Tapcorder Privacy Policy
Last updated: 2026-10-16 · Effective: 2026-10-16
Tapcorder records a conversation on your iPhone or Apple Watch and uses AI to turn it into text, key points, to-dos and a follow-up draft. The audio stays on your phone; we keep only the text. This policy explains what we collect, why, who processes it, how long we keep it, and how you control your data.
Operator: Wuxi Huaxiaoman Technology Co., Ltd.
Contact: ai@huaxiaoman.com.cn
1. What we collect
| Information | When | Why | How long |
|---|---|---|---|
| Your recordings (audio) | After you tap record, import a file, or your watch passes a recording to your phone | To turn it into text. Audio is uploaded only for that: our server hands it to Alibaba Cloud Model Studio for recognition and deletes it as soon as that is done | On our server: deleted once transcribed; an unfinished upload at most 6 hours. On your phone: up to you |
| Transcripts and what is made of them: the full text with times and speakers, titles, categories, key points, to-dos, follow-up drafts, the files that group recordings of one matter, the names you give speakers, and each recording's start time, time zone, length and source (phone or watch) | When a recording is done, and when you edit it | For you to read, search, be reminded of to-dos and ask about, and to move to a new phone | Until you delete the recording or all your data |
| Your questions (Ask) | When you ask | Sent to the model with the text of the recordings concerned, to answer | Not kept; dropped once answered |
| Account: a random ID made on your phone (we keep only a hash of it); with Sign in with Apple, the anonymous ID Apple gives us (also hashed) and the token needed to revoke it later; with WeChat sign-in, the WeChat unionid (kept hashed) and your WeChat nickname (shown in Settings so you can see which account you signed in with; deleted with your account). No name, no email | The first time you open the app; when you sign in with Apple or WeChat | To know it is you, keep your recordings under your account and move them to a new phone | Until you delete all your data |
| The device token for notifications, and the app's language | When you allow notifications | To tell you, in your language, when a recording is ready or a to-do is due | Until you delete all your data, or the phone stops taking notifications |
| Usage: how much you had transcribed each month; the amount and cost of each model call (none of the content) | Each time something is transcribed or asked | To count the monthly allowance, cap what is spent each day, and find faults | Monthly time until you delete all your data; cost records lose your account when you do, and no longer point to you |
| Usage statistics: how many times a day each feature was used or failed — totals only, linked to no one | While you use the app | To see what works and what fails | Only the daily totals are kept |
| Access logs (IP address, time, phone model, system and app version) | Each time the app connects to our servers | Security and fixing problems | Up to 180 days, as the law requires |
| Feedback (what you write, and the piece of content you point out) | When you send it | To handle your feedback | 180 days after they are handled |
We do not collect your phone number, email, name, contacts, location, photos or advertising ID.
2. Sensitive things you share
Your recordings, conversations and notes may include sensitive details — your health, finances, relationships or whereabouts — and information about other people. Some laws call this sensitive personal data. We process it only to give you the feature you are using; without it the feature can't work. It goes only to the service providers listed below; whether and how long we keep it is under "Where it is stored and for how long". We don't use it to profile you, and we don't use it to train models. Before you first use such a feature, the app tells you and asks for your consent; if you say no, that feature won't work, but everything else will.
3. Permissions
| Permission | What for | If you say no |
|---|---|---|
| Microphone | To record | You cannot record on the phone; importing audio files and recording on the watch still work |
| Notifications | To tell you when a recording is ready or a to-do is due | No reminders; everything is still there when you open the app |
| Reminders | Only when you tap “Add to Reminders”: writes the to-dos you picked; never reads the reminders you already have | You cannot add to-dos to Reminders; everything else works |
We only ask when you first use the feature that needs it, and you can turn it off at any time in your phone's settings. The app does not start by itself or get woken up by other apps to run in the background; while recording, it keeps recording with the screen locked or in another app, until you tap stop or it reaches 4 hours.
4. Other people in your recordings
A conversation you record has other people's voices and words in it, and what is made of it may name them ("the landlord will return the deposit by Friday"). We treat them like your own content: processed only to make your notes, shown only to you, deleted when you delete. Please tell people before you record them.
5. Apple Watch, complications and widgets
A recording made on the watch stays on the watch until your phone is near, then goes to the phone, which uploads it; the watch never talks to our servers. What complications and widgets show (recording status, to-dos) stays on your devices.
6. Legal grounds (EEA and UK)
- To provide the service you asked for (performance of a contract): your account, your content, the AI features.
- Your consent: sending your recordings or conversations to AI providers, notifications, microphone and similar permissions. You can withdraw consent at any time.
- Our legitimate interests: security, preventing abuse, fixing problems, simple usage statistics.
- Legal obligations: keeping records of violations and access logs, and answering lawful requests.
7. Who processes it
| Provider | What they process | Models |
|---|---|---|
| Alibaba Cloud Model Studio (Alibaba Cloud Computing Co., Ltd.) | Turns recordings into text and tells speakers apart; makes the titles, key points, to-dos and follow-up drafts; answers your questions. Audio in its temporary storage is deleted automatically within 48 hours | Qwen-Audio-3.1 (transcription; fun-asr when it fails), DeepSeek-V4.1-Flash (summaries; Qwen3.7-Plus when it fails) |
| Alibaba Cloud (servers) | Our servers run on Alibaba Cloud and store your transcripts and what is made of them | — |
- These providers act on our behalf. They may only process your content on our instructions, to complete your request, and not for anything else. We require them to protect it at least as well as this policy does.
