Who we are
Gist is made by Arslan Saleem, trading as Creative Sora ("Creative Sora", "we", "us"). We are responsible for the personal data described in this policy.
Email: Info@creativesora.com
Web: https://creativesora.com/products/gist
Postal address: [add a postal address before publishing]
The short version
Your voice notes. When you share a voice note to Gist, or dictate into it, the audio goes over an encrypted connection to our server. Our server passes it to Google's Gemini AI service to turn it into text. We don't keep the audio on our server.
Your transcripts. Transcripts, key points, translations and reply drafts are saved on your phone, not in our systems. To make key points, a translation or a reply, the transcript text is sent the same way and is not kept by us.
Your device. We keep a small record about your install, such as usage counts and subscription status, so the free allowance and Pro work. It is tied to a random-looking identifier, not to your name or email.
What we don't do. We don't sell your data, share it for advertising, or use it to build profiles of you.
What we collect, and why
Audio you choose to send to Gist
What it is: a voice note you share into Gist from another app, or speech you record with Gist's microphone button (dictation). We also read the file's name and length.
Why: to turn speech into text. This is the core of the service.
Where it goes: - The audio is sent over HTTPS to our server. - Our server forwards it to Google's Gemini API, which returns the text. - Our server holds the audio in memory only for the length of that request and never writes it to disk. - A long recording may be uploaded to Google temporarily for processing. We delete that upload as soon as the text comes back.
How long it's kept: - On your phone: - A shared voice note is kept for 30 days after it's transcribed, so you can play it back next to the text. After that it is deleted automatically (the check runs when you open Gist). - It is also deleted straight away if you delete the note. - Dictation recordings are deleted as soon as the text comes back. - On our server: not stored. - At Google: see "Google's AI service" below.
Gist never records unless you press and hold the microphone button, and it asks for microphone permission first.
Transcripts and what Gist writes from them
What it is: the transcript, the key points and "what you need to do", translations, and reply drafts. It also includes any instruction you type or say when asking Gist to write a reply.
Why: to show you the text, and to create key points, translations and replies when you ask for them.
Where it's stored: - On your phone, in Gist's private storage. - It isn't synced to any cloud. It is excluded from device backups, and uninstalling Gist removes it. - When you ask for key points, a translation or a reply, the relevant transcript text, plus your instruction if you gave one, is sent to our server and on to Google's Gemini API. The result comes back to your phone. - Our server doesn't store that text, and our logs are set up to leave it out.
How long it's kept on your phone: - On the free plan, notes are deleted automatically 15 days after they arrive. - With Pro, you choose in Settings: 15 days, 30 days, or keep everything. - You can delete any note at any time.
Install identifier and usage counts
What it is: - A pseudonymous identifier for your install of Gist. On Android it is a one-way (SHA-256) hash of the app-specific Android ID; on iPhone it is the equivalent app-specific identifier. - A short-lived access token issued to that install. - A small record on our server: when the install was first seen, your plan, how much of the free allowance you've used, and a daily count of transcriptions.
Why: - To run the free allowance and daily limits fairly. - To stop abuse, for example the same device resetting its free allowance by reinstalling. - To keep the service secure.
How long it's kept: while you use Gist. Email us and we'll delete it (see "Your choices and rights").
Purchases (Gist Pro)
If you buy Gist Pro, the payment is handled entirely by Apple (App Store) or Google (Google Play). We never see your card details or your Apple or Google account details.
We receive a purchase token and the subscription's status (the product, whether it's active and when it renews or expires) so we can unlock Pro. It is stored with your install record.
Apple and Google handle payment data under their own privacy policies.
Service logs
Our server keeps technical logs so we can run it and fix problems. They include: - your install identifier; - the type of request; - file size and length; - the language Gist detected; - processing time; - error details.
Our hosting provider also records standard request data such as IP address and device/app information.
We set our logs up so they never contain audio, transcripts, key points, translations, replies or what you typed.
Logs are kept for about 30 days, then deleted automatically.
