Download
Download

Privacy Policy

Last Updated: 2026.04.16

Geode is developed and operated by OmniIntelliLink Pte. Ltd., Singapore.

Compliance Commitment

Geode is designed and operated in compliance with the principles and requirements of the European Union General Data Protection Regulation (GDPR) and other applicable data protection laws. We follow a privacy-by-design approach, ensuring that personal data processing is minimized, transparent, and secure at every stage of operation.

1. Introduction

Geode (“we”, “our”, or “us”) is developed and operated by OmniIntelliLink Pte. Ltd., Singapore. We are the data controller for the processing activities described in this Policy. We are committed to protecting your privacy and ensuring transparency about how we collect, use, and protect your information.

Geode is designed around a privacy-by-design architecture. By default, core functions — including recording, local transcription, speaker separation, and local summarization where available — are processed on your device using local machine learning models. In these default local workflows, your recordings, transcripts, and summaries do not leave your device.

However, Geode also offers optional cloud transcription and optional cloud summaries on iPhone, iPad, and Mac. If you explicitly choose to use these cloud features, the audio you select, and where necessary the related transcript text, will be transmitted securely to our cloud processing infrastructure solely to perform the requested transcription or summary.

Our cloud servers do not retain your uploaded audio after processing is completed; uploaded audio is permanently deleted immediately after the requested cloud transcription or cloud summary task finishes. Any transcript text processed solely to generate a requested cloud summary is processed only for that requested task and is deleted once that task is completed, subject only to temporary technical storage strictly required during secure processing and delivery.

Certain limited account, subscription, diagnostic, and user-enabled analytics data may also be processed as described in this Policy.

By downloading, installing, or using Geode, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.

2. Scope

This Privacy Policy applies to information collected and processed through the Geode mobile and desktop applications (“the App”) and related services. This Policy does not apply to any services, websites, or software operated by third parties that may be linked to or from the App. We advise you to review the privacy policies of any third-party services before providing any information to them.

3. Information We Collect

Geode is built around the principle of minimal data collection. Most functionality is performed locally on your device without transmitting your audio, transcripts, or summaries to our servers.

3.1 Information You Voluntarily Provide

Authentication & Entitlements: If you sign in or restore purchases, we process limited identifiers and entitlement status necessary to provide access to free or paid features. We do not have access to your Apple ID password or payment card details. We maintain minimal account and entitlement records only to verify feature access and manage user support. These records contain no audio, transcript, or summary data, and are never used for profiling, advertising, or marketing purposes.

Payment Information: All purchases and subscriptions are processed by Apple through the App Store. We do not collect or store your payment details.

Customer Support Communications: When you contact our support team, we may process your email address and the details of your inquiry solely to resolve your issue.

Cloud Processing Requests: If you explicitly choose optional cloud transcription or optional cloud summaries, we process only the data necessary to provide that feature. This may include the audio file you select for cloud transcription and, where relevant, transcript text needed to generate a cloud summary. This content is processed solely for the requested task. Uploaded audio is permanently deleted immediately after processing is completed. Transcript text processed solely to generate a requested cloud summary is deleted once that task is completed, subject only to temporary technical storage strictly required during secure processing and delivery. We do not use your audio, transcripts, or summaries to train machine learning or AI models.

3.2 Information Collected Automatically

Device & App Telemetry (Minimal): We may process limited non-content technical data such as device model, operating system version, app version, and general compatibility data to ensure security, reliability, and product performance. This data does not include your audio, transcripts, summaries, or other user content.

Crash Reports (Opt-In, Off by Default): Crash reporting is disabled by default. No crash logs are collected unless you explicitly enable crash reporting in the Settings page by making an active, affirmative choice. If enabled by you, Geode may collect limited technical crash logs to help diagnose stability and performance issues. These reports include only diagnostic and technical information, such as error codes, device type, operating system version, and app version. They do not include your audio, transcripts, summaries, or other content. You may turn crash reporting off at any time in Settings.

Product Analytics / Behavioral Events (Opt-In, Off by Default): Product analytics are disabled by default. No behavioral data is collected unless you explicitly enable analytics sharing in the Settings page by making an active, affirmative choice. If enabled by you, Geode may collect limited product usage events such as feature usage, button taps, screen views, and general workflow events that help us understand how the App is used and improve usability. These analytics events never include your audio, transcripts, summaries, or other user content. You may turn analytics sharing off at any time in Settings.

