Privacy Policy

1. Introduction

Internet of Humans, Inc. ("IoH," "Ruune," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Ruune mobile apps, desktop app, web dashboard, the optional Ruune hardware recorder, our developer API and AI-assistant connector, and our websites and online store, together with all related cloud services (collectively, the "Services").

This Policy also covers people who are not Ruune users but whose information reaches us through a user, for example someone who speaks in a recording, writes to a user's connected mailbox, or attends a meeting a user links to a note. It also covers affiliates and creators we work with, and visitors to our websites.

By using the Services, you agree to the collection and use of information in accordance with this Policy. If you do not agree with this Policy, please do not use the Services.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address (required)
• Display name and username (optional, set by you)
• Authentication identifiers from sign-in providers you use (Apple ID, Google account ID)
• Encrypted authentication tokens needed to keep you signed in
• Your settings and preferences, including which features you have turned on

2.2 Recordings and Generated Content

When you record or import audio through the Ruune mobile app, desktop app, or hardware recorder, we process and store:

• Audio recordings you capture, and audio files you import from other apps
• Transcripts generated from your recordings, including live transcripts and dictation
• Speaker labels and the names you give speakers
• AI-generated summaries, action items, highlights, tasks, and translations
• Chat messages you exchange with Ask Ruune and other AI assistants in the Services
• Recording markers, including optional photos, and files you attach to notes
• Notes you import from other services (for example, Granola, Otter, Plaud, or Evernote exports)

You choose how long audio is kept in Settings → Audio Retention: Cloud and Device, Cloud only, Device Only (audio is removed from our servers after transcription), or Privacy Mode (audio is discarded after transcription). In Device Only and Privacy Mode, your audio is still uploaded and processed to produce the transcript, and your transcript, summary, and notes are kept.

2.3 Voiceprints (Speaker Recognition)

To label who said what, we create a numerical representation of each voice in a recording (a "voiceprint") and compare it with voices in your other recordings. This includes the voices of other people in your recordings, not only yours. Voices you have not named are kept as unnamed speaker profiles so the same person can be recognized across your recordings. Voiceprints are used only to label speakers in your own account. We do not use them to identify people outside your account, and we do not sell or share them. Voiceprints may be considered biometric information in some jurisdictions; see Section 7.3.

2.4 Memory

If you use Ruune Memory, we build a private, searchable index of your recordings and any mailbox you connect, so that you and the AI assistants you use can answer questions about your past conversations. Memory stores:

• Verbatim passages from your transcripts and emails, and search embeddings of them
• People, organizations, and places mentioned, with relationships between them, and the link between a person and their voiceprint
• Dates (such as birthdays and deadlines), commitments, plans, decisions, and recommendations
• Facts you tell Ruune to remember, and edits you make (for example merging or renaming people)

Your recordings and emails may contain sensitive details, such as contact information, addresses, or account numbers. Memory keeps the verbatim text it indexes. You can forget an individual recording or a whole mailbox from Memory, and deleting your account deletes your Memory.

2.5 Email (Gmail)

If you choose to connect a Gmail account to Memory, we use read-only access to:

• Store copies of messages in your Inbox and Sent mail, including senders and recipients, subject, message body, labels, selected headers, and attachment names, types, and sizes (not attachment contents)
• Sync new mail automatically, import the month before you connected, and import older mail (up to 12 months) when you ask for it
• When someone you correspond with reappears, import up to 100 of your older messages with that person so Memory has context
• Use AI to decide which threads are worth remembering. For threads it skips, we keep only the message headers, not the body.

We never send, delete, or change email in your mailbox. Disconnecting a mailbox stops syncing and deletes our access tokens, but keeps the mail already imported and what Memory learned from it, so you can reconnect later. Forget mailbox deletes the imported mail and everything Memory learned from it. See Section 13 for our Google API commitments.

2.6 Calendar and Reminders

If you choose to connect a calendar (Google Calendar, Microsoft Outlook, or your device's calendar), we read upcoming events, including the title, time, description, location, conference link, and attendee email addresses. We use them to auto-link recordings to meetings, show meeting reminders, and, if you turn on auto-sharing, email meeting notes to attendees. We do not modify your calendar. If you connect Apple Reminders or a task app, we add action items there for you (see Section 4.2). You can disconnect at any time in Settings.

