Your data in PhraseFold for iPhone

Technical explanation for iOS 0.1.0 (5), reviewed on 7 September 2026. This supplements the general PhraseFold privacy notice; it does not replace it or change the accepted document revision of 24 August 2026. TestFlight review does not mean Apple has verified every statement here.

At a glance

With “On iPhone” selected, speech recognition, text extraction from documents and images, answers, translation and summaries run on the phone using installed components. Starting these functions does not itself send your materials to the developer. Initial model downloads need internet access. Separate data routes include selected tasks sent to your paired Mac, sharing, system backups, support and Apple’s TestFlight service.

What is stored on your device

App storage holds microphone recordings and copies of selected files, extracted text, transcripts and timestamps, translations, summaries, chats, dates and processing state. The Mac queue stores selected requests, their status and results. The app also keeps preferences, an unfinished-recording marker, downloaded models, engine caches and temporary export files.

For the iOS library and queue, the app requests system file protection until the first unlock after the device starts. This is not a separate encrypted vault with its own password or a promise of identical protection for every copy. Documents-folder files are accessible through iOS file-sharing facilities, including Files and file sharing with a trusted computer.

After the first unlock, this protection class lets the app access those files even when the screen is subsequently locked. Apple’s description of this protection class.

Microphone, import and speech playback

Microphone permission is requested when you start recording. A recording you started can continue in the background with the system microphone indicator; you can stop it in the app. Import operates on files you choose in the system picker. Retrieving a file from a cloud provider follows that provider’s and iOS settings. Speech playback uses iOS system voices; missing voices are installed through system settings.

You can change microphone and local-network permissions in iPhone Settings. Denying local-network access does not disable processing on the iPhone itself.

Model downloads and other network activity

When you choose to install models, the app downloads packages from Hugging Face over HTTPS; that service’s delivery infrastructure may also be involved. The recipient receives the model-file request and connection information, including the connection’s IP address. The app does not attach chats, recordings or documents to this download request. App downloads disallow cellular access, use an ephemeral network session and check file size and SHA-256. This checks package integrity; it is not an independent guarantee that a model is safe.

The reviewed source for this version contains no separate developer analytics or advertising service receiving local-library content. The app manifest declares no tracking domains or collected data categories. This limited description of the app does not claim that the website, Apple, Hugging Face or recipients you choose process no data. Website and support processing are covered by the general notice.

If you choose your Mac

You enable pairing using a code from your Mac. Local discovery exposes a generic PhraseFold service name and pairing identifier, not the secret in the code. Messages require MultipeerConnectivity encryption plus authenticated encryption using CryptoKit. The secret is kept in the system Keychain, restricted to this device and available when unlocked. Do not publish the code or include it in feedback or screenshots.

Choosing “On my Mac” sends the selected question, relevant material and recent conversation excerpts, instructions and task identifiers; a question about an image can include a reduced-size image copy. Translation and summary tasks send the selected text. In this route, recording, transcription and speech playback stay on iPhone; the whole library is not automatically synchronized. The Mac uses its installed local engine, not a cloud route. Pairing does not grant terminal, browser or arbitrary-file access on the Mac.

Selected tasks are saved first on iPhone and, once accepted, in the Mac queue. The Mac can continue accepted work after the phone disconnects and return results on reconnection. If auto-connect is enabled, opening the app can synchronize saved selected tasks and deletions. Open both apps nearby to connect; connections across external networks are not supported. The verified compatible Mac is build 72. Public Mac build 66 should not be treated as compatible with this queue.

The app excludes its downloaded-models folder from system backups. The library, materials and queue have no such exclusion: they may be included in device backups according to iOS settings and the backup method you choose. This is not a PhraseFold-operated cloud sync service.

Export creates a temporary TXT or SRT file inside the app. Choosing a recipient in the share sheet sends a copy to that app, folder or service, under its rules. PhraseFold cannot remove copies already shared or older backups.

Deletion and disconnecting

“Storage and history” lets you delete chats and materials and clear unused files. Archiving hides an item from the current list; it does not delete it. Deleting a material leaves existing chat messages in place but removes their material link. When deleting chats, removing related attachments is a separate choice; materials still used by other chats are retained.

Deleting all chats and materials clears the local library, corresponding queue content and temporary exports, but retains models, preferences and pairing. Content-free deletion records remain so an old result cannot restore deleted content. A corresponding Mac-task deletion is sent on the next connection; its Mac copy may remain until then. Wait for synchronization confirmation before forgetting the pairing. File-removal failures are shown in the app, and cleanup can be retried.

“Forget pairing” removes the local connection secret; it does not itself clear your library or the other device’s queue. To disconnect both devices, repeat it on both. Do not rely on uninstalling the app as confirmed deletion of its Keychain secret. Recipient copies, backups and Apple-held data have separate deletion controls; the app does not promise secure physical erasure of every storage medium.

TestFlight and feedback

When testing through TestFlight, Apple automatically collects and shares crash and usage data with the developer, including app version, device model and OS version. Name and email visibility depends on the invitation route; they are not displayed to the developer when you join only through a public link. Feedback and screenshots you submit are also shared through Apple. Remove personal material and pairing codes before sending. Apple’s details and retention practices are in TestFlight & Privacy.

The developer uses received reports to investigate faults and improve the app. Developer-side request handling and retention are covered by the general privacy notice. Deleting history on iPhone does not delete a TestFlight report. For data enquiries and report-deletion requests, contact gneuro@djbloknote.com. Avoid sending source recordings or documents when an anonymized example can explain the issue.