4. How We Use Your Information

  • Account & Entitlements: to verify subscription status, restore purchases, and manage access to free or paid features — Legal Basis: Contract (Art. 6(1)(b)).
  • App Operation & Security: to perform compatibility checks, fraud prevention, service reliability, and technical maintenance — Legal Basis: Legitimate Interests (Art. 6(1)(f)).
  • Optional Cloud Transcription & Cloud Summaries: to process audio and, where necessary, transcript text only when you explicitly request these cloud features — Legal Basis: Contract (Art. 6(1)(b)) and/or Consent where required by applicable law.
  • Crash / Error Diagnostics: to process limited technical crash logs only if you enable crash reporting in Settings — Legal Basis: Consent (Art. 6(1)(a)) where required, or Legitimate Interests where permitted by applicable law and enabled by the user.
  • Optional Product Analytics: to process limited behavioral event data only if you enable analytics sharing in Settings — Legal Basis: Consent (Art. 6(1)(a)) where required, or Legitimate Interests where permitted by applicable law and enabled by the user.
  • Support: to respond to inquiries and troubleshoot issues — Legal Basis: Contract and/or Legitimate Interests.
  • Legal Compliance: to comply with tax, audit, legal requests, or court orders — Legal Basis: Legal Obligation (Art. 6(1)(c)).

We do not use your audio, transcripts, summaries, or other user content for profiling, advertising, or training machine learning or AI models.

Automated Decision-Making and Profiling: Geode does not engage in automated individual decision-making or profiling that would produce legal effects concerning you or similarly significantly affect you. Your account status, usage patterns, and content are not used to make automated decisions about you.

5. Core Data Processing Guarantees

  • Local by Default: Geode’s default workflow is local-first. Recording, local transcription, speaker separation, and local summarization where available are performed on your device by default.
  • Cloud Only When You Choose It: Audio and related transcript text are uploaded to cloud infrastructure only if you explicitly choose optional cloud transcription or optional cloud summaries.
  • No Audio Retention After Cloud Processing: When you use cloud transcription or cloud summaries, uploaded audio is permanently deleted immediately after the requested cloud task is completed.
  • Task-Limited Transcript Handling for Cloud Summaries: Where transcript text is processed to generate a requested cloud summary, it is processed only for that requested task and deleted once that task is completed, subject only to temporary technical storage strictly required during secure processing and delivery.
  • No AI Training: User audio, transcripts, summaries, and other content are never used to train AI or machine learning systems.
  • Minimal Account Data: Limited account and entitlement information may be stored solely for authentication, subscription verification, and support.
  • Crash Data Control: Crash reporting is disabled by default and can be enabled or disabled in Settings at any time.
  • Analytics Control: Product analytics are disabled by default and can be enabled or disabled by the user in Settings at any time.
  • No Content in Diagnostics or Analytics: Crash reports and behavioral analytics never include audio, transcripts, summaries, or other user-generated content.

6. Legal Bases for Processing

We only process personal data where there is a legal basis permitted by applicable law. The legal basis depends on the context and purpose for which we process personal data, which may include consent, contract necessity, legal obligation, or our legitimate interests as described in Section 4.

7. Cookies and Similar Technologies

Our App does not use cookies for authentication or tracking. If you visit our website, we and our third-party partners may use cookies or similar technologies to understand website usage, remember your preferences, measure performance, and improve website effectiveness. In the EEA/UK, we use a consent mechanism so that non-essential cookies are not set unless you opt in.

  • Strictly Necessary Cookies: to enable basic website functionality such as load balancing, security controls, and language or session preferences.
  • Functional Cookies: to remember settings or other website preferences.
  • Analytical or Performance Cookies: to analyze website usage in aggregate and help improve the website and related communications.

You can manage non-essential cookies through the Cookie Settings panel on our website and through your browser settings. Blocking strictly necessary cookies may impact website functionality.

For a more detailed list of cookies and similar technologies used on our website, please refer to the Cookie Settings panel and any Cookie Policy made available on our website.

8. Data Sharing and Disclosure

We do not sell, rent, or share your personal information with third parties for marketing purposes. Information may be shared only under the following limited circumstances:

  • Operational Infrastructure and Processors: We engage carefully selected service providers for limited account / entitlement storage, optional cloud transcription and cloud summary processing, optional crash diagnostics, and user-enabled analytics. These providers act under contractual confidentiality and data processing obligations, may process data only to provide services to us, and may not use your content for advertising, profiling, or AI model training.
  • Business Transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred as part of the transaction, provided the receiving party agrees to adhere to this Privacy Policy.
  • Legal Requirements: We may disclose information if required by law, court order, or government request, but only to the extent necessary.
  • With Your Consent: We may disclose information when you request or consent to such disclosure.

9. Third-Party Services and Technical Integrations

Geode uses a limited number of third-party services only where necessary to support app functionality, commerce, diagnostics, optional cloud processing, and user-enabled analytics. No third-party service receives your audio, transcripts, or summaries except where necessary to perform optional cloud transcription or optional cloud summaries that you explicitly request.

  • In-App Purchases and Subscription Verification: to manage purchases, subscriptions, and access to paid features.
  • Optional Cloud Processing: used only when you explicitly request cloud transcription or cloud summaries.
  • Diagnostics: limited technical crash and error reporting, only if you choose to enable crash reporting.
  • Optional Product Analytics: limited behavioral analytics events only if you enable analytics sharing in Settings. These events do not include audio, transcripts, summaries, or other user content.

We do not use advertising SDKs, and we do not use your content for advertising, profiling, or marketing analytics.

