Coddi Privacy Policy

Version 1.4 · Effective: October 29, 2026 · Last updated: October 30, 2026

1. Who we are

Coddi is provided by Wild Standard Labs, LLC, a Delaware limited liability company (file number 10715480), 131 Continental Dr, Suite 305, Newark, DE 19713, USA. Email: admin@coddi.io. Website: https://coddi.io.

This Policy covers the Coddi app for Mac (Apple Silicon, macOS 14.2 or later), the website coddi.io, notes you share by link, and connections from outside AI tools to Coddi. The web version at app.coddi.io is for your account and purchases only: in it you can sign in, create an account, confirm your email address, reset your password and buy Pro. On the page app.coddi.io/withdraw you can also withdraw from a purchase (Section 9). The web version uses the same account as the Mac app, does not record or transcribe audio, and does not show your notes, except notes you have shared by link yourself: each of them opens on its own page at app.coddi.io.

We are the controller of your account, purchase and technical data. Your recordings, transcripts and notes are your content: you decide what to record, keep and share, and we process it to provide Coddi to you. Section 5 explains what this means for the people you record.

2. Short version

• We do not sell your data and we do not show ads.
• Advertising and analytics cookies only with your consent. The website coddi.io loads Google and Microsoft Clarity tags only after you click "Accept" in the cookie banner; you can withdraw at any time in "Cookie settings" (Section 14). The Mac app has no advertising or third-party analytics tools.
• No training on your content. We do not train AI models on your recordings, transcripts, notes or chats. Our speech and AI providers do not train on them either: every request to Deepgram carries its opt-out from model improvement, and OpenAI does not train on data sent through its API.
• Audio never reaches our servers. With on-device transcription, audio never leaves your computer. With cloud transcription, the app streams audio directly to Deepgram; it does not pass through our servers, and Deepgram keeps it only as long as needed to process the request.
• Your notes live in Germany. Transcripts, notes, chats and folders are stored on our servers at Hetzner in Germany until you delete them.
• Analytics and error reports are on by default and contain no content of your notes, transcripts or audio. One switch turns them off (Section 13).
• Payments go through Stripe. We never see your full card number (Section 9).

3. What we collect

We do not collect voiceprints or other biometric identifiers (Section 5).

4. Audio and transcription

• On-device transcription. The app transcribes on your Mac. Audio never leaves your computer; the text of the transcript is saved to your account like any other note. Audio files you import are also transcribed on your Mac.
• Cloud transcription. The app gets a one-minute access key from our server and streams audio directly to Deepgram, Inc. (USA). Our servers never receive, relay or store your audio. Every request is sent with Deepgram's model-improvement opt-out, so Deepgram does not use it for training and keeps it only as long as needed to process the request. To recognise names and terms better, the request also carries your custom vocabulary and the meeting's title and participant names.
• Audio kept on your Mac. The app keeps an encrypted copy of a meeting's audio on your Mac, so that it can resend what a dropped connection lost and tell voices apart after the recording. How long the copy is kept is set in Settings → Recordings → Audio on this device → Keep audio: 7 days, 30 days, 90 days or "Do not keep". By default it is "Do not keep": the copy is deleted right after that step (below). To keep audio, choose 7, 30 or 90 days there. Expired copies are deleted automatically when the app runs; if your Mac is off or the app is closed, deletion happens the next time it runs. You can delete all stored audio at any time in the same section; your notes and transcripts stay.
• "Do not keep". The recording is still saved temporarily and encrypted, so the app can tell voices apart once the meeting ends. It is deleted right after that step; if the step is interrupted, the app removes the leftover within about six hours of its next run. During the step the app makes a temporary decoded copy in the system's temporary folder and deletes it when the step ends.
• Our servers never store audio.

5. People in your recordings

Coddi records your microphone and the sound of your call. There is no bot in the meeting, so the people you talk to may not know they are being recorded. Telling them, and getting their consent where the law requires it, is your responsibility under our Terms of Service. The recording menu in the app reminds you: "Let the people you record know".