- We send only what is needed for the task. The first time you use a feature that sends your content to a provider, the app tells you and sends nothing until you agree.
- We do not use your content to train models.
- If you sign in with Apple, subscribe in the app, or receive notifications, Apple handles these under its own privacy policy (for some apps, notifications pass through Expo's push service on the way to Apple). The text of a notification passes through their servers; we don't give them your recordings or conversations. App updates are downloaded from Expo's servers, which see your system and app version but none of your content.
- We don't use third-party analytics or advertising SDKs that collect your personal data, and we don't track you across apps or websites.
- Apart from the above and where the law requires it, we don't give your information to anyone. We don't sell or "share" it (as California law defines these words), and we don't use it for advertising.
- The models we use and their registration numbers are listed on the "Registration info" page.
8. Where it is stored and for how long
- Your data is stored and processed in mainland China, on our servers and those of our AI providers there. If you live elsewhere — for example in the EEA, the UK or the US — using the app means your data is transferred to China, whose data protection laws differ from yours. We protect it as this policy says wherever it is, and where the law requires safeguards for this transfer (such as the EU Standard Contractual Clauses), we will put them in place. Apple's sign-in, purchases and notifications, and app update downloads from Expo, are handled as described above.
- Audio: on your phone (and on your watch until it reaches the phone), for as long as you like; in Settings › Storage and privacy you can delete old recordings' audio and keep the text. Our server deletes it once transcribed; the copy handed to Alibaba Cloud Model Studio is deleted there within 48 hours.
- Text: until you delete it. A deleted recording goes to Recently deleted first and is removed from our servers after 30 days or when you empty it; Delete all my data removes everything at once.
- When you delete something, it is removed from our servers; copies in backups are deleted as backups rotate, within 30 days. Records the law requires us to keep (violation records, access logs) are deleted automatically when the retention period ends, and never later than 180 days.
9. Your rights
- See, copy and export your data: in each recording's Export (the audio file, the timestamped transcript, Markdown), or Settings › Storage and privacy › Export all my data. If the app can't do it, email us and we will send you a copy in a common format within 15 business days.
- Correct or complete it: you can edit it in each recording (title, category, speakers' names, to-dos); if you can't, email us and we will fix it after checking.
- Delete your account: in Settings › Delete all my data. Your content, account and settings are removed from our servers and can't be recovered. Two kinds of records are kept after deletion because the law requires it, and deleted automatically within 180 days: violation records (content flagged through feedback or stopped by a safety check) and access logs kept for security.
- Withdraw consent: at any time. Turn off permissions such as the microphone or notifications in your phone's settings; withdraw everything in Settings › Delete all my data. Withdrawing consent doesn't affect anything we did before you withdrew it.
- In the EEA and the UK you also have the right to restrict or object to processing based on our legitimate interests, and to data portability. You can complain to your local data protection authority.
- In California you have the right to know, delete and correct your personal information, and to opt out of its sale or sharing — we don't sell or share it. We won't treat you differently for using these rights.
You can also make any of these requests by email to ai@huaxiaoman.com.cn. Once we have confirmed it's you, we handle it and reply within 15 business days (sooner where the law requires — within one month at the latest in the EEA and the UK). If we can't do something, we tell you why. If you are unhappy with how we handle your information, contact us first; you can also complain to the data protection authority where you live, or go to court. In mainland China, you can also complain to the cyberspace or industry authorities, or sue in a people's court.
10. Automated processing and memory
- We don't recommend products or ads based on your information, and we don't profile you.
- If an automated decision significantly affects you (for example, a safety check limiting your use), you can ask us to explain it and email us to have a person review it.
11. How we protect your data
- Data is encrypted in transit.
- Each person's data is kept separate by account; nobody else can see it without your permission.
- Only the operator can log in to the servers for maintenance, and looks only at the records needed to fix a problem.
If there is a data breach that may affect you, we will tell you in the app or by email what happened, what it may mean for you and what you can do, and report it as the law requires.
12. Children
You must be at least 13 to use Tapcorder, or 16 if you are in the EEA or the UK (older if the law where you live says so). If you are under 18, please use it with a parent's or guardian's permission. We don't knowingly collect information from children under 13 (under 16 in the EEA and the UK). If you are a parent and think your child is using Tapcorder, or that we have their information, email ai@huaxiaoman.com.cn and we will delete it within 15 business days after we confirm it.
13. Feedback
- In the app: write to us in Settings › Feedback; about one recording's content, tap ··· on that recording and choose Feedback, say what is wrong or pick what kind of problem it is, and send.
- By email: ai@huaxiaoman.com.cn — say what the content is and where you saw it.
- We handle feedback within 3 business days and tell you the result: for feedback from the app, under "Settings › My feedback"; for emails, by reply. We keep who sent it confidential.
- If we confirm the content breaks the law or our rules, we remove it and, depending on the case, warn, limit, suspend or close the account that posted or generated it. We keep a record and report to the authorities when required.
- If you are in mainland China, you can also tell the Cyberspace Administration's illegal and harmful information reporting center: www.12377.cn, tel. 12377.
14. Changes to this policy
- When this policy changes, we update the date above. If what we collect or why changes significantly, we will ask you to confirm again.
- If your information has to move to a new operator (for example from an individual developer to a company), we will tell you who in advance, and they must keep to this policy.