Vibe Noting Privacy

by Promptbox

Last updated: September 15, 2026

Stored on your phone

Your current journal, Markdown summary, conversation display, anonymous User ID, AI-disclosure acknowledgement, and scratchpad are stored locally by the app. The scratchpad uses Keychain on iOS and Android Keystore-backed encryption on Android. Clearing conversation history removes the displayed chat from that device while preserving the journal, summary, and scratchpad.

When an Omi pendant is connected to the iPhone app, compressed pendant audio is kept in protected, backup-excluded temporary storage as a rolling buffer of up to approximately 15 minutes. Unselected audio is overwritten and is not transcribed, analyzed, or uploaded. Audio selected by a pendant button press may be retained briefly for processing or controlled retry, then deleted after success.

Face ID on iOS

Face ID is optional and disabled by default. When enabled, it protects access to the journal and conversation whenever Vibe Noting leaves the foreground. Face matching is performed by iOS; Vibe Noting receives only the authentication result and does not receive, store, or transmit facial or biometric data.

Sent for processing

In web and Android v4.6, app AI requests use the Promptbox llm_gemini helper with model=lite. Voice recordings are sent directly for audio understanding without a separate transcription service. Command requests can include bounded journal excerpts and scratchpad memory. New-note organization uses the source note; explicit edits use small journal pages and the requested result. Attachments are analyzed separately without journal or memory. Photos are resized to at most 1024 pixels on the longest side. These AI features require internet.

The updated iPhone app uses Apple’s on-device AI and transcription for basic notes; attachment analysis uses Gemini Lite. Calculator, date arithmetic, PDF/text creation, journal display, and available local speech playback do not send content to remote helpers.

Anonymous User ID and RAG archive

On first launch, Vibe Noting creates a random UUID on your phone. When an archive or historical-record tool needs a cloud store, the UUID is sent to Promptbox to find or create a separate Google Gemini File Search store named notes_<uuid>; no email address is required or automatically placed in Gemini's system prompt.

On iPhone, “Save past days on server” is disabled by default. Previous-day journals and active-journal overflow are queued on the iPhone and are not automatically uploaded while this setting is off. Turning it on sends queued and future archives to the Promptbox historical-record store; the local queue is removed only after the server confirms success. Turning it off stops future automatic uploads and cancels the active upload task, though a request already accepted by the server may finish. It does not delete archives already stored on the server. Explicit historical-record search or save commands can still send the information you request, regardless of this setting. The Settings retry control works when server saving is on. A timeout after server acceptance may result in a duplicate archive on retry.

Web and Android archive behavior is separate from this iPhone setting.

Persistent scratchpad

Explicit memory requests update a separate 800-byte scratchpad. Web stores it in browser local storage; Android encrypts it with Android Keystore; iPhone uses Keychain. Web/Android command processing can send its contents to Gemini Lite. It is excluded from attachment analysis and automatic RAG archives. Oversized legacy memory is backed up locally before migration; Android backups remain encrypted. Resetting your User ID does not clear this memory.

Tools

Information may be sent to web search, webpage reading, email, or temporary transfer helpers when Pepper automatically uses those tools to complete your request. Every email tool call must specify a recipient address, which Pepper may obtain from the current request, journal, attachment, or scratchpad; if none is available, Pepper is instructed to ask. Generated transfer links may remain available until their stated expiration.

Your control

Do not submit information you do not want processed by these services. On iPhone, you can choose whether past journal days and overflow are automatically saved on the server with the off-by-default Settings switch above Face ID. You can also reset the User ID or clear conversation history from Settings. Resetting the ID switches to a new cloud File Search store but does not delete the previous store. Clearing the app's local data also does not delete previously archived cloud information. Contact support below to request help concerning stored information.

Questions: admin@promptbox.cn