Privacy

TROVA.ME is one person making two iPhone apps. This page says what each app does with your data, in plain terms. It is short because the apps collect very little.

The data controller is Daniele Riccarand, acting as an individual, in Milan, Italy. For anything on this page, write to dan@trova.me.

This website

This site has no analytics, no cookies, no trackers and no contact form. Nothing you do here is recorded. It is a set of static pages served by GitHub Pages which — like any web server — logs requests at its own level; TROVA.ME neither receives nor stores those logs.

Minta

Minta records audio, transcribes it, and rewrites the transcript. In short: Minta keeps nothing of your recordings. They stay on your iPhone (and in your iCloud, if you turn on sync). They leave only for a job you ask for (to Minta Cloud after your yes), and Minta Cloud is only a passage. No ads, analytics or tracking.

On your iPhone

Recordings, transcriptions, write-ups, notes and your glossary stay on the phone until you delete them, and can end up in your device backups. Your Minta Cloud sign-in is in the iOS encrypted keychain. These also stay on the phone:

speaker recognition (off until you turn it on): it tells the voices apart (A, B, C…) with a model on the phone; no voice prints, no recognizing who people are. You type the voices’ names and they stay with the recording;
Spotlight: the name, date and first sentence of the write-up go into the iPhone’s search (it can be turned off in Settings);
Export: the .minta file (audio, texts and place) or the audio copy goes only where you send it; a podcast’s audio stays in Minta.

When data leaves

Only for a job you ask for: nothing starts without your tap. The first time for Minta Cloud, Minta says what is sent and to whom, and asks your permission. The format’s instructions, your glossary terms and the voices (letters or names) go with the text; for the progress of a series, the write-ups of the recordings you pick go instead of the transcriptions, with their title and date.

On the phone

The transcription, and the on-device engine offline: nothing leaves. The iPhone downloads the language models from Apple, with none of your data.

Apple Intelligence (Private Cloud Compute)

Online, the text goes to Apple’s Private Cloud Compute servers, which write the write-up: it is part of Apple Intelligence. Apple uses it only to answer, doesn’t keep it, nobody at Apple can see it, and independent experts can verify this. You can turn it off in Settings › Info › Privacy.

Minta Cloud

The text (or, for Whisper, a compressed copy of the audio) goes to Minta’s server in Frankfurt, which passes it to the provider doing the work: Anthropic (Claude) writes the write-ups; Groq transcribes with Whisper and, rarely, writes a backup write-up when Anthropic is unavailable (never with your own formats). They work on Minta’s behalf, in the United States, under the EU Standard Contractual Clauses, and don’t use the data to train their models: Groq keeps nothing, Anthropic deletes everything within 30 days. To show how many credits a write-up would use, Minta sends its server only the transcription’s length (or the recording’s duration), its language and the format you picked, never the text.

Podcasts

For a podcast you import, the phone asks Apple for the show’s details and downloads the feed, transcript and audio from the servers that host the podcast: they see the phone’s internet address, as with any podcast app. For an older episode its title also goes to Apple’s public search, and if you paste a web page’s link the phone reads that page. Minta Cloud has no part in it.

iCloud sync

Off until you turn it on. Your recordings go to your own iCloud, at Apple, not to Minta’s server. The texts are end-to-end encrypted; Apple keeps the audio like your other iCloud data. A podcast’s audio doesn’t go to iCloud: it downloads again from its link. Turning it off deletes nothing: what is in iCloud you delete from the iCloud settings.

Minta Cloud account

You sign in with Sign in with Apple: Minta gets only a code Apple creates, no name and no email. Apple handles payments: Minta never sees your payment details. It gets only your App Store country, which sets a pack’s credits, and doesn’t keep it.

What Minta’s server keeps, and for how long

Audio and texts: Never stored. The result stays in memory for at most 15 minutes, to recover a request interrupted by iOS.
Credit, free trial, charges and purchases, tied to your Sign in with Apple code: While you have the account; gone from backups within 24 hours of deleting it.
A random support code, shown in Settings › Minta Cloud: if you include it when you write to support, it is used only to find your account: While you have the account; gone from backups within 24 hours of deleting it.
Technical logs (durations, lengths, error codes; never texts, audio, names or emails): 30 days.
After you delete the account: accounting records no longer linked to you, with Apple’s transaction code for refunds: 10 years (tax obligations).
After you delete the account: a one-way code of your Apple identifier: Only to avoid a second free trial.

Support. If you write to support (dan@trova.me), your email is read by an AI tool (Anthropic’s Claude, used with training on data turned off) that prepares a draft reply. A person reads, edits and sends the draft: no reply is sent automatically and the tool makes no decision about your account. If you include your support code, the tool also reads your credit balance and history; never the content of your recordings, which the server does not have.

Why we process it. To give you the service you ask for (contract); accounting records because the law requires it; the trial’s anti-abuse code for our legitimate interest in preventing abuse.

iPhone permissions. Microphone to record, notifications for alerts, Live Activities to show on the Lock Screen the recording in progress or being worked on, with its name (it stays on the phone).

Your rights. You can ask to see, correct or delete your data, or object to its use, by writing to dan@trova.me; you delete your account yourself in the app (Settings › Minta Cloud; any remaining credit is lost). You can also contact your data protection authority (in Italy, the Garante privacy, garanteprivacy.it).

Pronto

Your list lives on your iPhone. There is no Pronto account and no Pronto server.

To understand what you dictate, Pronto sends what you said — together with the tasks already on your list, so that “move the dentist to Thursday” has something to refer to — to the AI provider you chose. That exchange happens directly between your iPhone and the provider, with your own key, under your own account and their terms. TROVA.ME is not part of it and never sees the key, which is stored in the iPhone’s keychain. If you never configure a provider, nothing is sent anywhere.

Children

Neither app is meant for children.

Changes

If any of this changes, this page changes with it, and the date below changes too.

Last updated: 2 November 2026