Datenschutz
What stays, what leaves.
This is both the plain-language version and the formal one. Writing it twice would mean maintaining two statements of the same claim, and the day they disagree is the day one of them is a lie.
Nothing you say leaves your phone.
Recordings, transcripts, and everything worked out from them stay on your device. They are never uploaded, and they are never sent to Graduation Labs. There’s no account. There’s nothing to sign up for.
That is the whole claim, and we would rather state it narrowly and have it be true than state it broadly and have to explain ourselves later. So here is everything that does leave.
Leaves your device
Two things, and this is both of them.
Searching for a place
When you add a place you want to be reminded at, what you type is sent to Apple Maps while you type it — the same as searching in Maps itself. The address you pick is saved on this device and never uploaded. We never see the search or the result.
Legal basis: Art. 6(1)(b) GDPR — performing the function you asked for.
Anonymous usage statistics
We collect which features get used, so we can tell what’s worth building next. Nothing tied to you, and nothing from anything you said. This is the one thing that reaches us, and it cannot be traced back to a person.
Legal basis: Art. 6(1)(f) GDPR — our interest in knowing which parts of the app are worth continuing to build.
Everything else works with the radio off. If you never add a place, the app never makes a network request on your behalf at all.
Coming soon
Two things on the way.Coming soon
Cross-device sync through iCloud. It will go through your own iCloud account — encrypted, tied to you, with no copy we could read even if we wanted one. Worth saying plainly, because “syncs across your devices” almost always means “we keep it on our servers.” It will mean the opposite here.
Private Cloud Compute. Where something genuinely needs a larger model than a phone can run, it should run on Apple’s infrastructure — not ours — built so that even Apple cannot read what it processes.
This website
No cookies, no analytics, no fonts phoning home.
These pages are static files. There is no tracking here, nothing stored in your browser except the light-or-dark preference you set with the button in the corner, and that never leaves your machine.
The site is served by Vercel Inc., which records the usual server request data — IP address, time, page, user agent — for the purpose of delivering the page and keeping the service up. The site also loads a typeface from Google Fonts, which means your browser makes one request to Google to fetch it, and Google sees your IP address when it does. Both are Art. 6(1)(f) GDPR: serving the site, and setting it in the typeface it was designed in.
Verantwortlicher
Who is responsible, and what you can ask of them.
The controller for the purposes of the GDPR is Graduation Labs, Germany. The postal address and the responsible person are in the Impressum. Reach us at hello@graduationlabs.co.
You have the right to ask what we hold about you (Art. 15), to have it corrected (Art. 16), erased (Art. 17), or restricted (Art. 18), to receive it in a portable form (Art. 20), and to object to processing based on legitimate interest (Art. 21). You may also complain to a supervisory authority.
In practice the answer to most of these is short: what the app knows about you is on your device, and deleting the app deletes it. We hold no account, no profile and no copy of your library, so there is very little for us to hand over, correct or erase.