Privacy Policy

Effective date: November 13, 2026

This policy explains what TinyCloud, Inc. ("TinyCloud", "we", "us") collects when you use TinyCloud Home and our related services, why, who else handles it, how long we keep it, and how you delete it.

It covers:

TinyCloud Home: the iOS and Android apps, the web app at home.tinycloud.xyz and tinycloud.chat, and the desktop app;
OpenKey (openkey.so), the sign-in service TinyCloud Home uses;
TinyCloud storage: your TinyCloud space;
account.tinycloud.xyz, where you manage storage and paid plans;
this website, tinycloud.xyz.

The short version

Your notes, recordings, transcripts and chats are saved to your TinyCloud space. Only you, and the apps and services you authorize (including TinyCloud Home's own servers), can read or change it.
We use your data to run the features you ask for. We don't sell it, we don't use it for advertising, and the apps contain no analytics or advertising SDKs.
When we need another company to do part of the work (an AI model, a transcription engine, web search), we send only what that request needs. Those companies are listed below.
Deleting your account deletes your data.
TinyCloud Home is for people 18 and older.

1. Your account

What we collect

Your email address, and your name and profile picture if you give them.
If you sign in with Apple or Google: the account ID that Apple or Google gives us, the email address they share (with Apple, that can be a private relay address), and the sign-in tokens they issue, which we store encrypted.
Your passkeys. We store only the public key, never your fingerprint or face.
Sign-in sessions, including the device's IP address and browser or app version, and a record of which apps you signed in to on which days, so we can keep you signed in and spot misuse.
An account key that OpenKey creates for you when you sign up. Its public address identifies your TinyCloud space. The private key is stored encrypted with a key that only OpenKey's secure enclave can use (see "Security").

Why: to create your account, sign you in, protect it, and connect it to your TinyCloud space.

Who handles it: OpenKey, run by TinyCloud. Apple or Google, if you choose to sign in with them. Resend, which sends our sign-in and security emails.

On your device: the app keeps your OpenKey sign-in session in the iOS Keychain or in Android's encrypted storage, which is excluded from cloud backups. Other app sign-in tokens are kept in the app's storage and can be included in your phone's backups.

2. Your content

Your content means what you create or bring into TinyCloud Home: voice notes and other recordings, uploaded audio files, transcripts, meeting notes and summaries, chats, Canvas documents, the memory document the assistant keeps about you, and settings.

Where it is stored: your content is saved to your TinyCloud space on the TinyCloud node (tee.node.tinycloud.xyz). The node runs in a confidential virtual machine, and only requests signed by your account, or by apps and services you have authorized (including TinyCloud Home's own servers), can read or change your space. It is encrypted in transit, but it is not end-to-end encrypted, so the node and the services you authorize can read your content in order to serve it to you.

On your device: the apps keep working copies on your phone, computer or browser. These include recordings that haven't finished uploading, a cache for playback, and an optional offline copy that you can turn on and delete in Settings. A recording's audio is removed from the phone only after a verified copy is in your space. Signing out clears the account's cached data from the app. Your phone's own backups (iCloud or Google) can include the app's local files; those backups are handled by Apple or Google.

Why: to store your content and show it back to you on every device you use.

3. Recordings and transcription

TinyCloud Home records only when you start a recording, and your phone or computer shows its microphone indicator while it records. In the phone and web apps, a recording's audio is uploaded to your TinyCloud space unless you choose to keep it on the device. In the desktop app, audio stays on your Mac unless you turn on "Upload audio to TinyCloud" or choose Private or Powerful transcription. The desktop app can also record what your Mac plays, including other people on a call; tell them you are recording.

You choose how a recording becomes text:

On this device. Your phone or Mac transcribes the audio itself, and no audio leaves the device to be transcribed. To set this up, the app may download speech models from Apple, Hugging Face, GitHub or a model mirror. Those downloads include no information about you.
Private transcription. Your device uploads the audio directly to TinyCloud Private Transcription, which runs in a confidential virtual machine on Phala Cloud. That service sends short speech segments to Tinfoil, which converts them to text inside hardware enclaves. For recordings and uploads, Private Transcription receives a pseudonymous account identifier rather than your account address. It deletes the audio when transcription finishes, and deletes the transcript once the app has saved it to your space (24 hours later at most).
Powerful transcription (AssemblyAI). Your audio goes through our server to AssemblyAI, which transcribes it under TinyCloud's account. AssemblyAI is not a confidential-computing service. AssemblyAI doesn't use your audio or transcripts to train its models or for benchmarking. Once the transcript is saved to your space, we tell AssemblyAI to delete the audio and the transcript. Otherwise AssemblyAI deletes the audio within 48 hours and starts deleting the transcript 7 days after transcription. Recordings transcribed before November 13, 2026 may have been used to improve its models and may be kept for up to 30 days.

