Privacy Policy
Simena Digital LLC · privacy@bardicnotes.app
Last updated: October 19, 2026
Bardic is a session-recording, transcription, and note-keeping app made by Simena Digital LLC ("we," "us," or "our"), a Wyoming limited liability company based in the United States. This policy explains what data we collect, why, and how we protect it.
1. Information You Provide
When you use Bardic, you may provide the following information:
- Account information: name and email address (via Apple Sign-In), used only to tie your subscription to your account so it can be restored on a new device.
- Your debrief: the audio you record after a session, or the text you type instead. See §3 for exactly where it goes and how long we keep it.
- Your campaign: the transcript of each debrief, the recaps Bardic writes from it, and the campaign index it builds — the people, places and threads that appear in your sessions, together with any corrections you make to them. These are stored on our servers so they are there when you sign in on another device.
- App preferences: your language, theme, and notification settings.
2. Information Collected Automatically
When you access Bardic, we automatically receive:
- IP address and user agent (standard HTTP request data)
- Session tokens for authentication
We use one operational SDK, which cannot read your recordings, transcripts, or notes:
- Sentry (crash reporting): if the app crashes or errors, a technical report (device model, OS version, app version, stack trace) is sent to Sentry so we can fix the bug. Reports are scrubbed before sending: no email addresses, no IP addresses, no session content.
We do not run ads in the app and we do not track you across other apps or websites.
3. How a debrief is processed
Current versions transcribe recordings on your phone using Apple SpeechAnalyzer/SpeechTranscriber. Audio and the original timestamped transcript stay on your phone. There is no cloud audio fallback.
- You record a debrief or type notes. Local transcription needs a supported device and a downloaded language model.
- When you choose to process a draft and give permission, transcript snippets and campaign vocabulary are sent over HTTPS through our server to OpenAI (GPT-6 Luna) for conservative corrections. These requests use store:false; we do not log correction prompts or responses.
- Transcript text is stored on our servers and sent to OpenAI (GPT-6 Luna) with campaign context for player and GM recaps and your campaign index. These requests use store:false. The results are stored on our servers for access across devices.
Typed notes go to OpenAI for recaps and indexing without audio transcription. Corrections and recap/index processing require an internet connection. Apple transcription can run locally after its language model is available.
Older app versions: audio is uploaded to our servers and sent to Deepgram for transcription. Our copy is deleted when transcription finishes, whether it succeeds or fails. This legacy path remains available for older clients; current versions send text only.
4. How We Use Your Information
We use your information to:
- Provide and maintain Bardic's recording, transcription, recap and campaign-index features
- Authenticate your account and keep it secure
- Restore your subscription on a new device via your Apple ID
- Deliver scheduled local notifications (a daily reminder and a weekly recap)
- Enforce subscription entitlements and prevent subscription and introductory-offer abuse
5. Third-Party Services
| Service | Purpose | Data shared |
|---|---|---|
| Apple | Authentication (Sign in with Apple) | Name, email |
| RevenueCat | Subscription management and entitlement enforcement | Anonymous user ID, purchase history, and — on iOS — the Apple Search Ads attribution token (Apple's own privacy-preserving attribution mechanism; no advertising identifier, no App Tracking Transparency prompt) |
| Sentry | Crash and error reporting | Technical crash reports (device model, OS version, stack trace) — scrubbed of email, IP address, and all session content |
| OpenAI | Transcript corrections, optional automatic titles, player and GM recaps and campaign index extraction (GPT-6 Luna) | Limited transcript excerpts for titles; transcript snippets and campaign names for corrections; full debrief transcript and campaign index context for recaps and extraction, through our server. No audio. Requests use store:false. |
| Deepgram | Older app versions only — speech-to-text: turning your recorded debrief into a transcript | The debrief audio itself. Sent for transcription and not retained by us afterwards (see §3). Not sent at all for a typed debrief. |
All third-party service providers listed above are contractually required to protect your data to a standard equivalent to or greater than described in this policy.
We do not sell your personal data, and we do not use your sessions to train anyone's model.
Current versions keep audio on your phone. Older versions upload it for Deepgram transcription as described in §3.
Before your first debrief is sent, Bardic asks for your permission in the app and records your answer and consent version on our servers. Existing users must agree again before full debrief text is sent to OpenAI for recaps and indexing. You can withdraw it at any time in Settings → AI & Privacy; while it is withdrawn, no debrief is sent.
6. Data Storage and Security
Your account record — name, email, and subscription status — is stored on secure servers. Communication between the app and our servers uses HTTPS (TLS 1.2+), and authentication uses timing-safe token comparison to prevent timing attacks.