2.7 Desktop App

The Ruune desktop app for macOS and Windows can:

• Record your microphone and your computer's audio output, so that both sides of a call are captured
• Detect meetings by checking which app is using your microphone, and prompt you to record. It does not record unless you start it.
• Read live captions (speaker name and words) from supported meeting apps during a call. Captions are stored on your computer.
• Heimdall on-screen memory (optional, off unless you turn it on). When enabled, the app reads the text of the window in front of you (app name, window title, web address, visible text, and messages in chat apps) continuously while it is on, and stores it in an encrypted database on your computer. Password managers, private or incognito windows, and password fields are excluded, and you can exclude other apps. Snapshots are deleted from your computer after 90 days by default.

On-screen text and captions stay on your computer except when you use them: when you ask Heimdall a question or request a draft, the relevant excerpts (redacted for obvious secrets) are sent to our servers and AI providers to produce the answer, and are not stored on our servers. If you choose to save a meeting or item to Memory, it is stored in your account like other notes. The desktop app does not take screenshots or record keystrokes.

2.8 Location

Find Ruune (iOS, optional, off by default). If you turn on Find Ruune, your iPhone records its precise location when your recorder connects or disconnects and when you open the map, and uploads it with a place name, so you can see where your recorder was last seen. This may use location in the background. Turning Find Ruune off stops collection. Apart from Find Ruune, we do not collect your location. Your phone may ask for location permission when you use Bluetooth or Wi-Fi transfer with the Ruune recorder, because the operating system requires it to scan for and join the recorder's network; we do not store location in that case. We do not tag notes with locations.

2.9 Ruune Recorder and Phone Calls

• When you pair a Ruune recorder, we store its serial number, model, name, firmware version, battery level, and when it was last connected.
• Recordings on the recorder are encrypted. We keep a copy of your recorder's encryption key in your account so recordings can be decrypted on any of your devices and recovered if your phone is lost. If a recording cannot be decrypted during sync, the encrypted file is uploaded to your account so we can recover it.
• Auto-record on call (Android, optional, off by default). When enabled, the app detects when a phone call starts and ends, and tells your Ruune recorder to record during the call. We do not read your call log, phone numbers, or contact names. The recording is processed like any other note. See Section 9 on consent.

2.10 Photos and Attachments

If you add a photo marker to a recording, attach a file to a note, or attach a screenshot to a support ticket, we upload and store those files on your behalf. Photo and camera access are only requested when you choose to add a photo.

2.11 Device, Usage, and Diagnostic Information

We automatically collect limited technical information to operate and improve the Services:

• Device model, operating system version, and app version
• Push notification tokens and an install identifier, so we can deliver notifications you have opted into
• Recorder sync and error events, and server logs, which include your account ID
• Usage counts used for plan limits and credits, such as minutes transcribed and AI requests

Our apps also keep diagnostic logs on your device (7 days on mobile). We do not include third-party analytics, advertising, or crash-reporting SDKs in our mobile or desktop apps.

2.12 Support and Other Submissions

When you contact us through Settings → Help & Feedback, our website, or by email, we store your message, any screenshots you attach, and your email address so we can respond. We also store product reviews, waitlist or presale sign-ups, and reports you submit through our whistleblower form.

2.13 Purchases, Subscriptions, and Shipping

Subscriptions bought in the iOS app are processed by Apple; other subscriptions and hardware orders are processed by our payment and e-commerce providers. We receive your name, email, shipping and billing address, order contents, discount or referral code, and transaction status. We share your shipping details with our fulfillment and shipping partners to deliver your order. We do not receive or store your full payment card number. If you receive or give a gift subscription, or use a referral link, we store who referred whom and any resulting credits or rewards.

2.14 Website Visitors and Marketing

On our websites we use cookies, browser storage, and similar technologies to:

• Measure site traffic, and record which campaign, referrer, or link brought you to us, including ad click identifiers and UTM parameters, which we attach to any order you place
• Measure and improve our advertising with the Meta Pixel, Reddit Pixel, and Google Ads tags. These tags let Meta, Reddit, and Google collect information about your visit, such as pages viewed, your IP address, and browser details. The Meta Pixel also records page views in our web dashboard (not your notes or other content).
• When you make a purchase, send hashed (not readable) email address and phone number, IP address, browser details, and order information to Meta and Reddit through their conversion services, so they can tell us which ads led to purchases
• Offer email and, if you opt in, SMS marketing. You can unsubscribe from email at any time using the link in any message, or reply STOP to any text.

