Privacy policy

What we collect

• Your account: the name, email address and profile image from your Google or Apple account.
• Sign-in sessions: the IP address and browser (user agent) of each device you are signed in on, to keep your account secure.
• What you put in: your apps, their entries, your voice recordings, their transcripts and what we extracted from them, and the chats saved from when storelah could build apps.
• Where an entry was made, only for tables that have a place column (such as a run's "Where"): your device's location when the entry is saved, with the place's name your phone looks up, if you allow location access. It is stored with that entry only, never in the background and never for other tables. You can turn it off in your device's settings at any time.
• Waitlist: the email address you enter on our home page, even if you never sign in, with your browser (user agent) and a salted hash of your IP address (never the address itself) to spot abuse. Unsubscribing (there is a link in every email) stops the emails, but we keep the address, marked as unsubscribed, so it is not emailed again. To have it removed, email [email protected].
• Usage: how many captures, voice conversations and AI requests you make, how long they take, and how many seconds a day you actively use the app, so we can apply fair-use limits and understand our costs.
• AI apps you connect yourself: which app, what you allowed it to do (read your data, or also change entries) and when you connected it, with the sign-in tokens that let it act for you. To stop abuse, requests that register or introduce an AI app are counted per minute by a salted hash of your IP address, never the address itself.
• What a connected AI app did: for each request it made, which kind of request (for example "read entries"), in which app, when, and whether it worked. Never what it asked for or what it got back.
• AI request samples: for every AI request that fails and a small sample of the others, a shortened copy of what was sent and returned (for example a transcript), so we can find and fix errors.

We do not sell your data and we do not use it for advertising.

How we use it

When you record or type an entry, we send it to outside AI services. One turns a recording into text, one decides which app and table the entry belongs in, and one reads it to fill in the entry. The entry is then saved in your app.

In a voice conversation, the live audio goes to our voice assistant, which uses an AI service to hear you and speak its replies.

Who we provide it to

We provide your data only to the kinds of services below. They work for us and handle your data on our behalf, only for the purpose listed. storelah asks your permission before it first sends what you say or type to the AI services.

Google sign-in

Signs you in and gives us your Google account's name, email address and profile image.

Apple sign-in (when offered)

Signs you in on Apple devices and gives us the name and email address you choose to share.

An AI speech-to-text service

Turns your voice recordings into text.

An AI language service

Files what you say into your apps, and in a voice conversation hears you and speaks the replies.

An AI routing service, directly or through an AI gateway

Reads the transcript of a capture to decide which app it belongs to and label it.

A live audio service

Carries the live audio of a voice conversation between your device and our voice assistant.

A tracing service

Only when tracing is turned on: records the steps of a capture (the transcript and what was extracted, not the recording) so we can find and fix errors.

The service that hosts our app

Runs storelah and keeps its database.

A file storage service

Stores your voice recordings.

An email service

Sends our emails, such as the waitlist confirmation.

How long we keep it

We keep your account, apps, entries, recordings, transcripts and saved chats for as long as your account exists. AI request samples are deleted after 14 days. Usage is kept as daily totals per person.

A connected AI app stays connected until you disconnect it. What connected AI apps did is kept for 90 days, then deleted. In Settings, under Connected AIs, Disconnect removes an app's access at once (and its sign-in tokens), and Clear activity deletes the record of what they did.

Seeing and deleting your data

You can see your apps, their entries and what you said in the storelah app at any time, and change or delete an entry there. To ask what else we hold about you, write to [email protected].

To delete your account in the storelah app, open Settings and tap Delete account. You may be asked to sign in again to confirm it's you. You can also email [email protected] from the address you sign in with and we will delete it for you. Either way, that removes your workspace (apps and entries), your recordings and their transcripts, and clears the details stored with your usage records. Aggregate usage counts, which no longer contain what you said or saved, are kept.

Contact

Questions or requests about your data: write to [email protected].