10. International Data Transfers and Where We Store Data

OmniIntelliLink Pte. Ltd. is based in Singapore. Although much of Geode’s functionality runs locally on your device, we may process limited data through server-side infrastructure for account and entitlement records, optional cloud transcription and cloud summaries that you explicitly request, optional crash diagnostics that you enable, and user-enabled analytics.

Depending on the feature you use and the infrastructure providers engaged at the relevant time, limited server-side processing may occur in Singapore and in other jurisdictions where our service providers operate. Where personal data from the EEA/UK is transferred to a country that does not benefit from an adequacy decision, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs), encryption in transit, access controls, and GDPR-compliant infrastructure measures where required.

Where applicable, we will provide additional information about relevant processing locations or transfer safeguards upon request, subject to security and confidentiality limitations.

11. Data Retention

11.1 On-Device Data

You control how long recordings, transcripts, and summaries remain on your device. They remain until you delete them. We cannot recover deleted local files.

11.2 Server-Side, Cloud Processing, Diagnostics, and Analytics Data

For personal data we collect and control — such as support communications, authentication data relevant to entitlements, limited device/app metadata, crash logs if you enable crash reporting, and user-enabled analytics events — we retain such data only as long as necessary for the purposes described in this Policy or as required by law.

  • Account / Entitlement Data: generally retained for the duration of active use and up to 24 months thereafter, unless a longer period is required by law.
  • Crash Logs: if crash reporting is enabled by you, crash logs are typically retained for 30–90 days for diagnostics, then deleted or anonymized.
  • User-Enabled Analytics Events: retained only as long as reasonably necessary for product analysis and improvement, then deleted or aggregated / anonymized in accordance with our retention practices.
  • Cloud Processing Content: uploaded audio used for optional cloud transcription or cloud summaries is permanently deleted immediately after processing is completed. Associated transcript text, where processed to generate a requested cloud summary, is deleted once that task is completed, subject only to temporary technical storage strictly required during secure processing and delivery.

12. Your Rights

Depending on your jurisdiction, you may have the following rights: access, rectification, erasure, restriction, objection, and portability. You may withdraw consent where applicable.

You may also manage certain privacy controls directly within the App, including:

  • enabling or disabling crash reporting in Settings; and
  • enabling or disabling product analytics sharing in Settings.

To exercise your legal rights, contact us at [email protected]. We will respond in accordance with applicable laws.

EEA / UK residents also have the right to lodge a complaint with a supervisory authority in their country of residence.

12.1 California Residents (CCPA / CPRA)

If and to the extent the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), applies to our processing of your personal information, California residents may have additional rights, including the right to know, delete, correct, opt out of the sale or sharing of personal information, limit the use and disclosure of sensitive personal information, and receive equal treatment for exercising applicable privacy rights.

We do not sell your personal information, and we do not share your personal information for cross-context behavioral advertising. To exercise any applicable California privacy rights, contact us at [email protected]. We may need to verify your identity before processing your request.

13. Data Security

We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or disclosure. Data transmitted for optional cloud transcription, optional cloud summaries, crash diagnostics that you enable, or user-enabled analytics is transmitted securely using encryption in transit and protected through access controls and least-privilege safeguards.

Crash diagnostics contain only limited technical information. Product analytics, if enabled by you, contain only limited behavioral event data and never include audio, transcripts, summaries, or other user content.

In the unlikely event of a data incident, we will act promptly to contain and investigate the issue, and notify affected users or supervisory authorities when legally required. You are responsible for securing your device. We cannot recover data if it is lost or deleted from your device.

14. Use by Minors

The Services are not intended for individuals under 16 in the EEA/UK (or a lower age as permitted by specific EU Member States, typically between 13 and 16), or under 13 in the United States. We do not knowingly process children’s personal data. If you believe a minor has provided data in violation of this Policy, please contact us and we will promptly take appropriate steps, which may include deleting the relevant data.

15. Policy Changes

We may update this Privacy Policy periodically to reflect changes in our practices, services, or legal requirements. If we introduce material changes to how optional cloud features, analytics, diagnostics, or other personal data processing works, we will update this Policy and revise the “Last Updated” date accordingly.

For material changes that substantially affect how we process your personal data, we will provide prominent notice, such as an in-app notification, an email to registered users where applicable, or a clear notice on our website, before the changes take effect where reasonably practicable or where required by law. Continued use of the Services after such changes take effect will constitute acceptance of the updated Policy, except where applicable law requires additional consent.

16. Contact Us

For questions, concerns, or requests related to this Privacy Policy, please contact us at:

[email protected]

If we appoint an EU/UK representative under GDPR Article 27, we will update this Policy with their contact details.

17. Company Information (Imprint)

Geode is developed and distributed by OmniIntelliLink Pte. Ltd., a company registered in the Republic of Singapore.

  • Legal Entity: OmniIntelliLink Pte. Ltd.
  • Jurisdiction: Singapore
  • UEN (Company Registration Number): 202510787E
  • Registered City: Singapore
  • Contact Email: [email protected]

This information is provided to comply with international privacy and consumer protection requirements, including GDPR transparency obligations.