If you were recorded by a Coddi user, this is what happens with your data:

• What we receive: your voice in audio that stays on the user's Mac (or goes to Deepgram for cloud transcription), your words in the transcript and note, your name or email address if the user or their calendar added you as a participant, and a speaker label such as "Speaker 2".
• Why: only to provide Coddi to the user who recorded the conversation and to the people they share the note with. We do not use it for anything else, and we do not train AI models on it.
• Who receives it: the providers in Section 8, under the same rules as the user's own content.
• How long: as long as the user keeps the note, under the periods in Section 11.
• No voice profiles. Coddi does not create voiceprints. Telling voices apart happens on the user's Mac and produces only which voice spoke when, within one recording. Nothing is saved that could recognise you in another recording.
• Your rights: if you took part in a conversation recorded with Coddi, email admin@coddi.io with who recorded it (their name or email) and the date. We will find the recording through its owner and resolve your request with them. If the owner does not respond and the law requires deletion, we will delete it ourselves.

6. How we use data and our legal bases

We do not send marketing emails without your consent. We make no decisions based solely on automated processing that have legal or similarly significant effects on you.

7. AI

• What goes to OpenAI. When you chat with Coddi's AI, build a note, get a title for a chat, or a visitor asks a question about a note you shared by link, our server sends the text needed for that task to OpenAI: relevant parts of the transcript and note, the question, your "About me" and "About the company" text and your memory entries. A connected AI tool that asks Coddi a question works the same way.
• Through our gateway. These requests go through our own AI gateway on our servers in Germany. It does not write the text of requests or answers to its logs; it records only the model, size and cost.
• No training. We do not train AI models on your content. OpenAI does not use data sent through its API to train its models. OpenAI may keep requests for up to 30 days to detect abuse, then deletes them unless the law requires otherwise.
• Memory. Coddi can remember short facts about you, how you like to work and your projects, from your chat messages; meetings and transcripts are not used for this. You can see, edit and forget each entry, or turn automatic memory off, in Settings → Account → Memory.
• AI can be wrong. Notes, answers and titles are written by AI and may contain mistakes. Check important points against the transcript.

8. Processors

Advertising and analytics on coddi.io (only after you accept them in the cookie banner, Section 14):

Google and Microsoft also use this data for their own purposes under the Google Privacy Policy and the Microsoft Privacy Statement. Your account, your email address and the data from the Mac app are not sent to them.

We also use Telegram to tell our team that a new problem report has arrived. The notice contains only the app version, an error code, the number of events and a random report number — never your text or account details.

We disclose data when the law or a binding order requires it, to protect people's rights and safety, or in a merger, acquisition or sale of our business; in that case this Policy continues to apply to your data. If we add a provider that receives your content, we will update this section before it starts receiving it.

Other services your Mac contacts. When you download an on-device speech model, the app fetches it from Hugging Face; like any website, Hugging Face sees your IP address. No audio or text is sent. App updates come from our own servers.

9. Purchases through Stripe Managed Payments

Coddi has a free plan and a paid Pro plan. Purchases go through Stripe Managed Payments: Link, LLC, a Stripe company, acts as merchant of record (the checkout page shows "Sold through Link, LLC"), together with the Stripe entities that provide payment and Link services. They receive purchase data to collect payments, calculate and handle taxes, prevent fraud, send receipts, and handle refunds and disputes. Stripe and Link also process this data for their own purposes under the Link Privacy Policy and the Stripe Privacy Policy; for that processing they are not our processors.

Purchase data may include your name, email address, billing address, tax information, the plan you chose, the amount and currency, and the status of your subscription, refunds and disputes. You enter your payment details directly with Stripe or Link; we never receive your full card number. We exchange purchase identifiers and status with Stripe to connect a payment to your Coddi account and manage your Pro access.

How long we keep purchase records. After your account is deleted, we keep only the payment and subscription records we need for accounting, tax, refunds and disputes — identifiers, dates, amounts, currencies and statuses. We keep them for 3 years after the tax return for the relevant period is filed, or longer only where a specific legal obligation or an unresolved dispute requires it. Stripe and Link keep their own records under their own policies.

Withdrawing from a purchase. If you are entitled to withdraw (Refund Policy, Section 7), you can do it on app.coddi.io/withdraw: signed in, or through a one-time link we send to the email address of your purchase. We keep your statement and the time we received it as proof, send you a confirmation by email, stop renewal and refund the payments through Stripe and Link. To open the page through a link, the browser keeps a cookie for 30 minutes (Section 14).

