> For the complete documentation index, see [llms.txt](https://runporter.gitbook.io/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://runporter.gitbook.io/docs/your-account/privacy-and-your-data.md).

# Privacy and your data

{% hint style="info" %}
This page describes how the app behaves. The [Privacy Policy](https://runporter.com/privacy-policy) and [Terms of Service](https://runporter.com/terms) are the authority on how your data is handled.
{% endhint %}

## When Porter is recording

Porter records **only** while a recording is running. There is no always-on listening, no wake word, and no recording that starts by itself.

A recording starts when you tap **Start recording** and stops when you tap **Done**, or when Porter [ends it after a long silence](/docs/recording-a-visit/auto-end-on-silence.md). While it is running there is always a visible indicator: the recorder screen, or the pill above the tab bar showing a live waveform and the running time.

{% hint style="warning" %}
Recording a conversation may require the other person's consent where you work. Before each visit, Porter shows a **Before you record** card that explains what is sent and names the third-party AI services that process it. You must agree before capture starts. Follow your company's guidance and your local law for consent from others present.
{% endhint %}

## Third-party AI processing

After a recording uploads, Porter sends the audio to **AssemblyAI** for transcription. **OpenAI** and **Anthropic** generate summaries, coaching scores, and Ask Porter answers from the transcript. These providers are contractually restricted from using your data to train their general-purpose models.

Ask Porter chat sends your typed questions (and visit context when the chat is about a specific conversation) to the same LLM providers. The first time you send a message, Porter asks you to acknowledge this.

## Where your recordings live

**On your phone**, first and always. The audio file is written to the device before anything else happens, and no failure path in Porter deletes it. That is the rule the app is built around: a conversation that happened once cannot be re-recorded.

**On Porter's servers**, after the upload lands. That is what makes transcription, summaries and coaching possible.

**Back on your phone, for 7 days**, after which the local copy is removed. You can shorten that to zero with **Delete local audio after upload** in [settings](/docs/your-account/settings.md) — the local file then goes as soon as the server confirms it has the recording.

## Who can see a recording

Conversations are visible to your **workspace**, not just to you. The Conversations tab shows what your team has recorded, and **Assignee** exists so follow-up can move between people.

Porter does not offer a "private recording" — if that is what you need, do not record it here.

## Your sign-in

Your session is stored in the device's secure keychain, tied to this device, and readable only while the phone is unlocked. Your password is never written to storage.

**Log out** clears it from this device. It does not end your session on any other device.

## Deleting things

* **A single recording** cannot be deleted from the mobile app.
* **Your account** is deleted by request, through the form behind **Account → Delete account**. Tapping that link deletes nothing on its own.

## Crash reporting

Porter reports crashes so they can be fixed. Crash reports describe what the app was doing when it failed — they do not contain your recordings.