Libreto Privacy Policy

Who we are

Libreto is made by JC Mobile App Studio LLC, a one-person studio based in Pennsylvania, USA. We are the company responsible for the app. In this policy, "we" and "us" mean JC Mobile App Studio LLC. You can reach us at [email protected].

Short version

• No analytics, no ads, no trackers, no third-party SDKs.
• We do not run a server for Libreto. We never receive your documents or drawings.
• Your library lives on your device and, with iCloud Sync (on by default, and you can turn it off), in your own private iCloud account. We cannot see it.
• Handwriting recognition, OCR, audio transcription, and Libreto's AI features run on your device with Apple's frameworks. No outside AI service is used.
• Sign in with Apple is optional. Your name and email stay on your device.
• We never sell your data or use it for advertising.

What we receive vs. what third parties receive

What reaches us: nothing. Libreto has no server of ours, no analytics, and no crash reporting service. If you email us, we receive your email and whatever you choose to include in it.

What Apple handles, under Apple's own policies:

• iCloud (CloudKit), if iCloud Sync is on, stores your synced library in your private iCloud database.
• Sign in with Apple, if you use it.
• App Store and StoreKit, for Libreto Premium purchases.
• Image Playground, Apple's image generator, if you use it to make a sticker or cover. Apple runs it. If your device offers ChatGPT styles in Image Playground and you choose one, Apple's ChatGPT integration handles that request under Apple's and OpenAI's terms, not ours.
• Siri, Shortcuts, and Spotlight, if you use them with Libreto.

Apple's privacy policy: apple.com/legal/privacy. No other third party receives any data from Libreto.

Where your data lives

Your documents, notebooks, planners, journals, sketches, whiteboards, PDFs, stickers, signatures, templates, flashcards, and settings are stored on your device.

iCloud Sync is on by default. It syncs your library through Apple's CloudKit, in your own private database, to your other devices signed into the same Apple ID. That includes PDFs, pages, images, sketches, saved signatures, and audio transcripts. Apple encrypts it in transit and at rest, and end to end when you turn on Advanced Data Protection. We cannot access it. You can turn iCloud Sync off in Libreto's Settings; the change takes effect the next time you open Libreto. Turning sync off does not delete what is already in your iCloud.

Audio recordings are saved on the device where you recorded them and are not synced. Their transcripts, if you make them, are synced with your library.

Backups you make. You can export a backup of your library and save it wherever you choose with the share sheet. Where iCloud Drive is available to Libreto, you can also save backup snapshots, manually or automatically once a day, to a Libreto folder in your own iCloud Drive; the app keeps the 7 most recent. Files you export or share go wherever you send them.

Spotlight. Libreto adds your documents to your device's Spotlight search: names, types, and tags, and with Premium, text Libreto has read from your documents, including recognized handwriting. The Spotlight index stays on your device.

Handwriting, OCR, transcription, and AI

• Handwriting search, handwriting to text, and PDF OCR use Apple's Vision framework on your device.
• Audio transcription uses Apple's on-device speech recognition (iOS 26 and later). The system downloads the language model once, then transcription runs on your device. Your recordings are not uploaded.
• AI features (summaries, questions about a document, explanations, flashcards, quizzes, suggested titles and tags, and lecture digests) use Apple's Foundation Models running on your device (iOS 26 and later with Apple Intelligence). Libreto does not use Private Cloud Compute or any server model.

Libreto does not use any third-party AI service. Your handwriting, text, recordings, documents, and images are never sent by Libreto to OpenAI, Anthropic, Google, or any other AI provider. (Image Playground's optional ChatGPT styles, described above, are an Apple feature that you choose to use.)

Sign in with Apple and account deletion

Signing in is optional; Libreto works fully without it. If you sign in with Apple, Apple gives Libreto an anonymous user identifier and, the first time only, the name and email you choose to share (which can be a private relay address). Libreto stores these in your device's Keychain to show your account in Settings and to link Premium purchases to your Apple ID so they restore on a new device. For that link, a value derived from the identifier is attached to your purchase in Apple's StoreKit. None of this is sent to us.

You can delete your account in Settings. That permanently erases your library on this device, removes it from your private iCloud database if sync is on, deletes Libreto's files on the device, and clears the Sign in with Apple identity. You can also stop using Sign in with Apple for Libreto in your Apple ID settings.

Permissions Libreto may request

• Camera, only to scan documents. Scans are processed on your device.
• Photos, only to import images you choose into your documents. Your originals are not changed.
• Microphone, only while you record audio alongside your notes.
• Face ID / Touch ID, only when you turn on App Lock. Your biometric data never reaches the app.

Data retention

Your library stays on your device, and in your iCloud if sync is on, until you delete it, delete your account in the app, or delete the app. Deleting the app does not remove the iCloud copy; delete your account in the app first, or remove Libreto's data in your device's iCloud settings. We hold no copy, so there is nothing on our side to retain. If you email us, your message stays in our email inbox until we delete it, and we will delete it sooner if you ask.

Sale, sharing, and targeted advertising

We do not sell personal data. We do not share it for targeted advertising. Libreto has no ads and no advertising SDK, does not use your advertising identifier, and does not track you across other apps or websites.

Subscriptions

Libreto Premium is sold through Apple's App Store. Apple handles the payment; we never see your card. The app reads your purchase status from StoreKit and keeps it on your device.

Your privacy rights

Depending on where you live (for example California, Colorado, Connecticut, Virginia, Texas, Oregon, Indiana, Kentucky, Rhode Island and other US states, or the EU/UK), you may have the right to access, correct, delete, or get a copy of personal data, and to opt out of targeted advertising, sale, or profiling. Many of these laws may not apply to a studio our size, but we honor these requests from everyone.

Because your Libreto data is on your device and in your own iCloud, the fastest way to see, export, or delete it is in the app. For anything else, email [email protected]. We respond within 45 days, and we will never treat you differently for asking. If we decline your request, you can appeal by replying to our answer with "Appeal", and we will respond within 45 days (60 days at most, where the law allows). If your appeal is denied, you may contact your state attorney general.

Children

Libreto is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has sent us information, contact us and we will delete it.

International users

We do not hold any Libreto data. If you email us, your message is handled in the United States. Data you sync to iCloud is stored by Apple under Apple's policies.

Security

Your library is protected by Apple's platform security: app sandboxing, your device passcode, and data protection encryption, plus Apple's iCloud encryption when sync is on. Libreto adds an optional Face ID or Touch ID app lock. For the strongest protection of your iCloud copy, turn on Advanced Data Protection for your Apple ID.

Changes

When this policy changes, we update the "Last updated" line above and post the new version at this URL. Material changes are also noted in the app's release notes.

Terms

Libreto uses the standard Apple End User License Agreement: Terms of Use (EULA).

Contact

JC Mobile App Studio LLC, Pennsylvania, USA. [email protected]