Purchases that came from an ad. If you followed a Google ad to coddi.io and then buy Pro on the web, we keep the ad click identifier from the link with your purchase. We regularly send Google the click identifier, a purchase number, the time, amount and currency of the payment, and the same for a refund, so that Google Ads can count which ads lead to purchases. We do not send your name, email address or account. In the EEA, the UK, Switzerland, or if we do not know your country, we send this only if you accepted advertising cookies in the banner on coddi.io; your choice about ad personalisation is sent along with it. Elsewhere we send it with your choices from the banner, or, if you made none, without them. If your browser sends a Global Privacy Control signal, we treat it as a refusal: in the EEA, the UK and Switzerland we do not send the purchase; elsewhere we send it marked as refused.

If you ask Stripe or Link to delete your Managed Payments data, Stripe also cancels the related subscription. That does not delete your Coddi account; write to us if you want that too.

10. International transfers

Your account and content are stored in the European Union, in Germany. Wild Standard Labs, LLC is a US company, and several of our providers (Section 8) process data in the United States. If you accept advertising and analytics cookies on coddi.io, Google and Microsoft receive website data in the United States (Section 8). A second copy of our backups is kept with IDrive, a US company; it is encrypted before upload, and IDrive has no key to read it. Where the law of the EEA, the UK or Switzerland requires a safeguard for such transfers, we rely on the European Commission's Standard Contractual Clauses and their UK and Swiss equivalents in our agreements with these providers, or on a provider's certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions. You can ask for a copy of the relevant safeguards at admin@coddi.io.

11. Retention

Deleting your account. Write to admin@coddi.io from the email address of your account; deleting the account from inside the app is coming in an update. After deletion is confirmed, the account is closed and you have 30 days to change your mind: write to us at admin@coddi.io and we will cancel the deletion. If your request constitutes a request to erase personal data under applicable data protection law, we will assess and handle it in accordance with that law. After 30 days we erase the account and its content: notes, transcripts, chats, folders, memory, sign-in records and connected AI access. Copies in our backups are overwritten within a further 30 days. Audio stored on your Mac never reached our servers, so deleting your account does not remove it: delete it in Settings → Recordings before you go. What we keep after deletion is listed in the table above and in Section 9.

12. Security

• Connections to our servers are encrypted (TLS).
• Passwords are stored only as argon2id hashes.
• On your Mac, the local database and stored audio are encrypted; the keys are kept in the macOS Keychain.
• The database on our servers is stored on an encrypted disk.
• Backups of our database are encrypted before they leave the server, with a key that is not kept on the server.
• Our servers are hosted by Hetzner in Germany, and access to them is restricted.
• If a breach affects your data, we will notify you and the authorities as the law requires.

No system is perfectly secure. We try to hold as little as possible — which is why your audio never reaches our servers.

13. Analytics and error reports

The Mac app sends analytics and error reports to help us find and fix problems. They are on by default. One switch controls both: Settings → Privacy → Usage analytics. If you turn it off, the app stops collecting at once and discards events it has not yet sent. If you turned it off before, it stays off after updates.

The switch is described in the app as "Anonymous metrics and error reports; note and transcript contents are not sent". To be precise, here is what is sent when it is on:

• Technical events to our server: the time, the type of event (error, warning or a pause of the app), an error code, the part of the app, a shortened technical message with email addresses, file paths and links removed, the length of a pause, the app version and a random session number. These events are linked to your account, so that we can match them to a problem you report. We keep them for 30 days.
• Crash and update reports to Sentry: the error type and the lines of Coddi's own code where it happened, the app version and architecture; for updates — versions, status codes, times and random identifiers. They do not include error message text, the content of notes, transcripts or audio, your email or your user ID. Like any internet service, Sentry sees the IP address a report comes from.

"Report a problem" (Settings → Help) sends what you write, the app version, operating system, interface language and, if Usage analytics is on, up to 200 recent technical events. The report is linked to your account and kept for 90 days. Our team receives a notice in Telegram without your text (Section 8). If you are not signed in or offline, the app opens an email to admin@coddi.io instead.

