Privacy policy

Effective 25 October 2026

Sotto is made by Luca Caruso in Melbourne, Australia (“we”). This policy explains what happens to your information when you use the Sotto app and the sottoapp.com.au service. The short version: your meetings stay on your devices and in your own iCloud. We only ever handle the Google Meet notes and transcripts you choose to send to Sotto, and only until your iPhone collects them.

What stays on your devices

Recordings, transcripts, notes, action items and the names you give voices are stored on your iPhone and synced through your own iCloud account using Apple’s CloudKit. We can’t see or access any of it.

• Microphone and speech. Sotto records only when you start a recording. Transcription runs on your iPhone.
• Notes. Notes are written by Apple Intelligence, either on your iPhone or on Apple’s Private Cloud Compute. Apple states that data sent to Private Cloud Compute is used only for your request and is not stored or made available to Apple. We never receive it.
• Voices. When you name a voice, Sotto saves a voice profile (a set of numbers describing how that person sounds) so it can recognise them later. Voice profiles sync through your iCloud and never reach us. You can forget any voice in Settings > Saved voices.
• Calendar and Reminders. With your permission, Sotto reads your calendar on your iPhone to remind you to record and to suggest attendees’ names, and adds action items to Reminders when you ask it to. None of this leaves your device.

What reaches our service

Two optional features send information to our service, which runs on Google Cloud in Sydney, Australia, with email received through Cloudflare.

• Google Meet notes by email. If you set Gmail to forward “Notes by Gemini” emails to your Sotto address (notes-…@sottoapp.com.au), we receive those emails. We keep Google’s meeting notes and Gmail’s forwarding confirmation code, and discard anything else. Each item is deleted as soon as your iPhone saves it, and anything not collected is deleted after 30 days.
• Google Meet transcripts. If you connect your Google account, we store a Google sign-in token and your Google email address so we can fetch your Meet transcripts every 15 minutes using read-only access to your Meet conference records. Transcripts are held for your iPhone the same way as emailed notes. Tapping Disconnect revokes the token at Google and deletes it from our service.

Sotto’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What we don’t do

Sotto has no accounts, analytics, advertising or tracking. We don’t sell or share your information, and we don’t use it to train AI models.

Your choices

You can delete any meeting in the app, which removes it from all your devices. Deleting Sotto’s data in Settings > your name > iCloud > Manage Storage removes everything Sotto has stored in iCloud. Turning off email forwarding in Gmail, or tapping Disconnect in Settings > Google Meet, stops anything new reaching our service. To ask about or delete anything we hold, email support@sottoapp.com.au.

Children

Sotto is not directed at children under 13, and we don’t knowingly collect their information.

Changes and contact

If this policy changes, we will update this page and its effective date. We handle personal information in line with the Australian Privacy Principles. Questions or complaints: support@sottoapp.com.au. If you are not satisfied with our answer, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.