Privacy Policy

When you create a Tikko account, we collect the following depending on your sign-in method:

• Apple Sign In: your name (if shared) and an anonymized Apple-generated email relay address or your real email address if you choose to share it.
• Email registration: your email address and a hashed password (we never store passwords in plain text).

Tikko allows you to record voice memos immediately after phone calls. These recordings are:

• Captured and stored locally on your device using Apple's AVFoundation framework.
• Never transmitted to our servers unless you have enabled cloud sync in Settings.
• If sync is enabled, encrypted audio files are stored in your Supabase-backed cloud storage associated with your account.
• Used solely to generate transcripts — they are not listened to, analyzed, or shared by us.

Transcription is performed entirely on your device using Apple's Speech framework. The resulting text:

• Is stored locally in the app's SwiftData database.
• Is optionally synced to your Supabase cloud account if sync is enabled.
• Is sent to our AI processing edge function (see Section 1.4) to extract intelligence.

We do not retain or sell transcript text. It is processed transiently to generate the AI outputs described below.

When you request AI processing, your transcript text is sent from your device to a Supabase Edge Function operated by us. That function calls the Anthropic API on the server side to extract:

• A summary of the call.
• Key details (e.g., budget, timeline, objections, next steps).
• Sentiment analysis (e.g., positive, neutral, or cautious).
• Suggested follow-up actions and dates.

Important: Transcript text is sent to Anthropic's API server-side only, through our edge function. Your data is not sent directly from your device to Anthropic. The results returned by the AI (summaries, key details, sentiment, follow-ups) are stored locally on your device and optionally synced to your Supabase account.

Anthropic processes data pursuant to their own Privacy Policy. We use Anthropic Claude under a commercial API agreement; Anthropic does not train on API data by default.

You may create lead records containing information you enter manually, including:

• Contact names and company names.
• Phone numbers.
• Pipeline stage and deal status.
• Notes and custom fields.

This information is entirely user-generated. It is stored locally and optionally synced to your Supabase account. We do not share or sell this data.

We may collect basic, anonymized usage information to improve the app, such as:

• Which features are used and how frequently.
• App session duration.
• Crash reports and error logs.

This data does not contain the content of your recordings, transcripts, or leads. It is used solely for product improvement.

For debugging and support purposes, we may collect limited device information including:

• iOS version.
• Device model (e.g., iPhone 15 Pro).
• App version.
• Crash logs and stack traces.

• Location data — we do not access or collect GPS or location information.
• Payment or financial information — Tikko is currently free with no in-app purchases.
• Contacts from your device address book.
• Cookies — Tikko is an iOS app with no cookie-based tracking.
• Third-party social profile data beyond what Apple Sign In provides.

We use the following sub-processors to operate Tikko. Each is bound by data processing agreements:

We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Typeone AI, our users, or the public.

In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred. We will provide notice before your data is subject to a different privacy policy.

By default, all your data — recordings, transcripts, AI-processed results, and leads — is stored exclusively on your device using Apple's SwiftData framework. This data is protected by iOS device encryption and your device passcode or biometrics.

If you enable cloud sync, your data is encrypted in transit (TLS) and stored in Supabase infrastructure. Supabase stores data in AWS data centers. Row-level security policies ensure your data is accessible only by your authenticated account.

• All data in transit is encrypted using TLS 1.2 or higher.
• API keys and secrets are stored server-side and never embedded in the app binary.
• We follow industry-standard security practices and promptly address known vulnerabilities.
• We limit internal access to user data to personnel with a legitimate need.

Data stored locally on your device is retained until you delete it or uninstall the app. Data in your cloud account is retained until you delete your account or request deletion. We may retain anonymized analytics data for product improvement after account deletion.

You may request a copy of the personal data we hold about you by contacting us at privacy@tikko.ai. For data stored locally on your device, you have direct access at all times within the app.

You can update your account information directly within the app or by contacting us. Lead and interaction data can be edited at any time.

You can delete individual recordings, transcripts, interactions, or leads within the app. To delete your entire account and associated cloud data, contact us at privacy@tikko.ai. We will process deletion requests within 30 days.

You can opt out of usage analytics in the app's Settings screen. Opting out does not affect core functionality.

Cloud sync is optional and can be toggled off in Settings at any time. When disabled, no new data is sent to our servers.

• Contract performance: processing necessary to provide the services you signed up for.
• Legitimate interests: improving the product, preventing fraud, and ensuring security.
• Legal obligation: compliance with applicable law.
• Consent: where you have specifically opted in (e.g., analytics).

Your data may be transferred to and processed in the United States. Where such transfers occur, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) where applicable.