Messages you send us
If you email us, or use "Report a problem with this" in the app, we receive your email address and whatever the message contains.
Notifications
If you turn them on, Gist shows a notification on your phone when a transcript is ready.
Who we are
Gist is made by Arslan Saleem, trading as Creative Sora ("Creative Sora", "we", "us"). We are responsible for the personal data described in this policy.
Email: Info@creativesora.com
Web: https://creativesora.com/products/gist
Postal address: [add a postal address before publishing]
The short version
Your voice notes. When you share a voice note to Gist, or dictate into it, the audio goes over an encrypted connection to our server. Our server passes it to Google's Gemini AI service to turn it into text. We don't keep the audio on our server.
Your transcripts. Transcripts, key points, translations and reply drafts are saved on your phone, not in our systems. To make key points, a translation or a reply, the transcript text is sent the same way and is not kept by us.
Your device. We keep a small record about your install, such as usage counts and subscription status, so the free allowance and Pro work. It is tied to a random-looking identifier, not to your name or email.
What we don't do. We don't sell your data, share it for advertising, or use it to build profiles of you.
What we collect, and why
Audio you choose to send to Gist
What it is: a voice note you share into Gist from another app, or speech you record with Gist's microphone button (dictation). We also read the file's name and length.
Why: to turn speech into text. This is the core of the service.
Where it goes: - The audio is sent over HTTPS to our server. - Our server forwards it to Google's Gemini API, which returns the text. - Our server holds the audio in memory only for the length of that request and never writes it to disk. - A long recording may be uploaded to Google temporarily for processing. We delete that upload as soon as the text comes back.
How long it's kept: - On your phone: - A shared voice note is kept for 30 days after it's transcribed, so you can play it back next to the text. After that it is deleted automatically (the check runs when you open Gist). - It is also deleted straight away if you delete the note. - Dictation recordings are deleted as soon as the text comes back. - On our server: not stored. - At Google: see "Google's AI service" below.
Gist never records unless you press and hold the microphone button, and it asks for microphone permission first.
Transcripts and what Gist writes from them
What it is: the transcript, the key points and "what you need to do", translations, and reply drafts. It also includes any instruction you type or say when asking Gist to write a reply.
Why: to show you the text, and to create key points, translations and replies when you ask for them.
Where it's stored: - On your phone, in Gist's private storage. - It isn't synced to any cloud. It is excluded from device backups, and uninstalling Gist removes it. - When you ask for key points, a translation or a reply, the relevant transcript text, plus your instruction if you gave one, is sent to our server and on to Google's Gemini API. The result comes back to your phone. - Our server doesn't store that text, and our logs are set up to leave it out.
How long it's kept on your phone: - On the free plan, notes are deleted automatically 15 days after they arrive. - With Pro, you choose in Settings: 15 days, 30 days, or keep everything. - You can delete any note at any time.
Install identifier and usage counts
What it is: - A pseudonymous identifier for your install of Gist. On Android it is a one-way (SHA-256) hash of the app-specific Android ID; on iPhone it is the equivalent app-specific identifier. - A short-lived access token issued to that install. - A small record on our server: when the install was first seen, your plan, how much of the free allowance you've used, and a daily count of transcriptions.
Why: - To run the free allowance and daily limits fairly. - To stop abuse, for example the same device resetting its free allowance by reinstalling. - To keep the service secure.
How long it's kept: while you use Gist. Email us and we'll delete it (see "Your choices and rights").
Purchases (Gist Pro)
If you buy Gist Pro, the payment is handled entirely by Apple (App Store) or Google (Google Play). We never see your card details or your Apple or Google account details.
We receive a purchase token and the subscription's status (the product, whether it's active and when it renews or expires) so we can unlock Pro. It is stored with your install record.
Apple and Google handle payment data under their own privacy policies.
Service logs
Our server keeps technical logs so we can run it and fix problems. They include: - your install identifier; - the type of request; - file size and length; - the language Gist detected; - processing time; - error details.
