Distillo - Privacy Policy


Last Updated: June 11, 2026

Effective Date: June 11, 2026


Distillo respects and protects your privacy. When you use Distillo (hereinafter referred to as "the Software" or "App") services, we will collect, store, use, and share your personal information in accordance with this Privacy Policy (hereinafter referred to as "this Policy"). This Policy is closely related to your use of the Software services. We recommend that you carefully read and understand all the contents of this Policy before using the Software's products or services. If you have any questions, comments, or suggestions about this Policy, please contact us at [email protected] or through the in-app feedback feature. If you do not agree with any content of this Policy, please stop accessing and using the Software immediately.

1. How We Collect Personal Information

To provide you with our services, improve service quality, ensure account security, and comply with applicable laws, we collect information in the following circumstances:

(1) Device Information

When you use Distillo, we collect device information to ensure the safe and stable operation of our services, including: device model, operating system version, unique device identifiers (IDFA/IDFV), IP address, software version, network type, and operation logs. This information is necessary to provide our services and ensure product functionality.

(2) Account Registration and Login

You can create an account using your email address or authorize login using a third-party account (such as Apple ID). When using third-party login, we obtain basic profile information (avatar, nickname) from the third-party platform to set up your account.

(3) Payment Information

Payment processing is handled entirely by Apple through the App Store. We do not collect or store your payment card information. We only receive confirmation of successful transactions from Apple to credit your account with purchased Credits.

(4) Audio and Content Data

When you use our transcription services, we collect:

Audio files you record or upload for transcription

Transcription results generated from your audio

Meeting notes and annotations you create

AI chat questions you ask about your transcriptions

(5) Device Permissions

We request the following permissions only when needed for specific features:

Permission Purpose
Microphone Record audio for transcription
Photo Library Import audio/video files
Media Library Import audio from Apple Music
Notifications Show recording status and transcription progress
Files Import files from Files app or iCloud Drive
Bluetooth Connect Bluetooth audio devices

You can manage these permissions in your device's Settings at any time.

2. How We Store Your Data

(1) Storage Location

Your data is stored on Amazon Web Services (AWS) S3 servers located in US East (Ohio) region (us-east-2), United States. All data is encrypted both in transit (TLS/SSL) and at rest (AES-256 encryption).

(2) Data Retention

We retain your data as follows:

Audio files: Retained until you delete them or delete your account

Transcription results: Retained until you delete them or delete your account

Meeting notes: Retained until you delete them or delete your account

Account information: Retained until you delete your account

Service logs: Retained for up to 90 days for troubleshooting purposes

(3) Data Deletion

You can delete your audio files at any time through the App. Once deleted, the audio file will be permanently removed and cannot be recovered, played, or transcribed. You can also request complete account deletion through Settings, and we will delete all your data within 14 days.

(4) Security Measures

We implement industry-standard security measures including:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)

• Access controls and authentication

• Regular security assessments

• Incident response procedures

In the event of a data breach affecting your personal information, we will notify you via email within 72 hours of becoming aware of the incident, and report to relevant authorities as required by law.

3. How We Use Your Data

We use your information to:

• Provide audio transcription services

• Generate AI-powered summaries and meeting notes

• Respond to your AI chat questions about your content

• Maintain and improve our services

• Ensure account security and prevent fraud

• Comply with legal obligations

4. Third-Party Service Providers

We use the following third-party services to provide our features. Only AssemblyAI acts as a data processor on our behalf:

Service Provider Data Shared Purpose Role
Cloud Storage Amazon Web Services (AWS) Audio files, transcriptions, notes Secure data storage in US East (Ohio) Infrastructure provider
Speech-to-Text AssemblyAI, Inc. Audio files Convert audio to text Data Processor
AI Services OpenRouter / Google (Gemini) Transcription text, user notes, AI chat questions Generate summaries, keywords, answer questions API service provider

Important Notes:

AssemblyAI processes your audio solely to provide transcription and does not retain audio data after processing is complete.

AI Services (OpenRouter/Gemini): We send only text data (transcription results, your notes, and your questions) to generate AI responses. Your data is not used to train AI models.

• All third-party providers are contractually bound to protect your data and use it only for the specified purposes.

Third-party privacy policies:

AWS Privacy Notice

AssemblyAI Privacy Policy

OpenRouter Privacy Policy

Google Privacy Policy

5. Cookies and Tracking

We do not use cookies, tracking technologies, or analytics SDKs in our App. We do not track your behavior across other apps or websites.

6. Your Rights

You have the following rights regarding your personal data:

Access: Request a copy of your personal data

Correction: Request correction of inaccurate data

Deletion: Delete your audio files, notes, or entire account

Portability: Export your data in a common format

Withdraw Consent: Revoke permissions through device Settings

To exercise these rights, use the in-app Settings or contact us at [email protected]. We will respond within 30 days.

7. International Data Transfers

Your data is stored and processed in the United States (AWS US East Ohio region). If you are located outside the United States, by using our services you consent to the transfer of your data to the United States.

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection for international data transfers.

8. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have inadvertently collected information from a child under 13, we will promptly delete that information. If you believe a child under 13 has provided us with personal information, please contact us at [email protected].

For users in the EEA, the age limit is 16 years unless your country has set a lower age of consent for data processing.

9. GDPR Rights (For EEA Users)

If you are in the European Economic Area, you have additional rights under GDPR:

Legal Basis: We process your data based on: (a) your consent, (b) performance of our contract with you, (c) compliance with legal obligations, or (d) our legitimate interests in providing and improving our services.

Right to Object: You may object to processing based on legitimate interests.

Right to Lodge a Complaint: You may file a complaint with your local data protection authority.

Data Protection Officer: Contact us at [email protected] for data protection inquiries.

10. California Privacy Rights (CCPA)

If you are a California resident:

Right to Know: Request what personal information we collect and how we use it.

Right to Delete: Request deletion of your personal information.

Right to Opt-Out: We do not sell your personal information.

Non-Discrimination: We will not discriminate against you for exercising your rights.

11. Account Deletion

You can delete your account through Settings > Delete Account in the App. You will be asked to verify your identity by signing in with Apple, after which your account is scheduled for permanent deletion with a 14-day grace period (sign in again within 14 days to cancel the request). Upon deletion:

• All your audio files, transcriptions, and notes will be permanently deleted

• Your account information will be anonymized and removed

• Your Sign in with Apple authorization for this App will be revoked

• Any remaining Credits will be forfeited

• Deleting your account does not cancel an active App Store subscription — please cancel it in Settings > Apple ID > Subscriptions

• This process is completed within 14 days

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through in-app notifications or email. Your continued use of the App after such notification constitutes acceptance of the updated Policy.

You can view the current version of this Policy in Settings > Privacy Policy within the App.

13. Dispute Resolution

This Policy is governed by the laws of the State of Delaware, United States. Any disputes will be resolved through binding arbitration in Delaware, except where prohibited by law.

For EEA/UK users: Nothing in this Policy affects your statutory rights under applicable consumer protection laws, including your right to bring claims in your local courts.

14. Contact Us

If you have questions about this Privacy Policy or our data practices:

Email: [email protected]

In-App: Settings > Help & Feedback > Submit Feedback (requires login)

We will respond to your inquiry within 15 business days.