Privacy Policy
Coii Audio
Effective effective date
1. The short version
Your recordings never leave your Mac, and we never receive anything from the app. There is no account to create, no server of ours to connect to, no analytics, no crash reporting and no telemetry. We cannot see how often you use the Software, whether you use it at all, or what is in any recording — not because we promise not to look, but because nothing is sent.
The app does make four kinds of network connection. They are listed exhaustively in §3, and none of them carries your audio, transcripts, notes or summaries.
The one place any information about you exists is your purchase, which is held by Lemon Squeezy, our merchant of record (§4).
2. What stays on your device
Everything the Software produces is written to ~/Library/Application Support/CoiiAudio on your Mac:
taker.db |
sessions, transcript segments, speaker labels, your notes, summaries, Q&A history and settings |
models/ |
the model weights you have downloaded |
license.json |
trial start date and activation state |
Two things are worth spelling out:
- Audio is never written to disk. Samples are resampled, segmented, transcribed in memory and then dropped. There is no recording file, not even a temporary one. What remains of a meeting is its text.
- Voice prints are not identity. For speaker separation the app stores a small numeric vector per transcript segment. Those vectors are compared only against other segments in the same session; they are not matched against any database, not shared between sessions by default, and not sent anywhere. Speaker names you type are labels in your own database.
A copy of the licence key and the trial's start date is also kept in your macOS
keychain under io.coii.audio.license, so that reinstalling the app does not
cost you a device activation or reset your trial. It is readable only by you and
by signed builds of this app.
Deleting that folder and that keychain item deletes everything the Software holds. There is no other copy anywhere.
3. Every network connection the app makes
This is the complete list. Nothing else in the app opens a connection.
3.1 Downloading models — only when you ask for one
| where | when | what it sees |
|---|---|---|
huggingface.co |
first-run setup, and when you download a transcription or language model in Settings | your IP address, your user agent, and which model file you asked for |
github.com (sherpa-onnx releases) |
when you download a voice-print model | the same |
These are the hosts the model weights live on. They are not ours, and their own privacy policies apply to the request. Nothing about your recordings or your licence is included. Once a model is downloaded it is used from your disk and these hosts are not contacted again.
3.2 Licensing — only when you press Activate or Deactivate
POST https://api.lemonsqueezy.com/v1/licenses/validate
POST https://api.lemonsqueezy.com/v1/licenses/activate
POST https://api.lemonsqueezy.com/v1/licenses/deactivate
Sent: your licence key, and — on activation — a device label. The validate call
carries the key alone and runs first, so that a key bought for our other app is
refused before it spends one of your slots. The device label includes your
Mac's computer name — the name from Sharing settings, often a person's name,
for example "Jane's MacBook Pro" — plus six characters of a random per-install
identifier. If you would rather Lemon Squeezy not hold that, rename your Mac
before activating.
Received: which product the key was sold for, and an activation identifier, which is stored locally so the slot can be released later.
Nothing else is sent, and this happens at most three times per device. After a successful activation the Software does not contact the licensing service again; it does not phone home, re-validate or check in. An activated app works indefinitely with the network off.
3.3 Checking the trial clock — during the trial only
HEAD https://cloudflare.com/, and if that fails, HEAD https://www.apple.com/
The trial is thirty days, and the only defence against a system clock being
wound back is a clock from somewhere else. Any HTTP response carries a Date
header, so the app reads that and nothing else. The request contains no
identifier, no licence key and nothing about your install — it is
indistinguishable from opening the website. Those two operators see an IP address
making an ordinary request, as they would for any visit.
If the request fails, nothing happens: being offline is normal, and the trial then runs on your own clock rather than refusing to run.
3.4 Loopback — the language model
The bundled language-model engine listens on 127.0.0.1. Summaries and questions
are sent to it. That traffic never leaves your Mac; it does not reach a network
interface that can carry it off the machine.
3.5 What the app does not do
No analytics. No crash or error reporting. No usage statistics. No advertising or tracking identifiers. No update check — the app currently has no in-app updater, so it does not contact any release server. No connection at launch: opening the app with the network off does everything it does with the network on, apart from downloading a model you have not downloaded yet.
4. Your purchase, which Lemon Squeezy holds
We do not run an account system. If you buy a licence, the record of that purchase is held by Lemon Squeezy LLC, our merchant of record, which handles checkout, payment, invoicing and tax.
Lemon Squeezy holds your email address, the licence key it issued you, your activations and their labels, and the billing and tax details it needs — including whatever your payment method required. Lemon Squeezy is the controller for the payment transaction; its privacy policy governs that data.
As the seller, we can see in its dashboard: the purchase email address, purchase date and amount, the licence key, and the device labels of its activations. We use that only to answer support requests, adjust an activation limit, and handle refunds. We never receive full card details.
To reach your own purchase data, use My Orders at
https://app.lemonsqueezy.com/my-orders, which authenticates you by mailing a
sign-in link to the address that bought. It is where you recover a lost key and
find your receipt, without going through us.
5. The website
Stub — must be completed before launch. Fill in exactly what https://coii.io runs: analytics, session recording, embedded fonts and video, and the checkout redirect. If the site runs anything that records visitor behaviour, it is disclosed here, in these words, and the "no telemetry" claim in §1 stays scoped to the app — it is a claim about the Software and must not be allowed to read as a claim about the website. If the site runs nothing, say that instead: it is the stronger sentence and it is free.
6. Children
The Software is not directed at children under 16, and we knowingly collect nothing from anyone.
7. Your rights
Because we hold no data collected from the app, there is normally nothing for us to access, correct, export or delete. Rights over your purchase data are exercised through Lemon Squeezy, which holds it; write to support@coii.io if you would rather we start that for you.
If you are in the EEA, the UK, Switzerland or a US state with a comprehensive privacy law, you have rights of access, correction, deletion, portability and objection over data held about you. For purchase data those are exercised against Lemon Squeezy as controller. Data held about you locally is deleted by deleting the folder and keychain item named in §2 — no one else has a copy to delete.
8. Changes
If this policy changes, the current version is at https://coii.io/privacy with a new effective date. A change that materially expands what the Software sends will be called out in the release notes of the version that introduces it, not buried here.
9. Contact
Riff Tech, Inc. seller address support@coii.io