Our hosting provider also records standard request data such as IP address and device/app information.
We set our logs up so they never contain audio, transcripts, key points, translations, replies or what you typed.
Logs are kept for about 30 days, then deleted automatically.
Messages you send us
If you email us, or use "Report a problem with this" in the app, we receive your email address and whatever the message contains.
Notifications
If you turn them on, Gist shows a notification on your phone when a transcript is ready.
What we don't collect
Account details: no name, email or phone number is needed to use Gist.
Your contacts, location, photos or files: Gist only ever sees the recording you choose to share.
Tracking: no advertising ID. No analytics, advertising or crash-reporting SDKs. No tracking across other apps or websites.
Google's AI service
Gist uses Google's Gemini API (Google LLC) to transcribe audio and to write key points, translations and replies. Before Gist sends your first voice note, the app tells you this and asks you to agree. You can say no.
We use Google's paid service. Under Google's terms for that service: - Google does not use what we send to train or improve its models. - Google keeps prompts and responses for a limited time, currently 55 days, only to detect abuse and misuse of its service, and to meet legal requirements. - Google acts as our service provider and is bound by its terms to protect this data.
You can read Google's terms at https://ai.google.dev/gemini-api/terms.
Who else processes your data
Each provider may only use the data to provide its service to us, and must protect it at least as well as this policy does. We don't sell or rent personal data, and we don't share it for cross-context behavioural advertising.
We may disclose data if the law requires it, or to protect the rights and safety of our users or others. If Gist is ever transferred to a new owner, this policy will continue to apply to data collected under it.
International transfers
We are based in Pakistan. Our providers run servers in several countries, including India and the United States.
Where the law requires it, for example for users in the EU, EEA, UK or Switzerland, those transfers are covered by our providers' Standard Contractual Clauses or equivalent safeguards.
Legal bases (EU, EEA and UK)
Contract. We process audio, text, install records and purchase status to provide the service you asked for.
Consent. Sending your first voice note, and using the microphone, happen only after you agree. You can withdraw consent at any time by not sharing further notes and by turning off the microphone permission.
Legitimate interests. We use install identifiers, usage counts and logs to prevent abuse and keep the service secure and working.
Legal obligation. We keep records where the law requires it.
Your choices and rights
Things you can do in the app: - Delete a note, or several at once. This deletes the transcript, the key points and the recording from your phone. - Change how long notes are kept (Pro). - Turn notifications or microphone access off in your phone's settings. - Uninstall Gist. This removes everything stored on your phone.
Things you can ask us to do: email info@creativesora.com to: - delete your install record and purchase status from our server; - get a copy of what we hold about your install; - correct it or object to how we use it.
Say you want your Gist data deleted.
We answer within 30 days. Gist has no accounts, so we don't know who you are. We may need a detail from your device to find your record, and we'll explain how when we reply.
Where you live gives you more rights: - EU, EEA or UK: access, correction, deletion, restriction, portability, objection, and the right to complain to your local data protection authority. - California and other US states: to know, delete and correct personal information, and to opt out of its "sale" or "sharing". We don't sell or share it.
We won't treat you differently for using any of these rights.
Security
Everything between the app and our server travels over encrypted HTTPS, and every request needs a per-install token.
Transcripts are kept in Gist's private app storage on your phone and are left out of device backups.
On our side, access to systems is limited to the people who run Gist.
No system is perfectly secure. If we become aware of a breach that affects you, we'll tell you as the law requires.
Children
Gist is not for children. You must be 18 or older to use it.
We don't knowingly collect data from anyone under 18. If you believe a child has used Gist, email us and we'll delete the data we hold.
Voice notes from other people
Voice notes you share into Gist often contain other people's voices and information. Please only use Gist with recordings you're allowed to have and read. We process them only to give you the transcript, as described above.
Changes to this policy
If we change this policy, we'll update the date at the top. If the change is significant, we'll also tell you in the app before it takes effect.
Contact
Questions or requests: Info@creativesora.com