Meeting notetaker. If you send the TinyCloud notetaker to a meeting, or let calendar autojoin send it for you, a bot named "TinyCloud Private Notetaker" joins the call. It records the meeting's audio and makes a transcript labelled with participants' display names. The notetaker runs on TinyCloud Private Transcription, which receives your account address so that it can return the transcript to you. When the meeting ends, the transcript is saved to your space. Private Transcription also keeps the meeting's recording and transcript, so that a transcript can be recovered if saving fails, until you delete your account. Other people's voices and names are in these recordings, so tell the people in your meeting that you are using a notetaker, and get their consent where the law requires it.

4. The AI assistant

When you chat with the assistant or ask for a meeting summary, TinyCloud Home sends the following to an AI model:

your message and the conversation so far (older turns may be condensed by the model);
if you've given the assistant access, your memory document, relevant excerpts of your meeting transcripts, and the Canvas documents you've pinned.

Who handles it: RedPill, which runs open-weight AI models inside GPU enclaves.

When the assistant can use tools, such as web search or looking up your meetings (the default), your chat runs on our agent service. That service runs in a confidential virtual machine and calls RedPill's standard API; those replies are not individually verified.
When tools are off, and for meeting summaries, requests go through RedPill's confidential-computing gateway (tee.redpill.ai). For each reply, our server checks RedPill's signed proof that the reply came from an enclave, and tells you if the check fails. Our app server passes your messages to the model without keeping them.

Your conversations are saved in your TinyCloud space.

Memory. After a conversation, the assistant may update a memory document about you (your preferences and ongoing projects, for example). It is stored in your space, and you can read or delete it.

Meeting summaries. By default, when meetings come in, the app sends the transcript to a RedPill model to write a summary. You can turn this off in Settings.

We don't use your content to train AI models.

5. Web search

When the assistant decides to search the web, we send only the search text the assistant writes to Tavily. Tavily receives no name, account ID, or conversation.

6. Connected services

Connectors are optional. Each one reads only what is described below, and you can disconnect it at any time. Disconnecting deletes the credentials we hold for it. For Google, it also asks Google to revoke our access, and the app tells you if that fails. A Fireflies API key stays valid until you revoke it in Fireflies.

Google Meet. Reads your Meet conference records, participants and transcripts. It also reads the names and dates of your Google Docs to find "Notes by Gemini", and reads the content of those notes. It can turn on Meet's own transcription for a meeting if you ask it to. This runs in your app. Your Google refresh token is kept, encrypted, in your TinyCloud space, and the results are saved to your space.
Google Calendar (calendar autojoin). Reads the events on your primary calendar for the next 24 hours (titles, times, Meet links and guest lists), and sends the notetaker only to Google Meet events you organize or have accepted. Our server keeps a Google refresh token, encrypted with keys held inside our confidential virtual machine, your Google email address, and the title, Meet link and time of those events. The event details are deleted 30 days after the meeting.
Fireflies. Imports your Fireflies meeting titles, dates, attendees, transcripts and summaries, using an API key you provide. The key is stored, encrypted, in your TinyCloud space. If you turn on instant updates, Fireflies notifies our server when a meeting is ready. The server queues only the meeting's ID until your app collects it, for 14 days at most.

Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Nothing you create is shared unless you share it. If you create a share link to a chat, anyone with the link can read a snapshot of that chat until the link expires (after 7 days, unless you choose otherwise) or until you stop sharing it, which deletes the snapshot. Exporting a note through your phone's share sheet sends it wherever you choose.

8. Payments

If you buy a plan or more storage, payment happens on Stripe's checkout page. Stripe collects your card details, email address and billing address; we never see your full card number. We keep your Stripe customer ID, your plan, its renewal date and your storage limits, linked to your account address. To enforce plan limits, we also count your usage: AI credits, the model used and token counts. Our billing service keeps only credit totals for the current and previous billing period.

Who handles it: Stripe, and Cloudflare, which hosts our billing service.

9. Diagnostics and logs

The apps contain no analytics, advertising or crash-reporting SDKs, and we don't track you across other apps or websites.

Our server records basic operational events for each request: the type of request, whether it succeeded, how long it took, and how many credits it used. To tell accounts apart, these records use a one-way code instead of your account address. They never include your messages, recordings, transcripts, email address or IP address. We send these records to Better Stack so that we can monitor reliability and investigate problems, and keep them only as long as that requires.

To check that our servers and AI models really run in enclaves, the app fetches public verification data from RedPill, Phala, Automata, Sigstore and Tinfoil. These requests carry no personal information, but those services see your IP address.

10. Our website

If you join the waiting list or sign up for updates on tinycloud.xyz, we store your email address, the list you chose, your platform and the page you signed up from, so that we can send you an invite or updates. Cloudflare Turnstile checks that a person, not a script, filled in the form, and in doing so it sees your IP address. To be removed from a list, email us.

11. Who processes your data

We use these companies to run TinyCloud Home. Each one receives only what its part of the service needs.

