RAMBLARHome

Ramblar — Privacy Policy

**Effective date:** June 17, 2026 **Provider:** Four Solutions Group ("we," "us") **Contact:** [email protected]

> **Draft for legal review.** This policy is written to match Ramblar's actual data behavior (verified against the app's privacy manifest and code) but must be reviewed by counsel before publication. Placeholders are marked `[…]`.

Ramblar turns spoken thoughts into confirmed actions. This policy explains what Ramblar does and does not collect, and how your information is handled.

The short version

  • **Speech is processed on your device.** Audio is transcribed on-device and is **not saved** to disk or uploaded by the app.
  • **Personal mode collects nothing.** Using Ramblar for local notes, reminders, calendar events, and message drafts requires **no account** and involves **no data collection and no tracking**.
  • **We do not track you.** Ramblar contains no advertising or analytics SDKs, uses no IDFA, and does Apple App Tracking Transparency tracking **never**.
  • **Cloud features are opt-in.** Advanced conversational reasoning and enterprise actions send information to our secure gateway **only with your explicit consent**, and your raw transcript never leaves the device while the "don't send raw transcript" setting is on.
  • **You confirm every external action.** Ramblar never writes to a connected system, sends a message, or creates a record without your explicit confirmation.

    • What Ramblar processes

    On device (no collection)

  • **Microphone audio** — used live to transcribe what you say, then discarded. Not stored, not transmitted by the app.
  • **On-device transcript and drafted actions** — held in memory to show you cards you can confirm or edit.
  • **Local actions** — notes, reminders, calendar events, and message drafts are created in Apple's own apps on your device, after you confirm them.

    • Cloud features (opt-in, with consent)

    If you enable cloud reasoning and/or connect an enterprise system, Ramblar's **gateway** (operated by us) processes:

  • **Derived context** needed to reason about your request (and, only if you turn off the "don't send raw transcript" guard, the transcript text). This is sent to our gateway over an encrypted (TLS) connection.
  • **Connected-system data** required to find records and prepare actions (e.g., contacts or records in your organization's Salesforce/Microsoft systems).
  • **Audit records** of actions you confirm (what was done, when, to which record), retained for your organization's compliance.

    • We use the following service providers to deliver cloud features; they process content on our behalf when those features are used:

  • **Anthropic** — language reasoning for conversation and action planning.
  • **ElevenLabs** — text-to-speech for spoken responses.
  • **Your connected systems** (e.g., Salesforce, Microsoft 365) — only those your organization connects, and only to perform actions you confirm.

    • API keys and OAuth tokens for connected systems are stored **only on our server-side encrypted vault** — never on your device and never exposed to the app.

    What Ramblar does NOT do

  • No advertising or marketing use of your data.
  • No selling or sharing of personal data for cross-context behavioral advertising.
  • No analytics/tracking SDKs; no device advertising identifier (IDFA).
  • No use of microphone audio for any purpose other than the live transcription you initiate.
  • No automatic sending of emails/messages and no deletion of your external records (v1).

    • Enterprise (organization-managed) use

    When your company adopts Ramblar, an administrator configures which integrations are available and manages your access. In that case your organization is the controller of the data in its connected systems; we process it on your organization's behalf under our agreement with them. Contact your administrator for organization-specific data questions.

    Your choices and controls

  • **Use without an account** in personal mode.
  • **Consent toggles** in Settings control whether any cloud reasoning occurs and whether raw transcript may ever be sent.
  • **Delete local data** — Settings ▸ Privacy ▸ "Delete all local data" removes on-device settings, connector links, and the local audit log.
  • **Export** — you can export a redaction-safe copy of your settings and action receipts.
  • **Organization data deletion** — for data in connected systems or the tenant audit log, contact your administrator or us at [email protected].

    • Data retention

  • On-device: nothing is persisted beyond the local settings and audit log you control.
  • Gateway: connected-system tokens are retained until you disconnect; audit records are retained for your organization's configured period.

    • Security

    Audio is processed on-device. Network traffic uses TLS. Secrets and tokens are stored in the device Keychain (app) or an encrypted server-side vault (gateway), never in plaintext.

    Children

    Ramblar is not directed to children and does not knowingly collect information from children under 13.

    International users

    Cloud processing may occur in the United States. Where required, we rely on appropriate safeguards for cross-border transfers. `[Confirm regions/safeguards with counsel.]`

    Changes

    We will update this policy as Ramblar evolves and revise the effective date above.

    Contact

    Four Solutions Group — [email protected] — `[mailing address]`