← Sotto

Privacy Policy

Last updated: July 2, 2026

Sotto is built so that as little of your data as possible ever leaves your device. This page explains exactly what happens to your information.

Speech and audio

Sotto uses Apple's on-device Speech framework to transcribe conversation audio in real time. On supported devices, this transcription happens entirely on your device — your voice audio is never uploaded to Sotto's servers or to Apple for this purpose, because Sotto does not have servers that receive your audio at all.

What is sent to OpenAI

When you tap Generate, or when auto-respond triggers after a pause, Sotto sends the following text (not audio) to OpenAI's API to generate a suggested response:

• The live transcript text of the conversation so far
• Your profile (name, role, background notes) if you've filled it in
• The job description you've pasted for the session, if any

Before this happens, Sotto shows you exactly what is sent and requires you to explicitly agree before your first request — you can decline and use Sotto only for on-device transcription instead.

This is subject to OpenAI's own privacy policy, which commits to the same standard of confidentiality and security for API data as Sotto applies to data on your device: OpenAI does not use API inputs to train its models by default, and retains this data only as needed to provide the service. Sotto does not control how OpenAI retains or processes this data beyond generating the response.

What stays on your device

• Your OpenAI API key — stored in the iOS Keychain, never transmitted anywhere except directly to OpenAI's API as part of your own requests
• Your profile and job description — stored locally via iOS on-device storage
• Your transcript history — kept only in memory for the current session; tap Clear to erase it, and it is not persisted after you close the app

What Sotto does not do

• Sotto has no backend servers of its own — there is nothing for Sotto's developer to collect, store, or see
• Sotto does not sell or share your data with anyone other than OpenAI, and only the text described above, and only when you actively generate a response
• Sotto does not use your data for advertising

Your controls

Privacy Mode hides the transcript and response on-screen at any time. Clear wipes the current session's transcript. You can delete your API key, profile, and job description at any time from within the app, and uninstalling Sotto removes all locally stored data.

Contact

Questions about this policy: sang@vonellc.com