You can block or delete cookies in your browser settings, and opt out of personalized ads through your Meta, Google, and Reddit ad settings. See Section 7.1 for California opt-out rights.

2.15 Affiliates, Creators, and Partners

If you apply to or join our affiliate or creator programs, we collect your name, email, social media handles and profile links, information about your audience, your payout details, a shipping address and phone number for any free device, sales and commission records, and tax forms where required. If you sign a contract with us electronically, our e-signature provider records your name, email, signature, IP address, browser details, and the time of each step. If you represent a business that integrates Ruune hardware, we collect your contact and billing details; data about that business's own end users is processed on its behalf under our agreement with it.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Services
• Transcribe your recordings, recognize speakers, and generate summaries, action items, and other AI content
• Build and search your Memory, and answer your questions in Ask Ruune and Heimdall
• Link notes to the calendar events you choose to connect
• Send content to the apps and services you connect, when you ask us to
• Deliver push notifications you have opted into, such as transcription-complete alerts
• Process purchases, ship orders, and run our referral and affiliate programs
• Send service emails and, if you opt in, marketing messages
• Measure the effectiveness of our advertising
• Respond to your support requests and recover recordings that fail to sync
• Detect, prevent, and address fraud, abuse, and security issues
• Comply with legal obligations

We do not use your recordings, transcripts, voiceprints, emails, Memory, notes, or chat content to train our AI models or the AI models of our providers. We test the quality of our AI features using content from our own team's accounts and synthetic data, not customer content. We do not sell your personal information. Advertising measurement is described in Section 2.14.

4. How We Share Information

4.1 Service Providers

We use carefully selected service providers, including large technology companies such as Google, Microsoft, and Apple, that process information on our behalf and only to run the Services. They fall into these categories:

• Cloud hosting and infrastructure — store and serve your account data, notes, Memory, and audio, and run our websites, servers, and logs.
• Speech and AI providers — transcribe audio, recognize speakers, translate, and generate summaries and answers. They receive the audio, transcripts, emails, notes, on-screen excerpts, and Memory content needed for a given request.
• Email and notification providers — deliver service email (including notes you share), marketing messages you have opted into, and push notifications.
• Payment, commerce, and shipping providers — process subscriptions, orders, and affiliate payouts, and fulfill and ship hardware orders.
• Electronic signature providers — for contracts with affiliates, creators, and partners.
• Sign-in providers — Apple, Google, and Microsoft, if you use them to sign in or connect an account.

A current list of our service providers is available on request at contact@iohumans.com.

Our AI and transcription providers are contractually prohibited from training their models on your content.

4.2 Apps and Services You Connect

When you connect another service, we exchange data with it only as needed for the feature you turned on:

• Read only: Gmail (Memory), and Google Calendar, Microsoft Outlook calendar, or your device calendar (meeting linking).
• Notes you send out: Notion, Slack, Google Drive, Microsoft OneNote, Dropbox, and Obsidian. We write note titles, summaries, and, if you choose, transcripts. For Slack, we list your channels, including private ones, so you can pick one.
• Action items you send out: Apple Reminders, Google Tasks, Todoist, TickTick, Things, and Linear.

Once content is in another service, that service's privacy policy applies to it, and deleting it from Ruune does not delete it there. You can disconnect any of these in Settings.

4.3 Sharing You Direct

• Shared notes. You can share a note with specific people or with anyone who has the link. People you share with can see the note and its transcript, and can save a copy to their own Ruune account. You can stop sharing at any time, but copies already saved remain with the recipients.
• Auto-share to attendees (optional, off by default). When enabled, we email the summary of a note linked to a calendar meeting to that meeting's attendees.
• AI assistants and developer access. If you connect an AI assistant (for example Claude or ChatGPT) to Ruune, or create an API key or webhook, that app can read your notes, transcripts, recordings, action items, highlights, and Memory, including imported email, and can make limited changes such as renaming a note or completing an action item. Webhooks send only note titles, statuses, and speaker names. The other app's privacy policy applies to what it receives. You can revoke access at any time in Settings → Developers.

4.4 Advertising Partners

Meta, Reddit, and Google receive the website and purchase information described in Section 2.14 and may use it for their own purposes under their privacy policies. We never share your recordings, transcripts, emails, Memory, or notes with advertising partners.

4.5 Legal and Business Transfers

We may also disclose information where required by law, in response to a valid legal request, to enforce our Terms, to protect the safety of any person, or in connection with a merger, acquisition, or sale of assets in which your data would remain subject to an equivalent privacy policy.