None of this contains the content of your notes, transcripts or audio. The app has no advertising or third-party analytics tools.

The website coddi.io measures visits, how people use its pages (scrolling, clicks on links and on "Download", file downloads) and which ads lead to them with Google Ads and Google Analytics, and records sessions with Microsoft Clarity — only after you accept this in the cookie banner (Section 14). Clarity masks all text on the page; it records the layout of the page and how the pointer moves, clicks and scrolls. Note that the page title is sent unmasked.

14. Cookies

coddi.io. On your first visit the website shows a banner. Until you choose, it loads no advertising or analytics tags. "Accept" turns on one category, "Advertising and analytics" (Google Ads, Google Analytics, Microsoft Clarity); "Reject" keeps it off and is as easy. You can change your choice at any time with "Cookie settings" at the bottom of every page; withdrawing stops the tags and deletes their cookies and storage on coddi.io. If your browser sends a Global Privacy Control signal, we treat it as a refusal and do not show the banner. We do not respond to "Do Not Track" signals.

The cookies set on coddi.io are also sent to its subdomains, such as app.coddi.io. Microsoft also sets cookies on its own domains, such as CLID (clarity.ms, 365 days) and MUID (clarity.ms and bing.com, 390 days); we cannot delete those, but you can in your browser.

When you follow "Get Pro" from coddi.io, the link carries your two Google consent choices (for using your data in ads and for ad personalisation) to app.coddi.io, so that a purchase is handled as you chose (Section 9).

app.coddi.io sets only the cookies needed to keep you signed in. The page of a note you share by link sets only the cookies it needs to work, such as a random visitor cookie that counts the few AI questions a visitor may ask. The withdrawal page sets coddi_withdrawal_session for 30 minutes when you open it through a link from our email. app.coddi.io loads no advertising or analytics tags.

The Mac app does not use cookies.

15. Your rights

Wherever you live, you can:

• Get a copy of your data. Export a note as Markdown and a transcript as TXT, SRT, JSON or Markdown in the app. For a copy of everything in your account, write to us.
• Correct your data. Edit your notes in the app; for anything else, write to us.
• Delete your data. Delete notes, folders and stored audio in the app; delete your account by email to admin@coddi.io, as described in Section 11.
• Object and withdraw. Turn off analytics and error reports (Section 13) and automatic memory (Section 7), and cut off connected AI tools in Settings → Account → Connected AI.

EEA, UK and Switzerland. You also have the rights of access, rectification, erasure, restriction, data portability and objection, and the right to complain to your data protection authority. We reply within one month; where the law allows, we may extend this by two more months and will tell you why.

Send requests by email to admin@coddi.io (Section 20). We may ask you to confirm that the account is yours. We will not treat you differently for using your rights.

16. California

If you live in California: the categories of personal information we collect, their sources and recipients are listed in Sections 3 and 8, and the purposes in Section 6. We do not sell your personal information. We may "share" it for cross-context behavioural advertising in two ways: if you accept advertising cookies on coddi.io, Google receives the website data described in Section 3; and if you buy Pro on the web after following a Google ad, we send Google the ad click identifier with the time, amount and currency of the payment (Section 9). You can opt out at any time with "Cookie settings" or the link "Do Not Sell or Share My Personal Information" at the bottom of the page, or with a Global Privacy Control signal: then no website data is sent to Google, and a purchase is sent marked as refused. We do not use sensitive personal information to infer characteristics about you. You may ask to know, access, correct and delete your personal information, and we will not discriminate against you for doing so. You may use an authorised agent; we may ask the agent for proof of authority and ask you to verify your identity.

17. Children

Coddi is for people aged 18 and over. We do not knowingly collect data from children. If we learn that a child uses Coddi, we will delete the account.

18. Changes

The effective date is at the top of this Policy. We will tell you about material changes by email to the address of your account at least 30 days before they take effect.

19. Language

This Policy is published in English. Any translation is provided for convenience only; if it differs from the English version, the English version prevails.

20. Contact

Wild Standard Labs, LLC · 131 Continental Dr, Suite 305, Newark, DE 19713, USA · admin@coddi.io · https://coddi.io