crmptRequest early access

Trust

Last reviewed 16 September 2026

crmpt cannot turn your voice into a letter on its own. This page names every service your data passes through — what each one receives, where it runs, and what its own terms let it do with what it sees. It is the list our Privacy Policy refers to, and we update it before a provider changes.

How a recording moves

  1. 01

    You record on your phone

    The audio stays on your device until it has uploaded, then the local copy is deleted.

  2. 02

    Our API turns it into text

    It sends the audio to be transcribed, encrypts the text with a key only the API holds, and discards the audio.

  3. 03

    The text is stored in Sydney

    Encrypted, in a database in Australia. The database provider cannot read it.

  4. 04

    A letter comes back

    When it is time, the API decrypts the relevant entries, sends the text to the language model, and stores the Reflection it returns — encrypted again.

An Aloud call takes a different path: the audio is end-to-end encrypted between your phone and our voice agent, and the agent never sees your journal. Details under LiveKit below.

AI providers

The three services that hear or read your words in order to do something with them.

Groq

United States

Turns a Capture recording into text.

Receives
The audio of one recording. No name, email address or account identifier.
Their terms
Groq's Services Agreement prohibits training on inputs or outputs, and Groq states that by default it does not retain data from inference requests. Your data in GroqCloudGroq Services Agreement

Anthropic, via OpenRouter

United States

Writes your Reflections, Patterns and the Sunday letter.

Receives
The text of the entries a Reflection is about, and an Aloud transcript where one has been kept. No name, email address, audio or account identifier. Requests go through OpenRouter, pinned so that only Anthropic's own API can serve them, with OpenRouter's data collection denied and prompt logging off.
Their terms
Anthropic states that it does not train on API inputs or outputs and deletes them within 30 days. OpenRouter states that it stores nothing unless account logging is on; we keep it off. Anthropic: how long API data is storedOpenRouter privacy policy

LiveKit

United States

Carries an Aloud call and runs the models behind it.

Receives
Your speech during an Aloud call, the agent's replies, and your display name so Aloud can greet you. The audio is end-to-end encrypted between your phone and our agent, so LiveKit's media servers relay it without hearing it. The agent then uses LiveKit Inference for speech-to-text (Deepgram), the language model (Google's Gemma) and text-to-speech (Cartesia or Inworld). Aloud never receives your journal entries.
Their terms
LiveKit states that LiveKit Inference is zero-data-retention on every plan: neither LiveKit nor the model providers retain or train on what is sent. LiveKit Inference: zero data retentionLiveKit privacy policy

Everything else it runs on

None of these is ever given the text of an entry in the clear.

  • NeonAustraliaPrivacy policy

    The database in Sydney that holds your account and your entries — the text encrypted with a key Neon does not have.

  • CloudflareGlobal edgePrivacy policy

    Runs the API your phone talks to, and is the only place the encryption key lives. Also stores profile photos.

  • ExpoUnited StatesPrivacy policy

    Builds the app and delivers push notifications. A notification is a short line and a link, never an entry.

  • ResendUnited StatesPrivacy policy

    Sends sign-in codes and the welcome email. Nothing you record is ever emailed.

  • InngestUnited StatesPrivacy policy

    Schedules background work like the Sunday letter. Its events carry your account identifier and timing, never your content.

  • SentryEuropean UnionPrivacy policy

    Crash and error reports, scrubbed before they leave the app. Kept 90 days.

  • VercelUnited StatesPrivacy policy

    Hosts this website and counts its page views without cookies. It never sees the app.

What we never do

  • Sell your personal information, or use it for advertising.
  • Use your recordings, transcripts, Reflections or Aloud conversations to train a model — ours or anyone else's.
  • Keep your audio after it has been transcribed.
  • Give Aloud access to your journal entries.
  • Add a provider to this list without updating it, and the Privacy Policy, first.

Report a concern

If something on this page looks wrong, if you have found a security problem, or if Aloud has said something that seems harmful or out of place, email hello@crmptco.com. We read every report.