5. Data Storage and Security

We apply industry-standard safeguards to protect your data:

• All data is encrypted in transit using TLS
• Audio files, transcripts, and database rows are encrypted at rest
• Row-level security rules restrict access to your data to your authenticated account
• The desktop app's on-screen memory is stored in an encrypted database on your computer
• Access by IoH personnel is limited to authorized staff who need it to provide support, recover recordings, keep the Services secure, or comply with the law
• We regularly review our security posture and vendor controls

No system is perfectly secure. If we confirm a security incident involving your information, we will notify you by email within 72 hours of confirming it, and we will tell you what was affected, when, and what we have done about it. Where the law requires faster or additional notice, we will meet it.

6. Data Retention and Deletion

We retain your content for as long as your account is active, unless you delete it sooner or a setting below says otherwise. You control your data:

• Individual recordings and notes can be deleted at any time from within the Ruune app. You can also forget a recording from Memory.
• Audio is kept according to your Audio Retention setting (Section 2.2).
• Email imported from a connected mailbox is kept until you choose Forget mailbox or delete your account. Disconnecting alone does not delete it (Section 2.5).
• Speakers and voiceprints are kept until you delete the speaker, the recordings they come from, or your account.
• Desktop on-screen memory stays on your computer and is deleted after 90 days by default; you can change this or clear it in the desktop app.
• Your entire account and all associated data can be permanently deleted from the mobile, desktop, or web app via Settings → Danger Zone → Delete Account. This removes your notes, recordings, transcripts, voiceprints, Memory, imported email, chats, connections, devices, settings, and authentication record.
• You may also email contact@iohumans.com to request account deletion.

Deletion takes effect immediately. Backup copies are purged from our systems within 30 days. We may retain limited records where retention is required by law or for legitimate business purposes (for example, purchase, tax, payout, contract, and fraud-prevention records). Deleting your Ruune account does not delete content you have already sent to other services or shared with other people.

7. Your Rights and Choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your personal information and account
• Export or receive a portable copy of your information
• Object to or restrict certain processing
• Opt out of marketing communications and targeted advertising
• Withdraw consent where processing is based on consent

To exercise these rights, use the in-app controls described above or contact us at contact@iohumans.com. If you are not a Ruune user but believe your information is in a Ruune user's account (for example, your voice in a recording), you can also contact us, and we will help where we can. We will respond within the timeframes required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

7.1 California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act, as amended by the CPRA, California residents have the right to know the categories and specific pieces of personal information we collect, to request deletion, to correct inaccurate information, and to opt out of any sale or sharing of personal information. We do not sell personal information for money. Our use of advertising pixels and conversion services (Section 2.14) may be considered "sharing" for cross-context behavioral advertising. To opt out, email contact@iohumans.com with the subject "Do Not Sell or Share." We use sensitive personal information, such as voiceprints, precise location for Find Ruune, and the contents of email you connect, only to provide the Services you request. We do not knowingly sell or share the personal information of consumers under 16. We will not discriminate against you for exercising your rights.

7.2 EEA, UK, and Swiss Residents (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, our lawful bases for processing are: performance of our contract with you (providing the Services), your consent (where required, such as for optional calendar or mailbox access, Find Ruune, speaker recognition, and marketing), compliance with legal obligations, and our legitimate interests (for example, fraud prevention, advertising measurement, and improving the Services). International transfers to processors outside your region are covered by appropriate safeguards such as Standard Contractual Clauses.

7.3 Voiceprints and Biometric Information

Some laws (for example, in Illinois, Texas, and Washington) treat voiceprints as biometric information. We create voiceprints only to label speakers in the account of the user who made the recording, we do not sell, lease, trade, or otherwise profit from them, and we do not disclose them except to the service providers that compute them on our behalf or where required by law. We delete voiceprints as described in Section 6. Users are responsible for obtaining any consent required from the people they record (Section 9).

