Privacy Policy
Last updated: November 1, 2026
The short version
Ramble has no accounts. Your recordings and transcripts are stored on your iPhone and Apple Watch. Audio never goes to Ramble's relay. When you connect an agent, the transcript text passes through the relay and is deleted as soon as your agent picks it up. If your agent never picks it up, it is deleted after 30 days at most.
On your device
Audio is recorded and stored locally on your Apple Watch and iPhone. Transcripts are stored locally on your iPhone. You can delete any recording from within the app. Uninstalling the app removes everything stored on the device.
On-device transcription
When you use Apple Speech (the default), transcription happens entirely on your iPhone. No audio is sent to any server for transcription.
Cloud transcription proxy
If you turn on cloud transcription, your audio is sent through a stateless Cloudflare Worker proxy to the provider you select (Groq, Deepgram, or OpenAI), and the transcript is returned to your phone. The proxy:
- Does not store audio or transcripts
- Does not log request content
- Records anonymous usage analytics: the model used, audio size, transcript character count, whether the request succeeded, and a hashed device identifier used for usage tracking and rate limiting
- Verifies requests with Apple App Attest to prevent unauthorized access
Ramble Relay
The relay is how transcripts reach your agent. It is a small Cloudflare Worker that holds transcripts temporarily. It runs alongside the transcription proxy. It is used only if you connect an agent.
What is sent. After your iPhone transcribes a recording, Ramble uploads the transcript text together with the recording's id, the time it was recorded, and its duration. One copy is queued for each agent you have connected.
What is never sent. Audio. Transcription happens before upload, so the relay never receives a recording.
How long it stays. Your agent pulls new transcripts on a schedule and acknowledges each one after handling it. Acknowledging deletes it from the relay immediately. That is the normal path. Anything never acknowledged is deleted after 30 days at most. The window is that long so a transcript is not lost if your agent has trouble picking it up for a while.
This is everything the relay stores:
| What | Fields | Deleted when |
|---|---|---|
| Inbox | Random id, hash of the app's inbox secret, created time | — |
| Pairing code | Hash of the code, inbox id, expiry | Used, replaced, or 10 minutes pass |
| Connection | Random id, inbox id, hash of the agent's token, created and last-pull times | You tap Disconnect |
| Transcript | Recording id, recorded-at time, duration, text, expiry. One copy per connected agent. | The agent acknowledges it, you disconnect or tap Delete everything, or 30 days pass |
- No accounts, emails, names, IP addresses, or audio are stored.
- Credentials (the inbox secret, pairing codes, and agent tokens) are stored only as SHA-256 hashes.
- Logs record counts and ids, never transcript text.
- Creating an inbox is verified with Apple App Attest. After that, the app uses only its inbox secret.
We identify inboxes, not people.
Your controls
- Disconnect revokes that agent's token and deletes its queue.
- Delete everything now empties every queue on the relay.
- You can turn off delivery to agents entirely and use Ramble with no relay at all.
Your agent
Once your agent pulls a transcript, it has a copy. What it does with that copy is governed by the agent provider's own privacy policy, not this one. Ramble has no visibility into or control over your agent.
Webhooks
If you configure a webhook, Ramble sends the transcript directly from your iPhone to the URL you specify. Webhooks do not go through the relay. Ramble has no visibility into or control over what happens at your webhook endpoint.
Third-party services
If you opt into cloud transcription, your audio is processed by the provider you select. Each provider has its own privacy policy:
The proxy and the relay run on Cloudflare. The agent you connect receives your transcripts once it pulls them, under its own policy.
Apple App Attest
Ramble uses Apple's App Attest service to verify that transcription requests, and the creation of your relay inbox, come from a legitimate copy of the app on a real Apple device. This process does not collect or transmit personal information.
Purchases
The app purchase and the optional cloud transcription subscription are handled by Apple through the App Store. Ramble does not receive your name, email, or payment details.
Changes to this policy
If this policy changes, the updated version will be posted here with a new date. Material changes will be noted in the app's release notes.
Contact
Questions about this policy? Use the support link on Ramble's App Store page.