Wadsworth
Privacy Policy
Your choice
Wadsworth works without an account. In local mode, recordings, transcripts and attachments stay in the app on your iPhone. Optional cloud features in version 1.2 require Sign in with Apple and a separate consent step before note content is uploaded or sent to OpenAI. You choose whether to upload notes you already made.
Local recording
Microphone access lets you record notes. Apple performs live and saved-audio transcription on your device. When Apple's on-device language model is available, it also generates a short title from the beginning of a saved note's transcript; that step stays on your device. Local notes may be included in device backups according to your iOS settings. Sharing sends only what you choose through the system share sheet. Apple handles Siri requests under its own privacy terms.
Optional cloud accounts and storage
Sign in with Apple gives us an account identifier and, if provided, your email or private relay address. We store that address and Apple's email-verification and private-relay information to show your account details in Settings. A private relay address does not reveal your underlying personal email address to us. Your notes belong to Apple's account identifier, not your email address; changing an address does not create a different note library. Account verification details are not sent to AI services. If you ask about outgoing emails, the sender and recipient addresses in those records may be included, as explained below. We store encrypted Apple authorization credentials and revocable device sessions so you can stay signed in and recover uploaded notes. Signing in alone does not upload your notes.
After you enable cloud features, Wadsworth stores your recordings, note dates and durations, transcripts, generated titles, processing versions, and photo/file attachments on our server and private Amazon Web Services storage in the United States. Uploads and downloads use encrypted connections; stored files are encrypted. Our server must be able to read notes to process them, so this is not end-to-end encryption against Wadsworth or OpenAI.
Photographs and file attachments
You can attach photographs or files to a saved note. Camera access is requested when you choose to take a photograph. The system Photos and Files pickers give Wadsworth the items you select. We copy them into the note so the attachment remains available if you remove the source file. Imported originals can contain embedded metadata, such as a photograph's location and capture date.
Attachments on local notes stay on your device. Attachments on cloud notes upload to private AWS storage with the note and can be restored after signing in again. Attachments are not automatically sent to OpenAI. You can separately allow photo inspection in Settings, as explained below. Generic files are not parsed by AI. You can share or remove individual attachments. Camera photographs are stored in Wadsworth; saving or sharing them elsewhere is your choice.
Emailing a note
You can save a small list of recipient nicknames and email addresses in Settings. We store that list with your cloud account; Wadsworth does not read your phone's address book. Each recipient name becomes a button on a completed cloud note. Tapping a name requests an email of the final server-generated title and transcript, with the photographs and files attached when you tapped. The original recording is not included.
Queued requests wait for upload and processing, then our server sends them through Amazon Simple Email Service (SES) to the selected recipient. You can cancel before dispatch. A message already handed to the email service cannot be recalled, and deleting a note or account cannot remove a recipient's copy. We keep recipients, sender, request status, times and provider message identifiers to show your email history and prevent duplicate sends. “Accepted for sending” means SES accepted the request; it does not confirm inbox delivery or processing by the recipient. An uncertain delivery result is not automatically retried.
We also retain account-linked delivery, cancellation and permission-revocation records outside database backups so restoring a backup cannot resend an email or revive permission you turned off. These records contain identifiers and times, not note content, and are removed when you delete your account.
Settings shows whether we are authorized to send from the verified Apple email address on your account. This is initially supported for xoba.com. If a personal address is eligible but permission is off, the note offers a sender choice before queueing. Choosing your address grants the same permission shown in Settings, which you can turn off. When you use your personal sender address, we also send a Bcc copy to that same address, unless it is already the recipient. This provides a mailbox copy; placement in a Sent folder depends on your email provider. Otherwise, emails use the Wadsworth service address shown before you queue them. Replies to the service address are not forwarded to your personal address; automated recipients may require an email from an address they recognize. A Hide My Email address is not used as a personal sender and does not reveal your underlying address. This permission alone never sends a note; each email requires a recipient tap.
OpenAI processing and conversations
With your permission, we send recordings to OpenAI for transcription and send Apple and OpenAI transcript versions to OpenAI to prepare a readable transcript. OpenAI also generates a short title from the processed transcript, including for existing cloud notes. These titles replace earlier automatic titles in the app. We retain the original versions. AI text can be wrong; the recording remains available for comparison.
When you ask about your saved information, OpenAI receives your question and relevant note, call or saved-question excerpts, usage summaries, attachment names, account and email settings, prior assistant request history, and outgoing Wadsworth email metadata returned by our account-scoped tools. Account settings can include your stored Apple-supplied email address, account dates, cloud status and recorded personal-sender permission details. Apple's email-verification and private-relay claims and authentication credentials are excluded. Email metadata includes the selected sender/recipient and queue status; it does not give us access to your inbox or the recipient's mailbox.