8. Permissions Requested by the Apps

The Ruune apps request operating-system permissions only when needed, and only for the purposes listed below:

• Microphone — to record audio notes, including in the background while a recording is running.
• Notifications — to alert you when a transcription completes, a meeting is starting, or your recorder needs attention. Prompted after sign-in, not at launch.
• Photo Library / Camera — only when you attach a photo marker to a recording or a screenshot to a support ticket.
• Calendar — only when you choose to link your calendar to auto-associate notes with meetings.
• Reminders — only if you choose to send action items to Apple Reminders.
• Bluetooth — only if you pair a Ruune recorder, for sync and settings.
• Local Network / Wi-Fi / Location — for Wi-Fi file transfer from a Ruune recorder, which the operating system requires location permission for; and, on iOS, for Find Ruune if you turn it on (Section 2.8).
• Phone state (Android) — only if you turn on Auto-record on call, to know when a call starts and ends.
• Audio files (Android) — only when you import an audio file.
• System audio recording (desktop) — to capture the other side of a call.
• Screen Recording, Accessibility, and Input Monitoring (macOS) — for reading meeting captions and Heimdall on-screen memory, and for Heimdall's keyboard shortcut. The app reads on-screen text; it does not record video or keystrokes.
• Automation (macOS) — only if you send action items to Apple Reminders or Things from the desktop app.

You can revoke any permission at any time from your device's system settings.

9. Recording Consent and Other People's Information

Important: Recording laws vary by jurisdiction. Some locations require all-party consent before recording a conversation, including phone calls. Ruune captures other people's voices, creates voiceprints of them, and may process information about them from your email and calendar. You are solely responsible for complying with applicable laws regarding recording and consent in your jurisdiction, including telling people when you record them and obtaining their consent where required. Ruune provides features that can help you manage consent, but we do not provide legal advice. If you have questions about recording laws in your area, consult a legal professional.

10. Children's Privacy

Our Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn we have collected information from a child under 13, we will delete that information promptly. If you believe a child has provided us with personal information, please contact us.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. We use appropriate safeguards, such as Standard Contractual Clauses where required, to ensure your information remains protected consistent with this Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page, updating the "Last updated" date, and, where required, notifying you in-app or by email. Your continued use of the Services after changes become effective constitutes acceptance of the updated Policy.

13. Google API Services User Data Policy

Ruune's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

13.1 Google API Scopes We Request

Across the Ruune mobile apps, desktop app, and web dashboard, we request only the following Google OAuth scopes, each only when you choose to use the feature it supports:

• openid, email, profile — used solely to identify you and create or sign in to your Ruune account, and to show which Google account is connected.
• https://www.googleapis.com/auth/calendar.readonly — used solely to read your Google Calendar events so Ruune can auto-link recordings to meetings, show meeting reminders, and, if you turn it on, share notes with attendees.
• https://www.googleapis.com/auth/gmail.readonly — used solely to import the Gmail messages described in Section 2.5 into your Ruune Memory, so that you can search them and ask Ruune about them alongside your recordings. We cannot send, delete, or change your email.
• https://www.googleapis.com/auth/drive.file — used solely to create documents in your Google Drive when you export a note. This scope only allows access to files Ruune creates, not the rest of your Drive.
• https://www.googleapis.com/auth/tasks — used solely to add your Ruune action items to Google Tasks when you connect it.

We do not request write access to your Google Calendar or Gmail, and we do not request access to Google Contacts or any other Google service.

13.2 Limited Use Compliance

Consistent with Google's Limited Use requirements, we:

• Use Google user data only to provide or improve user-facing features that are prominent in the Ruune product (specifically: Google Sign-In, calendar meeting linking, Gmail in Memory, Google Drive export, and Google Tasks).
• Do not transfer Google user data to others except as necessary to provide or improve those user-facing features (for example, to the AI providers listed in Section 4.1 that process your content on our behalf, or to an AI assistant or app you connect to your Ruune account yourself), to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users.
• Do not use Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
• Do not allow humans to read your Google user data, except: (a) with your affirmative consent for specific data; (b) as necessary for security purposes, such as investigating abuse; (c) to comply with applicable law; or (d) for internal operations, and only when the data has been aggregated and anonymized.
• Do not use Google user data, including the contents of your email and calendar events, to develop, improve, or train generalized or non-personalized AI or machine-learning models. This applies to our own models and to any third-party AI providers we use.

13.3 Revoking Access

You can disconnect Ruune from your Google account at any time from within the Ruune app (under Settings → Calendar, the Memory email settings, or the relevant export or task integration), or by visiting myaccount.google.com/permissions. Disconnecting immediately revokes Ruune's access. Email already imported into Memory is kept until you choose Forget mailbox or delete your account (Section 2.5).

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Internet of Humans, Inc.
2033 2nd Avenue
Seattle, WA 98121, United States
Phone: +1 (669) 245-5554
Email: contact@iohumans.com