Provider	What it does	What it receives
Phala Cloud	Hosts our app server, agent service, the TinyCloud node, OpenKey and Private Transcription in confidential virtual machines	Everything those services process (Sections 1–6), inside hardware-isolated machines
Database and object-storage providers	Store the data behind TinyCloud spaces and OpenKey accounts	Your account data and content (Sections 1 and 2)
Cloudflare	Hosts the web app, the website and the billing service; provides DNS and website bot protection	Website and web-app traffic, billing records, sign-up emails
RedPill	Runs the AI models in GPU enclaves	Chat messages and the context you've allowed (Section 4)
Tinfoil	Converts speech to text in hardware enclaves for Private Transcription	Short audio segments
AssemblyAI	Powerful transcription	Audio you send to Powerful transcription
Tavily	Web search	Search text only
Stripe	Payments	Payment details you enter at checkout, and your account address
Better Stack	Server monitoring	Operational records without content (Section 9)
Resend	Sign-in and security email	Your email address and the message
Apple, Google	Sign in with Apple or Google; the app stores; on-device speech models	Sign-in data you share with them; standard app-store data
RedPill, Phala, Automata, Sigstore, Tinfoil	Public enclave verification data (Section 9)	Your IP address only
Google, Fireflies	Connectors you turn on	Requests made with your authorization (Section 6)

We also disclose information when the law requires it, to protect people's safety, or as part of a merger or acquisition, in which case this policy continues to apply to your data.

We do not sell or share your personal information for money or for cross-context behavioral advertising.

12. How long we keep it

Account and content: for as long as you keep your account, or until you delete them.
Copies held by processors: Private Transcription deletes the audio of your recordings and uploads as soon as transcription finishes, and the transcript within 24 hours. It keeps notetaker recordings and transcripts until you delete your account. We ask AssemblyAI to delete its copy as soon as the transcript is saved; AssemblyAI deletes any audio left within 48 hours and starts deleting transcripts 7 days after transcription (30 days for recordings transcribed before November 13, 2026). Calendar autojoin event details are deleted 30 days after the meeting. Fireflies notifications are deleted within 14 days.
Sign-in records: a sign-in session ends after 7 days without use, and app sign-in tokens last at most 30 days. OpenKey keeps your session records, including IP address, until you delete your account, and keeps its record of which apps you signed in to on which days for 35 days.
Payment records: Stripe and we keep them for as long as tax and accounting law requires.

13. Deleting your data and your account

Deleting your account deletes your data. This covers your OpenKey account and account key, everything in your TinyCloud space, and the records our servers hold about you: connector credentials and data, calendar autojoin records and notetaker recordings. Your account is deleted at once, and every other copy is erased within 30 days. We keep only what the law requires us to keep, such as payment records.

To delete your account:

in the app: Settings → Account → Delete OpenKey account;
on the web: sign in at openkey.so and open Settings → Delete account;
by email: write to [email protected] from your account's email address.

You can also delete individual recordings, notes, chats and the assistant's memory in the app at any time, and you can disconnect any connector. Deleting your account doesn't remove files from your devices; delete the app to remove those.

14. Your rights

Wherever you live, you can ask us to:

tell you what personal data we hold about you and give you a copy;
correct it;
delete it;
export it in a portable format;
stop or restrict a particular use of it.

Email [email protected]. We will reply within 30 days, may need to confirm the request comes from you, and won't treat you differently for asking.

California residents have these rights under the CCPA, and an authorized agent can make a request for you. We don't sell or share personal information, and we use sensitive personal information (such as your account credentials and the content of your recordings) only to provide the service.

People in the EEA, UK and Switzerland: TinyCloud, Inc. is the controller of your personal data. We rely on these legal grounds:

performing our contract with you, to provide the features you use, including recording and transcribing what you choose;
your consent, for the connectors you turn on, which you can withdraw by disconnecting them;
our legitimate interests, to secure the service and keep it working, and to process the voices and names of other people in recordings you make;
legal obligation, for payment records.

You may lodge a complaint with your local data protection authority. We process data in the United States and in the other countries where our providers operate.

15. Security

Our app server, agent service, the TinyCloud node, OpenKey and Private Transcription run in confidential virtual machines (trusted execution environments, or TEEs). Their hardware keeps memory isolated even from the cloud host, and their code can be verified by attestation. RedPill runs its AI models in GPU enclaves, and Tinfoil runs speech-to-text in hardware enclaves. The other providers in Section 11 do not use confidential computing.
Data is encrypted in transit (HTTPS/TLS).
Your account's private key is encrypted with a key that only OpenKey's enclave can use. Only requests signed by your account, or by apps you've authorized, can read or change your space.
Connector credentials, and any meeting content our servers hold, are encrypted with keys that stay inside the enclave.
The apps can lock with Face ID, Touch ID or your device passcode.

No system is perfectly secure. If a breach affects your data, we will tell you as the law requires.

16. Children

TinyCloud Home is for people 18 and older. We don't knowingly collect personal data from anyone under 18. If you believe a minor has given us personal data, contact us and we'll delete it.

17. Changes

If we make a material change to this policy, we will post the new version here with a new effective date and tell you in the app or by email before the change applies.

18. Contact

TinyCloud, Inc., 1515 Plumas St, Reno, NV 89509, United States

Email: [email protected]