SumaFlow Minutes does not see your meetings. The app records, transcribes, and generates minutes entirely on your phone. There is no server for your data to travel to.
No data collected. No data shared with third parties.
This mirrors our Google Play Data Safety card.
Data collected
None. Your audio, transcripts, minutes, and metadata are created and stored on your device. They are never transmitted to SumaFlow or to any third party, because there is no SumaFlow server to receive them.
Data shared
None. No data is shared with third parties. The app contains no analytics SDKs, no ad SDKs, and no crash reporting that phones home.
What stays on your device
- Audio recordings — captured when you record; encrypted at rest.
- Transcripts — generated locally by Whisper (on-device).
- Minutes — generated locally by Gemma 4 E2B via LiteRT-LM, or by a built-in template extractor on RAM-constrained devices.
- Metadata & export audit log — meeting title, optional client label, date, duration, and a local, append-only record of any export you make.
Security practices
- Encrypted at rest. Audio is encrypted with AES-256-GCM; transcripts and minutes live in a SQLCipher-encrypted database. Keys are held in the Android Keystore (StrongBox where available).
- No data in transit. The core app makes no outbound network calls carrying user content.
The one network use
The app's INTERNET permission exists for exactly one purpose: optional,
opt-in, Wi-Fi-gated downloads of the on-device AI models from
huggingface.co (the Gemma 4 E2B minutes model and the optional Whisper
small.en transcription model). These downloads pull a public model file
down to your device — they never upload your content — and each is
SHA256-verified against a pinned commit. After download, all inference runs on-device.
The full detail is in the
Privacy & Security Whitepaper.
In-app purchases
SumaFlow Minutes Pro is an optional in-app purchase processed by Google Play. We run no payment server and receive no payment details — your card, billing address, and Google account are handled by Google, not by us — and buying Pro creates no account with SumaFlow. Pro unlocks app features only; it does not change where your meeting content lives, and the billing channel carries none of your audio, transcripts, or minutes. Purchases are governed by Google Play's own terms and privacy policy.
What leaves your device
Only an export you explicitly initiate (PDF, email, share sheet, or copy to clipboard). Each export shows a confirmation screen first. Where the data goes next is governed by the receiving app's own privacy policy.
Data deletion
You control retention. Delete any recording with a single tap, or uninstall the app to destroy the keys and render any leftover storage unrecoverable.
Children
SumaFlow Minutes is designed for professional use and is not directed at children under 13.
Contact
For privacy questions or data-rights requests, email [email protected]. For security reports, [email protected].