Privacy Policy

1. Who is responsible

The controller responsible for data processing in connection with the Super NotePilot app and this website is:

BEK Service GmbH, Westendstr. 2A, 87439 Kempten (Allgäu), Germany. Managing Director: Iman Khabazi Koma. Email: info@bekservice.de. Phone: +49 831 93065616.

Full company details are available in our Imprint.

2. On-device processing — the core principle

Super NotePilot is an offline-first application. All speech recognition, summarisation, rewriting and the “Ask your notes” chat run inside the app on your own device using bundled, on-device AI models. We do not operate a transcription or AI server, and we never receive your content.

Concretely, the following stays exclusively on your device:

• Audio recorded from your microphone, used only to produce a transcript on-device.
• Transcripts, notes, meeting recordings and chat sessions.
• Your custom dictionary, snippets and per-app dictation profiles.
• Your enrolled voiceprint for speaker labelling — stored as a numeric embedding only; the enrolment audio itself is never kept.
• App settings and preferences.

3. Network connections the app makes

The app works offline once set up. It only contacts the network in two clearly defined situations, and never to transmit your content:

• Model downloads: the first time you enable them, the Whisper and Gemma model files (and optional speaker-diarisation models) are downloaded from Hugging Face and GitHub. These requests fetch model files only; no personal data, audio or text is sent. Your IP address is necessarily visible to those content-delivery networks to deliver the file, subject to their own privacy policies.
• Update check (desktop only): on macOS and Windows the app may check for a newer version at supernotepilot.com/api/version on launch. This is a plain request that contains no personal data, settings or content; our hosting provider may record standard server-log data such as the IP address for security and delivery. On iOS and Android no update check is performed.

4. Device permissions

The app requests only the permissions it needs for its features, and explains each one in context:

• Microphone — to capture audio while you are actively dictating or recording a meeting. Audio is processed on-device and never uploaded.
• Files / media (when you choose to import) — so you can pick an existing audio or video file to transcribe. The app does not read or upload your photo library.
• Internet — used only for the model downloads and the desktop update check described above.
• Input monitoring (macOS only) — to detect your dictation shortcut so you can talk-to-type into any app.

5. No analytics, no tracking, no account

Super NotePilot contains no analytics, telemetry, advertising or crash-reporting SDKs. We do not build user profiles, we do not use tracking cookies in the app, and you do not need an account to use it. We have no way to identify you or to see how you use the app.

6. This website

This website (supernotepilot.com) is a static marketing site. When you visit it, our hosting provider automatically processes standard server-log data — such as your IP address, the requested page, referrer, browser type and a timestamp — for the purpose of delivering the site reliably and protecting it against misuse (Art. 6(1)(f) GDPR, legitimate interest).

The website sets no tracking or advertising cookies and uses no third-party analytics. Outbound links (for example to the App Store, to Hugging Face or to Google’s model policies) lead to services with their own privacy policies.

7. Third-party AI models

Transcription uses OpenAI’s Whisper model and on-device note processing uses Google’s Gemma model, both running locally via open-source runtimes. Because inference happens on your device, your content is not sent to OpenAI or Google during use. Your use of the Gemma model is additionally subject to Google’s Gemma Terms of Use and the Generative AI Prohibited Use Policy.

If you choose to hand a note off to an external assistant such as ChatGPT or Claude, that is an explicit action you initiate, and the content you send is then governed by that provider’s terms and privacy policy.

8. Legal bases for processing

Where the GDPR applies, processing is based on: performance of a contract or pre-contractual steps for providing the app and website (Art. 6(1)(b)); and our legitimate interests in delivering, securing and improving our software, including the update check and server logs (Art. 6(1)(f)). Because your content never reaches us, we generally do not process personal data about the content you create.

9. Storage and deletion

Your recordings, transcripts, notes and other content remain on your device under your control for as long as you keep them. You can delete individual items at any time inside the app, and uninstalling the app removes its local data from your device. Server-log data held by our hosting provider is retained only as long as necessary for security and then deleted or anonymised.

10. International data transfers

We do not transfer your content anywhere — it stays on your device. The model-download and update-check requests described above may reach servers or content-delivery networks located outside the EU/EEA (for example Hugging Face or GitHub). These requests carry only technical data such as your IP address, governed by the respective providers’ safeguards.

11. Children

Super NotePilot is a general-purpose productivity tool and is not directed at children. We do not knowingly collect personal data from children.

12. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and objection, as well as the right to lodge a complaint with a supervisory authority. Because we hold virtually no personal data about you (your content never leaves your device), in most cases there is nothing for us to disclose, correct or delete on our side — but you can always reach us with a request.

To exercise any right, contact us at info@bekservice.de. The competent supervisory authority for our company is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA).

13. Changes to this policy

We may update this policy to reflect changes to the app or legal requirements. The current version is always available at this URL, with the revision date shown at the top.

14. Contact

Questions about privacy? Write to info@bekservice.de or to BEK Service GmbH, Westendstr. 2A, 87439 Kempten (Allgäu), Germany.