On your device, Bardic stores data using:
- AsyncStorage: preferences, your onboarding profile, and app settings
- expo-sqlite: your recordings library — session metadata, transcripts, and notes
- expo-secure-store: authentication tokens (encrypted by the OS keychain)
7. Data Retention and Deletion
Your account record is retained as long as your account is active. You can delete your account at any time from Settings within the app. Deletion is soft-applied immediately — your active session is ended and your Apple refresh token is revoked — and finalized after 30 days. During this 30-day grace window you may restore the account by signing in again with the same Apple ID. After 30 days, your account record is permanently and irreversibly removed from our servers.
Deleting your account removes your transcripts, recaps and campaign index from our servers. From app version 1.1, the app also erases what it keeps on the phone you delete from: your recordings, transcripts and table photos. With older versions, delete the app to remove them. Current versions keep audio on your phone; we do not receive a server copy. For older versions, uploaded audio is deleted after transcription finishes, whether it succeeds or fails (see §3).
Data held by third-party services (e.g. RevenueCat purchase records, Apple account data) is subject to those services' own retention policies.
8. International Data Transfers
Bardic is operated from the United States. If you are located outside the United States, the data we hold — your account information, your debrief transcripts, your recaps and your campaign index (see §1) — is processed in the United States, protected by Standard Contractual Clauses (SCCs) or equivalent safeguards where required by GDPR and UK GDPR. In older app versions, debrief audio is also processed abroad for transcription and then deleted (see §3).
9. Legal Basis for Processing (GDPR / UK GDPR)
If you are in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases:
- Contract performance: to provide the Bardic service you signed up for, including account management and subscription entitlement.
- Consent: for optional features that require your explicit opt-in, including microphone access for recording and local notifications.
- Legitimate interest: for service security and fraud prevention (e.g., preventing subscription and introductory-offer abuse).
You may withdraw consent for consent-based processing at any time by disabling the relevant feature or contacting us at privacy@bardicnotes.app.
10. Your Rights Under GDPR / UK GDPR
If you are in the European Economic Area or the United Kingdom, you have the following rights regarding your personal data:
- Access: request a copy of the data we hold about you
- Rectification: correct inaccurate personal data
- Erasure: delete your account and all associated data
- Portability: receive your data in a machine-readable format
- Restriction: limit how we process your data
- Object: object to processing of your data
- Withdraw consent: withdraw consent at any time where processing is based on consent
- Lodge a complaint: file a complaint with your local data protection authority if you believe your data has been mishandled
To exercise any of these rights, email us at privacy@bardicnotes.app. You can also delete your account directly in the app under Settings. We will respond to requests within 30 days.
11. Notifications
Bardic uses local notifications only — a daily reminder and a weekly recap, both fully optional. No push notification tokens are sent to our servers. All notification scheduling happens on your device.
12. Microphone
Bardic requests microphone access only to record sessions. Recording begins only when you start it, and continues — including while the app is in the background or the phone is locked — until you stop it. Audio is saved to your device in one-minute segments as you record, so an interruption costs at most a moment, never the whole session. Current versions transcribe locally and send text for corrections and recaps only when you process a draft. Older versions upload audio for transcription and delete the server copy afterwards — see §3, which describes the whole path.
13. Children's Privacy
Bardic is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at privacy@bardicnotes.app and we will delete it promptly.
14. Your Rights by Jurisdiction
In addition to the GDPR and UK GDPR rights described above, the following rights may apply based on your location:
United States (California — CCPA/CPRA): California residents have the right to know what personal information we collect, request its deletion, and opt out of the sale of personal information. We do not sell your personal information. To exercise your rights, contact us at privacy@bardicnotes.app.
Canada (PIPEDA): Canadian users have the right to access, correct, and request deletion of their personal data. We only collect personal information for purposes that a reasonable person would consider appropriate. Contact us at privacy@bardicnotes.app to exercise your rights.
Australia (Privacy Act 1988): Australian users may access and correct their personal data under the Australian Privacy Principles. If you believe we have breached the APPs, you may lodge a complaint with us at privacy@bardicnotes.app or with the Office of the Australian Information Commissioner (OAIC).
Japan (APPI): Japanese users have the right to request disclosure, correction, and deletion of their personal data. We handle personal information in accordance with the Act on the Protection of Personal Information. Contact us at privacy@bardicnotes.app.
South Korea (PIPA): Korean users have the right to access, correct, delete, and suspend processing of their personal data under the Personal Information Protection Act. Contact us at privacy@bardicnotes.app to exercise your rights.
For all jurisdictions: regardless of where you are located, you can delete your account and all associated data at any time from Settings within the app.
15. Changes to This Policy
We may update this privacy policy from time to time. If we make material changes, we will notify you through the app or by email. The "Last updated" date at the top of this page indicates when the policy was last revised.
16. Contact Us
If you have questions, concerns, or requests regarding this privacy policy or your personal data, contact us at:
Simena Digital LLC
1021 E Lincolnway, Suite 9026
Cheyenne, WY 82001, United States
Email: privacy@bardicnotes.app