list who attended, and with Pro to offer recording when an event starts. On Android it also looks at an event's location and notes for a video call link, to tell meetings from other events. Only the title and the names are saved, with the meeting. Karl never changes your calendar.
• Reminders (Mac and iPhone): Karl adds a meeting's action items to Apple Reminders only when you ask it to. After that they live in Reminders.
• Voice profiles (Pro): when you name a speaker, Karl can save that name with a numeric voiceprint so it recognizes the voice next time. A voiceprint is not audio and can't be played back. On Mac and iPhone naming a speaker saves one. On Android Karl asks first: only after you say yes does it keep voiceprints, for the people you name and for the voices in the meetings it analyzes. If you say no, a name only labels that one meeting.
• All of this is stored only on your devices and, with Pro, in your private iCloud.
• Deleting. When you delete a meeting with Pro on Mac or iPhone, it goes to the Trash for 30 days (or until you empty the Trash), then it is removed from all your devices and from iCloud. Without Pro it is deleted right away. On Android a deleted meeting stays in the Trash for 30 days. Deleting a meeting doesn't delete voice profiles. On Mac and iPhone Karl has no button yet to delete a single one. On Android you can forget one voice, delete a person, or forget all voices, and turning off "Recognize named voices" erases every voiceprint. Deleting the app removes everything on that device except the Android backups above; with Pro, also delete Karl's data in your iCloud storage settings.

Purchases

Payments are processed entirely by Apple through the App Store, or by Google through Google Play on Android. We never see your payment details. See Apple's and Google's privacy policies for how they handle purchase data.

What leaves your device

Nothing reaches us. Karl makes no network requests to us. On Mac and iPhone, the only network activity is Apple's: downloading speech models, iCloud sync (Pro), and App Store purchases.

On Android, Karl downloads the models it runs on the phone, each one once, over HTTPS:

• each language's speech model (30 to 85 MB) from alphacephei.com, the Vosk project's site;
• if you turn on high accuracy, a speech model of about 700 MB from Hugging Face;
• with Pro, two small models for telling voices apart (about 34 MB) from Hugging Face and GitHub;
• on phones without Gemini Nano, and only if you choose one, a Gemma or Qwen model (1 to 2.6 GB) from Hugging Face.

Those servers see your IP address like any download, but no audio or text is sent.

Google, on Android. On phones that have it, Gemini Nano is part of Android, and Google downloads and updates it. Karl reaches it through Google's ML Kit, which sends Google diagnostics about how the feature runs: device and app details, an identifier for this installation of Karl, timings, and error codes. Google Play Billing likewise sends Google its own usage diagnostics. Neither includes your audio, transcripts, summaries, or questions, and we receive none of it. See Google's privacy policy.

This website

karl.hrvojematosic.com is hosted on Cloudflare Pages. Like any web host, Cloudflare processes request data such as your IP address and browser user agent to serve the pages. The site uses Cloudflare Web Analytics, which counts visits without cookies and without fingerprinting. Nothing here is linked to the app. See Cloudflare's privacy policy for details.

Changes

If a future feature ever changes any of the above (for example an optional cloud summary service), this policy will be updated first and the feature will be opt-in.

Contact

Questions? Email [email protected].