Privacy Policy

For the SayBack Android and Wear OS app. Last updated 12 August 2026.

SayBack has no backend. There is no server operated by the developer, no account to create, and no analytics. The app talks only to the two services you provide your own API keys for, using those keys, from your device.

What the app captures

Microphone audio, only while you have started a listening session yourself (the Start listening button on the phone, or tap to listen on the watch). A persistent notification is shown for the entire time the microphone is in use. Audio capture stops when you stop the session.
Call context that you type into the app, such as your name or account details, which you choose to provide so replies can be accurate.

Where it goes

Audio is streamed to Deepgram for speech-to-text, over a connection authenticated with your own Deepgram API key. The app does not write the audio to disk and does not send it anywhere else.
Text is sent to OpenRouter, using your own OpenRouter API key, and on to the model provider you selected in Settings. That request contains the transcript of what was said and the call context you saved. It is used to produce the translation, the suggested reply, and a short topic label for the session.
Both services process this data under their own policies, which apply to your account with them: Deepgram and OpenRouter. Your choice of model determines which provider ultimately receives the text, so choose one whose data policy you accept.

What stays on your device

Your API keys are stored in EncryptedSharedPreferences (AES-256, backed by the Android Keystore) in the app's private storage. They are sent only to the service they belong to.
Conversation history (transcripts, translations, suggested replies, session topic labels and timestamps) is written to files in the app's private storage. It is not uploaded. You can delete all of it at any time with Clear history in the app, or by clearing the app's data or uninstalling it.
Data written to app-private storage may be included in Android's own backup of your device if you have that enabled in your Android settings.

What the app does not do

No analytics, advertising, tracking, or crash reporting SDKs.
No user accounts, no data sold or shared for advertising.
No audio recordings stored on the device or transmitted to the developer.
No collection of contacts, location, photos, or call logs.

Permissions and why

RECORD_AUDIO and FOREGROUND_SERVICE_MICROPHONE: capture speech during a session you started, with an ongoing notification.
SYSTEM_ALERT_WINDOW: draw the suggestion overlay above the call screen so you can read the reply without leaving the call.
INTERNET and ACCESS_NETWORK_STATE: reach Deepgram and OpenRouter, and detect whether the device is online.
POST_NOTIFICATIONS: show the microphone-in-use notification.

Your responsibility

Laws on recording or transcribing a conversation differ by country and by region, and some require the consent of everyone taking part. You are responsible for using the app lawfully where you are.

Children

The app is not directed to children and is not designed for use by them.

Changes

If this policy changes, the updated version will be posted at this address with a new date at the top.

Contact

Questions about this policy: info@ahdesign.website. Source code: github.com/H4mid2019/SayBack.