Your meetings only ever reach your own server.

What the app sends, and to whom

During a meeting, the app sends to your organisation's server, and to it alone:

• The audio recording, streamed as the meeting goes.
• The title, planned time and attendee names, taken from the device calendar when you start a meeting from it. Names only: never the attendees' email addresses or ids.
• The notes, speaker hints and markers you add during the meeting.

The permissions it asks for, and why

• Microphone: to record the meeting, including while the screen is locked. Without it the app cannot do its job.
• Calendar: to read your upcoming meetings and prefill the title and attendees. You may refuse it; the app still works and you type the title yourself.

What stays on your phone

• Audio the server has not yet acknowledged receiving. It is deleted as soon as it does. This is what lets a meeting resume after a network drop without losing a stretch of it.
• A session token, kept in the iOS secure keychain and erased when you sign out.
• Your server's address, in the app's preferences.

What the app does not do

• No analytics, no usage statistics, no advertising tracker, no advertising identifier.
• No sharing with any third party. The only libraries it embeds are Apple's.
• No data sent to Oleron, not even on failure: there is no automatic crash report.

Who is responsible for what

Your organisation is the controller of the recorded meetings: they live on its server, under its control, under its own retention rules. Oleron is the software publisher and has access to none of that data. We can neither read it, nor retrieve it, nor delete it on your behalf.

The oleron.ai website, and how we count its visits

This page is about the iPhone app. The website you are reading right now is a different thing, and it measures its own traffic. Here is exactly what it records, with nothing left out:

• No cookie is set, and nothing is read from or written to your device. That is why you are not shown a consent banner: there is nothing to accept.
• What is recorded: the page viewed, the site you came from reduced to its domain name, how long the page stayed on screen, how far down it was read, your country, your browser family and the kind of device.
• Your IP address is used once, on our server, to derive a country and a fingerprint valid for the day. It is stored nowhere, in no table, and the day's fingerprint becomes impossible to recompute the next day.
• These measurements are processed on our own infrastructure in Europe, for our own use only. They are shared with no third party, cross-referenced with nothing, and used for no advertising.
• The legal basis is our legitimate interest in knowing whether this site is read. You may object by writing to the address below; once the day's fingerprint is destroyed, nobody, ourselves included, can link a measurement back to a person.

Changes

Any change to this page will be dated at the top. A change that widened what the app sends would be announced inside the app before taking effect.