How privacy works here
Everybody writes the same things about privacy, and none of it can normally be checked. So this page is not promises but mechanics: where things are kept, where the internet is used, and three things you can verify yourself without taking our word for any of it.
Three checks that take a minute
These first, because everything else on this page is words, while these are facts you get on your own phone.
1. Turn on airplane mode
After the speech model has been downloaded once, the app works fully offline. Cards, notes, reminders, transcription of recordings — all of it keeps working with no network. If data were going to a server, airplane mode would break the app.
2. Look at the data usage
Android settings → apps → Sales Assistant → mobile data. You will see traffic while the speech model downloads, and next to nothing after that. No background chatter, no telemetry being sent.
3. Export your history and open the files
Export writes everything into a folder you choose as plain Markdown: a file per client, a file per call, note and message. Open them in any text editor. That is all of your data, in a form we can neither take back nor lock.
The format of that folder is documented and open, and there is a Python reader for it that needs no app at all: github.com/TimurTsedik/obsidian-writer-and-reader. That turns "your data stays yours" into something you check in a couple of minutes.
There is no server — that is architecture, not a policy
"We do not look at your data" implies the data sits somewhere and someone could look at it. Here it is different: the product has no server side. There is nowhere to look and nobody to look.
That cuts against us too: we cannot restore your history if you lose the phone. That is why the app has export — it is your insurance, not ours.
The one time the app uses the internet
The app goes online for exactly one thing: to download the speech recognition model. It is OpenAI's Whisper in the whisper.cpp build, pulled from huggingface.co/ggerganov/whisper.cpp — the official repository, published by the author of whisper.cpp, under the MIT licence. It downloads once; after that recognition runs on the phone itself and audio is never transmitted.
Settings offer five models, a ladder by how much your phone can take: from tiny at 32 MB to large-v3 at 1.08 GB. Worth knowing if you are downloading over mobile data.
Each model ships with a checksum inside the app, and the downloaded file is verified against it. That guards against more than a corrupt download: the checksum is baked into the app rather than arriving with the file, so the model cannot be swapped in transit.
There are no other addresses in the app. The WhatsApp and Telegram links you see in a client card are not network calls — they tell the phone to open the corresponding app, exactly as if you had tapped the link yourself.
Where things are kept
- Call recordings
- The app does not record calls. It finds the files your phone's own recorder made, in a folder you point it at, and makes its own copy. The copy exists so the recording does not vanish when you clean out the recorder's folder. It lives in the app's private storage, where other apps have no access. Delete a client and its copy goes with it. Uninstall the app and everything goes.
- The original recordings
- Stay where the recorder left them. The app copies rather than moves, and never deletes files that belong to other apps. If you delete a client and want the recording gone everywhere, you have to delete the original yourself.
- Transcripts, notes, cards, reminders
- In the app's private storage on the phone.
- Messages from messengers
- Reach the card through notification access, which you switch on yourself. The text is stored on the phone, next to the rest of that client's history.
Permissions, one by one
- Microphone
- Only for the voice summary: you say the outcome after a call, the app turns it into text. Refuse it and you type the summary instead.
- Phone state
- To notice that a call has ended and offer to record the summary. Refuse it and summaries are added by hand.
- Notifications
- To show reminders. Without it reminders are only visible inside the app.
- Notification access
- This is how messages from WhatsApp, Telegram and SMS reach a client card. A separate permission, switched on by hand in system settings. Leave it off and the app still works, there is simply no conversation in the card.
- Exact alarms and start on boot
- So a reminder fires on time and survives a restart of the phone.
- Internet
- To download the speech model. Once.
What the app never asks for
This is arguably more telling than the list above.
- Access to your storage. Not broad access, not any access. You pick the recordings folder through a system dialog and hand the app exactly that one folder — it can reach nothing else.
- Access to your contacts. The app holds no address-book permission at all. When you add a client, the system contact picker opens and the app receives only the person you picked.
- Call log and SMS history. The app does not read your call history.
Android backups
Android can, without the developer doing anything, send an app's data into a Google Drive backup. For an app that keeps recordings of client conversations, that would contradict everything above.
So automatic backup is switched off: allowBackup=false in the manifest. Your cards, notes and recordings do not travel to Google's cloud.
No analytics, no ads
The app contains no analytics, crash-reporting or advertising libraries. Not "disabled" — not present: no Firebase, no Crashlytics, no counters. The honest flip side is that we cannot see where the app crashes, and only learn about it from your emails.
What this does not protect you from
A page that only says good things reads like an advert. So, the limits.
- Notification access is broad by nature. Android cannot hand an app the notifications of one messenger only — the system shows a listener all of them. Our app discards anything that did not come from the messengers you configured, on the very first line, but the permission you grant is still a broad one. That is the price of having conversations land in the card, and you are entitled to refuse it.
- An unlocked phone in someone else's hands. If a person is holding your unlocked phone, they see everything you see. No architecture helps with that — a screen lock does.
- Originals outside the app. We answer for our copy. The file sitting in the recorder's folder is the recorder's business.
- The legality of recording calls. The app does not record calls, but it files away recordings your phone made. Complying with local call-recording law stays with you.