Privacy Policy

Sonora is built on a single rule: the artificial intelligence runs on your device, and your content does not have to leave it. This policy explains, in plain terms, what data Sonora handles, where that handling happens, and the one narrow, optional case in which anything is sent off the device.

Sonora is published by Erarta Studio (“Sonora”, “we”, “us”). This policy applies to the Sonora mobile application and this website, sonora.erarta.ai.

The short version

• Your voice recordings, transcripts, notes, summaries, tasks, search queries, and questions to your archive are processed on your device and stored in a local, encrypted archive on your device.
• Sonora does not require an account, a phone number, or a sign-in to work.
• By default, Sonora does not send your content anywhere. There is no server that receives, stores, or analyzes your notes.
• The only optional path off your device is anonymous product analytics, which is turned off by default. If you choose to turn it on, it carries only coarse usage signals and never the content of your notes. You can turn it off again at any time.
• Two additional off-device interactions exist only to make the app work: downloading the AI models on first launch, and standard App Store app updates. Neither sends your notes.

What Sonora processes on your device

When you record or import audio, Sonora transcribes it on your device, transforms it with an on-device language model into the format you choose (such as a summary, a task list, a clean note, a custom result, or a translation), and saves the result to a local, encrypted archive. Search, topic clustering (Threads), and asking questions of your archive are also performed on your device using local indexes and the local model. This content is not transmitted to us or to any third party as part of normal use.

Data stored on your device

• Captured audio and transcripts you create or import.
• Notes and transforms produced from them (summaries, tasks, clean notes, custom outputs, translations).
• Search indexes used for keyword and semantic search and for asking your archive questions.
• App settings and preferences, including your analytics choice and any optional cloud provider key (see below).

This data lives in an encrypted archive on the device and, where applicable, in the device keychain. You can delete individual notes or clear the archive from within the app. Uninstalling the app removes its locally stored data from the device.

Optional product analytics (off by default)

To understand whether the app is working well and where it fails, Sonora can collect anonymous, content-free product analytics. This is off by default. It is collected only if you explicitly opt in, and you can opt out again at any time in Settings.

When enabled, analytics may include only:

• Event names describing which features or screens were used.
• Coarse counts and timings (for example, how long an action took).
• Error and diagnostic codes when something fails.

Analytics, even when enabled, never includes:

• Your audio, transcripts, notes, summaries, tasks, or translations.
• Your search queries or the questions you ask your archive.
• Wake-word phrases or any of the words you speak or type into your notes.

Because this opt-in path exists, we do not claim that Sonora collects no data at all. What we do claim, and design for, is that your content stays on your device and is never part of analytics.

AI model downloads and app updates

Sonora downloads its AI models once, on first launch, so that everything can then run offline. This download fetches model files to your device; it does not upload your content. App updates are delivered through the Apple App Store under Apple’s normal update mechanism. After the initial setup, Sonora is designed to function fully offline.

Optional cloud escalation (bring your own key)

Sonora may offer an optional advanced setting that lets you connect your own third-party AI provider using your own API key, for tasks you choose to run in the cloud. This is off by default. If you enable it and run a request through it, the content of that specific request is sent directly from your device to the provider you chose, using your key. Sonora does not proxy, store, or bill these requests, and your key is stored encrypted in the device keychain and is never transmitted to us. Requests you keep local never use this path. Your use of a third-party provider is governed by that provider’s own terms and privacy policy.

This website

The Sonora website provides information about the app and is intended to be served without behavioral advertising trackers. If we add basic, privacy-respecting visitor measurement in the future, we will update this policy to describe it. Your interactions with the app are governed by the in-app behavior described above, not by this website.

Children

Sonora is not directed to children under the age required by your local law to consent to data processing. Because content is processed on the device and no account is required, we do not knowingly collect personal information from children.

Your choices and rights

• Analytics: opt in or out at any time in Settings. Off by default.
• Your content: view, edit, and delete notes, or clear the archive, from within the app. It is stored on your device, under your control.
• Removal: uninstalling the app removes its local data from the device.

Depending on where you live, you may have additional rights regarding personal data. To ask a question or exercise a right, contact us at the address below.

Changes to this policy

We may update this policy as Sonora evolves. When we do, we will revise the date at the top of this page and, for significant changes, provide notice in the app or on this site.

Contact

Questions about privacy can be sent to privacy@erarta.ai. Support page.