Privacy policy

Information we handle

Current handles recording audio, transcripts, meeting titles, participant names, dates, notes, questions, coaching, summaries, and follow-ups. People and organization pages are derived from calls you can access. Imported recordings include source links and processing details.

With Sign in with Apple, the service receives your Apple account identifier and the name and email Apple makes available. Your email may be an Apple private relay address. The service stores your profile, organization, room memberships, device description, and sign-in activity.

The hosted service and AI

Candlefish operates the default connected service. When you use connected features, it stores recordings and related call information on Candlefish-controlled machines. The Mac app can also capture locally. A recording on a device is separate from a copy received by the connected service.

In the current service configuration, live transcription, live coaching, ordinary post-call transcription, and post-call summaries run on Candlefish-controlled machines. Asking questions about saved calls can send selected transcript excerpts, question text, and relevant context to Anthropic; a configured fallback can use Google Gemini. Connected context can come from meeting, relationship, email, or knowledge services. A local recording does not mean every intelligence feature runs only on your device.

Adding a call to Suite sends a separate copy for people who can access Suite. That copy can include audio, title, date, linked people or organizations, transcript, summary, chapters, and meeting moments. Private notes, preparation, and coaching stay in Current. Creating a share link does not add a Suite copy. Company names and domains can be sent to Exa for public company news. Cloudflare handles the public connection. Candlefish backs up call media and imported source files to Cloudflare R2.

The service keeps operational logs to diagnose failures. The app sends launch timing, and the service keeps aggregate counts of recording and sharing actions.

Who can access a call

New calls recorded in Current are personal by default and available to their owner and service administrators. Choosing a room gives its members access. Adding a person’s name to a personal recording does not give that person access.

Older recordings may retain room or matched-participant access. Imports keep their existing access settings. People, organizations, and search results follow the calls the signed-in account can access.

A share link is optional. Anyone who has it can open the shared content without signing in and can forward the link. Private notes, preparation, and coaching are excluded unless you choose to include them. Review the content before creating a link. Revoking a link stops later access through it, but cannot remove copies someone already saved. A link does not change room access or separate Suite settings.

Correcting a displayed name does not change access to a recording. A clip sent through the iPhone share sheet goes to the destination you choose.

Voice samples

If you add your voice, the phone uploads a short recording. The service uses it to create a voice profile, then removes the temporary enrollment recording. The profile stores a numerical representation of the voice, its name, and sample-quality information so the service can try to recognize it later.

Forget removes the current voice profile. It does not remove names already saved on recordings, and recovery copies may retain earlier profiles. Voice recognition can make mistakes.

Imported media

For a direct media link, the service downloads and processes the source, saves the resulting audio recording, and removes temporary download files. The call retains its source link and import date.

For a public YouTube link, the service downloads the video, creates audio for processing, and retains imported media and the resulting transcript and notes. Public captions may also be stored. Timestamps and speaker labels can be estimates. The original remains on YouTube under its own terms and privacy practices.

What stays on the phone

The iPhone app keeps its service address and optional connection settings on the phone. Its sign-in token is stored in the iPhone keychain. During recording, the phone keeps audio for recovery. A failed upload may remain queued locally until it succeeds or local data is cleared.

Signing out attempts to revoke the current service token and clears the visible account and call cache. Local audio for the same owner can remain on the phone, including pending recordings. The service address and separate Cloudflare Access credentials remain until removed in connection settings. Signing out does not delete recordings on the service. Exported or shared copies are separate.

iOS asks for microphone access when you first start a recording. Current uses it during recording or voice enrollment. The iPhone app does not directly capture another app’s internal audio or cellular-call audio.

The Mac app can capture microphone and system audio locally. Native capture uses AES-GCM encryption for local artifacts, with a key held in the Mac’s device-only keychain. This does not mean that connected service storage or Cloudflare R2 backups use the same local encryption.

Deletion and recovery copies

Deleting a call removes it from the active library and search. The service keeps a recoverable archive of the recording and related records.

Deleting an account starts tracked removal of its sign-in records, profile, saved voice profiles, and calls it owns from Current and storage Candlefish manages. The app shows whether the request is still in progress or complete. Other people’s calls and copies saved by recipients remain. Active storage, snapshots, backups, and shared or exported copies can take longer to clear. A request stays incomplete until required cleanup is confirmed.

Other service operators

Current can connect to a separate compatible service. Its operator controls storage, access, processors, integrations, and retention. Ask that operator about its practices before sending call information.

Children

Current is not directed at children under 13.

Changes and contact

When this page changes, its date is updated. For privacy questions, write to team@candlefish.ai. For app help, see support.