Recora

Privacy Policy

Last updated October 12, 2026

What stays on your iPhone

Recora stores audio, transcripts, recording names, workspace information, and generated results on your iPhone. Recording and bundled transcription work offline. Local notes are excluded from automatic device backups. Export important recordings before deleting the app.

Microphone and device authentication

Microphone permission is used to record audio. Face ID and passcode checks are performed by iOS; Recora receives the authentication result, not your biometric data or passcode. Protected workspaces require a separate authentication check.

Optional OpenAI processing

If you enable AI features and supply your own API key, a selected transcript and processing instructions are sent to OpenAI after fresh authentication and two confirmations. Audio, recording titles, and workspace names are not attached. The API key is stored in the device Keychain and accompanies these requests. Requests ask OpenAI not to store the response, which does not guarantee zero retention. The provider’s policies and separately billed API usage apply.

Optional NIRAPI sharing

NIRAPI uploading starts off. Two confirmations authorize ongoing automatic audio uploads for a workspace to the HTTPS endpoint you configure. New recordings are sent as WAV after stopping, including while the app is locked. The endpoint receives audio, network connection information, and an opaque per-recording request key. Its privacy and retention practices apply. You can disable uploads in NIRAPI Configurator; data already sent cannot be recalled.

Sharing and deletion

Manual audio and transcript sharing requires two confirmations. The recipient controls their copy. Deleting a recording or workspace removes its local files and cancels associated uploads, but cannot remove copies already received by others. Deleting the app removes local recordings and settings. Remove saved API keys in the app settings before deleting the app and revoke them with the provider when appropriate.

Advertising and analytics

Recora contains no advertising or analytics SDKs and does not request tracking permission. This landing page uses no cookies, analytics scripts, or forms. The hosting provider may process connection information to deliver the website. Following an external link is subject to that destination’s privacy practices.

Questions and updates

For support and privacy questions, visit the support page. This policy may be updated to reflect changes in the app; the date below identifies this version.