Privacy Policy

What this covers

The Fennec app for iPhone, and this website. There is no Android version, no web version of the app and no account system, so nothing described on this page has a second copy of itself living somewhere else.

What is collected: nothing

No accounts, no login, no sync, no sharing. No analytics, no telemetry, no crash reporting, and no advertising code of any kind. There is no Fennec server, so there is nowhere for your memories to be sent, even by mistake. We do not know how many people use the app, which screens they open, or whether they opened it today.

Where your memories live

In storage that belongs to Fennec on your iPhone, and nowhere else. Your notes, transcripts, titles, tags and places sit in a database encrypted with AES-256, and the app refuses to open at all if it cannot open that database encrypted. The key is kept in the iPhone Keychain, marked so that it never travels in a backup.

Photos and voice notes are not encrypted one by one

This is the part a policy would usually leave out, so here it is plainly. Your photos and voice notes are kept as ordinary files inside Fennec's own storage. They are not uploaded anywhere, and no other app can reach into that storage, but they are not individually encrypted the way the database is.

What that means for your iPhone backup

Fennec does not yet mark those files as excluded from your iPhone's backup. If you back the phone up to iCloud, the plain photo and voice files can be copied into that backup along with everything else the app stores. That backup is yours, under your Apple account and Apple's encryption rather than ours, but we would rather tell you than let you assume otherwise. Closing this gap is on the list, and this page will change when it does.

The database is a different story. Its key never leaves the Keychain and never travels in a backup, so a copy of the database sitting in one cannot be read.

The three times Fennec uses the network

Fennec reaches the internet in three places, and only three.

• Map tiles. The map draws real streets, and those tiles are fetched from Apple as you look at them.
• Model downloads. The models that describe your photos and write your titles are fetched once from huggingface.co while you are setting the app up, and so is the model that transcribes your voice, unless you choose your iPhone's own dictation instead. Fennec will not let you save a memory until the ones it needs are on the phone.
• Turning coordinates into a place name. When a memory knows where it happened, those coordinates go to your iPhone's own map service so it can hand back a street and a city.

That is the whole list. Your recordings, photos, transcripts and notes are not part of any of those three requests, and nothing else the app does goes online.

The thinking happens on your phone

Transcription, photo captions, and the titles and tags Fennec writes for you are all produced on the phone itself, by models stored on the phone. Nothing you say or photograph is sent to a model somewhere else. That is exactly why the download above exists: the models have to be on the device, because the device is where they run.

Taking it with you, or deleting it

Export builds a single zip file, with your notes and transcripts as JSON and Markdown and your photos and voice notes as ordinary files, and hands it to the iPhone share sheet. Where it goes next is your decision. Delete all removes every row in the database and every file on disk. There is no copy anywhere else for anyone to delete, because there was never a copy anywhere else.

What this page does not claim

You will not find a compliance badge here, or a named data controller, or a retention period, or a list of the companies that process your data. Every one of those describes an organisation that is holding something of yours. Fennec holds nothing of yours. If that ever changes, this page changes with it.

Changes to this page

If the app starts doing something this page does not describe, the page is updated in the same release. The date at the top is when it last changed.

Getting in touch

If anything here does not match what you see the app doing, please write and tell us. One of the two is wrong, and we would like to know which one.