In version 1.5, the Ask screen explains that typed questions and answers are saved with their times and completion status in your cloud account. Earlier versions do not save typed question history. The assistant can read your saved questions, available call-segment timing and AI usage records. You can ask it to create a text note, move a note to Deleted Notes or restore a note. These actions use the same account ownership checks as app actions and sync back to your device.
Settings has a separate, initially disabled option to allow OpenAI to inspect attached photos across all notes in your account. This choice is remembered for that account on this iPhone, including after closing the app or signing out and back in. Other accounts have separate choices; deleting the cloud account clears its choice. Only requested photos from your account are read, resized and sent to OpenAI; location and other image metadata are removed from that processing copy. Originals are unchanged. Enabling this option does not automatically analyze your whole library. Turning it off blocks new photo-enabled questions and new photo inspections during a call. Work already underway can finish, and calls stay connected. Changes apply to subsequent inspections during a call; they cannot recall data already sent. Earlier builds instead offer a per-question/call choice in Ask Notes that resets when reopening that screen. Photo analysis can be wrong or miss small details.
When you start a voice conversation, microphone audio is streamed to OpenAI and generated speech is played back. The conversation ends when you end it, when interrupted, or when a beta limit is reached. An established call can continue when the phone locks. When the app shows the saved-call notice before you call, call details and the full transcript are stored in your cloud account for later questions. Call audio is not saved. Older app versions without this notice continue to use temporary calls; their past transcripts cannot be recovered.
OpenAI does not use API content for model training by default. We request that generated responses and voice recordings not be stored as application history, but this is not a zero-retention guarantee. OpenAI may retain text and voice content in abuse-monitoring logs for up to 30 days, subject to its exceptions, and other temporary processing storage may apply. Its transcription endpoint has different retention rules. See OpenAI's data controls.
Usage records and limits
Cloud AI is free for adults during this beta, with no daily AI spending allowance. Technical limits still apply to call length, requests and storage; voice calls last up to ten minutes.
We record AI model names, request identifiers, token or audio usage, cost, times, and completion, refusal or error status to operate the service, enforce beta limits, and understand its cost. These records do not contain prompts or note text. We supply a stable, pseudonymous account identifier on supported OpenAI requests for safety attribution; it contains no email address or name. A refusal is recorded as a request outcome, not a determination that a user is abusive. There is no advertising, cross-app tracking, or sale of personal information.
Private assistant request history
To diagnose problems and check how the assistant uses its tools, we keep a private history of tool requests with your cloud account. This includes the tool name, request identifiers and inputs, including generated database queries, plus completion or error status, safety-check decisions, times, duration and the size of the result. Inputs can include search terms, questions, note text or email addresses. Large inputs may be shortened. This history does not store the full tool results or call audio.
Authorized service administrators can review this history to troubleshoot and improve the service. The assistant can also read your own prior request history when answering your questions. It stays in our account-linked database and its private Keep backups; raw tool inputs are not written to general server logs. This is separate from the usage records described above. Removing a note does not erase text already included in past tool requests. Deleting your cloud account removes this history from the active database; backup copies follow the retention policy below.
Retention and deletion
During this beta, cloud notes, saved questions and call transcripts remain in your account until permanently removed or you delete the account. Exhausting an AI allowance does not automatically delete notes. Deleting the app does not delete uploaded notes; sign in again to recover them. Recordings that have not finished uploading cannot be restored from our server.
In version 1.5, deleting a note moves it to Deleted Notes. Its text, recording and attachments remain available for Restore; this beta has no automatic trash expiry. Earlier permanently deleted content cannot be recovered. Delete cloud account in Settings permanently removes active and deleted notes, saved questions, call transcripts and private assistant request history, queues removal of stored audio and attachments, and revokes access. Failed cleanup is retried. Contact us to export or delete an individual saved call while its in-app history controls are being developed. The app explains when downloaded notes will be retained as local-only copies. Uninstalling the app removes its local files.
Database backups are scheduled to expire after 30 days. Deletion records are retained for 35 days to prevent a backup restoration from reviving permanently deleted cloud content. Reversible trash/restore markers remain while the account exists and are removed with account deletion. Usage totals may remain without their account association. OpenAI's own retention rules still apply to previously processed requests.
Signing out stops new cloud work on that device and keeps account-owned local copies separate from other accounts. You can use local recording without cloud consent. Contact us for help exporting or deleting data or withdrawing consent.
Age and this beta
Cloud and AI features in this proof of concept are for adults aged 18 or older. Wadsworth is not directed at children under 13. Local-only use does not send note content to us. We will separately address age and parental consent before extending cloud features to younger users.
This website
This website sets no advertising cookies and runs no analytics. It processes network information needed to deliver pages and operate the service. Account and API requests are authenticated separately from browsing the website.
Changes and contact
We will explain material changes and obtain any newly required permission before extending processing. The earlier local-only policy remains available. Questions or requests: apple@michaelraskinandrewsllc.com.