Skip to content

Latest commit

 

History

History
112 lines (82 loc) · 4.97 KB

PRIVACY.md

File metadata and controls

112 lines (82 loc) · 4.97 KB

Lotti Privacy Policy

Last updated: September 14th, 2025

Trust at a glance:

  • No telemetry or analytics
  • Local‑only by default; no Lotti cloud service
  • End‑to‑end encrypted sync via Matrix (optional)

Core Privacy Commitment

Lotti is built on a fundamental principle: your data belongs to you. All information you record in Lotti—tasks, audio recordings, journal entries, health data, and personal reflections—is stored exclusively on your own devices. There is no Lotti cloud service, no centralized data collection, and no analytics tracking your usage.

Data Storage & Ownership

Local Storage

  • All data is stored locally on your devices using SQLite
  • No data is uploaded to any Lotti servers (because there are none)
  • You maintain complete ownership and control of your information
  • Data can be exported at any time for backup or migration

Device Synchronization

  • Sync between your devices uses end-to-end encryption via Matrix protocol
  • Encryption keys are exchanged via QR code, never transmitted over the network
  • Matrix provides decentralized, secure communication for sync
  • No third party has access to your encryption keys or synced data

AI Integration & Privacy

Your Choice, Your Control

Lotti offers AI capabilities through various providers, but you control exactly how and when AI is used:

  • Per-Category Configuration: Choose different AI providers (or none) for each category of data
  • Local-Only Option: Use Ollama for completely offline AI inference
  • Cloud Providers: When you choose cloud AI (OpenAI, Anthropic, Gemini), data is:
    • Sent only for specific inference requests you initiate
    • Transmitted using your own API keys
    • Request/response data is transmitted only for inference but may be logged temporarily by the provider according to their retention policy
    • Subject to the provider's privacy policy and data retention practices
    • Important: Review your provider's retention policies and privacy settings. Consider requesting zero-retention or enterprise plans if available for enhanced privacy

GDPR-Compliant Options

  • European-hosted AI providers with no-retention policies are available
  • These providers process your data without storing it
  • You maintain the right to choose which provider to use or to use none at all

Audio Transcription

  • Local Option: Use OpenAI's Whisper model running entirely on your device
  • Cloud Option: Use multimodal AI providers (like Gemini) for transcription
  • You choose which method to use on a per-recording basis
  • Audio files remain on your device regardless of transcription method

What We Don't Do

  • ❌ No telemetry or usage analytics
  • ❌ No cloud accounts or user profiles
  • ❌ No data mining or profiling
  • ❌ No advertising or marketing tracking
  • ❌ No sharing with third parties (except AI providers you explicitly choose)
  • ❌ No backend servers collecting your data

Security Considerations

Current State

  • Device storage currently relies on your device's built-in security
  • We strongly recommend enabling device encryption (FileVault on macOS, BitLocker on Windows, etc.)
  • End-to-end encryption is used for device synchronization

Future Improvements

  • On-device database encryption is planned for future releases
  • Additional security features are under development

Open Source Transparency

Lotti is fully open source under LICENSE. This means:

  • Anyone can audit the code to verify our privacy claims
  • The community can identify and report potential privacy issues
  • Development happens in public here on GitHub

Beta Testing

When participating in beta testing:

  • TestFlight (iOS/macOS): Requires providing your Apple ID to receive invitations
  • Other platforms: Direct download from GitHub Releases requires no personal information

Your Rights

You have complete control over your data:

  • Access: Direct access to all your data via the app
  • Export: Export your data at any time
  • Deletion: Delete any or all data instantly
  • Portability: Your data is stored in standard formats
  • Control: Choose what AI services (if any) can process your data

Contact

For privacy-related questions or concerns:

Changes to This Policy

As Lotti evolves, this privacy policy may be updated. Changes will be:

  • Announced on the GitHub repository
  • Included in release notes
  • Never retroactively reduce your privacy rights
  • There might come a cloud‑based service for making access to providers simpler without requiring individual API keys, but this would be entirely opt-in and would follow the privacy goals outlined here, with an explicit no data retention policy

Remember: Lotti is designed for a future where AI augments our capabilities without compromising our privacy. Your data stays yours, always.