CanaryVolt — Data Handling & Trust

CanaryVolt provides meeting notes, live assistance, study support and speaking tools. This page describes the release with shared prompts, optional cloud notes and Astra.

Ephemeral by default, saved by choice

Capture begins when the user starts a session. Session audio is transcribed through our proxy; recent context is sent to the selected AI provider for requested assistance. Session-end summaries may require the final transcript even when saving is off.

Audio and camera images are not stored on CanaryVolt's servers. Notes and transcripts are stored there only with explicit account-save consent. Signing in does not upload a meeting. Local saves and exports are separate choices.

Saved account meetings sync between signed-in devices and support search, export and deletion. They are encrypted at rest with a server-held key, protected in transit, and isolated by account. This is not end-to-end encryption. Deletion safeguards reject stale writes so deleting the library does not silently restore it from an older client. Questions across meetings use only explicitly selected saved material and require agreement to model processing. We retrieve a bounded set of passages, show citations to the source text and reject results when the library changes while a question is running. Questions and generated answers are not automatically saved.

Clear capture and no voiceprints

The user controls session start and end. Hiding the desktop panel changes the window, not the session. Visible session controls and macOS's microphone indicator disclose capture to the user. Users must obtain any consent required from participants.

ME and THEM distinguish audio channels. We do not create voiceprints or identify people biometrically. We do not add bots to meetings or provide an anti-capture setting that conceals the overlay from screen sharing.

Our Terms prohibit assistance in restricted evaluative settings. The server also prepends an integrity instruction to AI requests covering visible live graded assessments. This is a model instruction, not a guarantee that every prohibited use can be detected.

Providers and credentials

Astra requests go to OpenAI; Claude requests go to Anthropic. Deepgram transcribes audio, Cartesia supplies cloud speech, and supported script playback uses Apple's system speech. Fly.io hosts the service, WorkOS manages authentication, Stripe handles website billing and representative payouts, and Resend supports transactional email.

Provider API keys stay on the proxy. Customers sign in through WorkOS on both apps; passwords are not provided to CanaryVolt. Client credentials use operating-system-protected storage. Account and plan controls are enforced on the server.

OpenAI Responses storage is disabled. This does not mean zero retention: provider abuse-monitoring and cache rules can still apply. We set Deepgram's model-improvement opt-out. See our Privacy Policy for data categories and provider disclosures.

Operational records

We log metadata needed for usage, costs, reliability and security: identifiers, timestamps, request purpose, model and prompt revision, token/cache counts, connection and audio duration, latency and status. We do not intentionally log conversation text, prompts, documents, images, generated answers or provider error bodies.

Financial and tax records can remain after an account closes. Cloud deletion does not erase a user's separate exports or all historical backups immediately.

Claims we can support

We do not claim SOC 2 certification, end-to-end encrypted cloud notes, guaranteed zero provider retention, or a production agreement we have not verified. Signed-build microphone routing, clean-device installation and real-meeting performance must be verified on actual hardware before release.

Privacy requests and questions: hello@canaryvolt.com.