Legal

Privacy Policy

Last updated: July 11, 2026

Listen World (“the app”) is developed by the Listen World Dev team (“we”, “us”). This policy explains how Live translation stays on-device and how the optional Cue and Notes features process text in the cloud.

Summary

  • Live audio, captions, and translation stay on your iPhone. Microphone audio is never uploaded.
  • Cue and Notes require an explicit generation action and Internet access. Only the text needed for that request is sent to our service and Google Gemini.
  • Local transcripts and notes stay on your device until you delete them and may be included in iOS backups that you control.
  • We store subscription, account, point, request-status, token-count, and performance metadata needed to operate and understand these features. We do not sell data, show advertising, or track you across other companies’ apps or websites.

Microphone and speech

To provide Live translation, the app needs access to your microphone. Captured audio is transcribed and translated locally on your device, using Apple’s on-device speech recognition together with the app’s translation model, which is downloaded once and then runs entirely on your device. Live microphone audio, captions, and translations are not sent to our service, Cloudflare, or Google.

Your use of the microphone and speech recognition is also subject to your device’s operating-system privacy controls and to Apple’s own privacy policy. You can grant or revoke these permissions at any time in iOS Settings → Privacy & Security.

Local transcripts, notes, and backups

The app saves preferences on your device. When you use Notes, source-language transcript text and generated Markdown notes are stored locally until you delete the session. Audio is not retained. These user-created files may be included in normal iOS device backups that you control. Deleting a local session removes its transcript and note versions from the app, but it does not rewrite required transaction, point, anti-replay, or usage-ledger records held by our service.

Cue and Notes cloud processing

Cue and Notes open a cloud request only after you explicitly ask to generate. The app sends the minimum text needed for that request over HTTPS to our Cloudflare Worker, which forwards a prompt to Google Gemini. The service does not write conversation or transcript bodies to our D1 database. Google provides the generated text back through the Worker. Cloud availability is not required for Live translation.

Google’s Paid Gemini API terms state that prompts and responses are not used to improve Google products. Under Google’s default abuse-monitoring policy, prompts, contextual information, and outputs are retained for 55 days for policy enforcement and may be reviewed by authorized Google personnel when flagged. Google may process this data internationally. The production project has no documented Zero Data Retention approval in our release evidence, so this default policy applies.

Our shipping integration uses models:streamGenerateContent. It does not enable Google Search or Maps Grounding, the Interactions API, stored conversations, uploaded files, or explicit context caching.

Account, purchase, usage, and diagnostic data

The service processes an Apple original transaction identity for subscribers or a random Keychain device UUID for trial access. It stores tier, balance, request identifier, feature, status, point cost, token counts, and generation latency. Apple transaction/JWS data is used to verify subscriptions. The detailed usage_log metadata ledger is retained for at least six months; point, anti-replay, subscription, and transaction records may be retained as operationally or legally required.

Cloudflare processes requests and network metadata needed to deliver and protect the service, which can include IP-derived coarse location, request URL, response status, timing, and exception diagnostics. Workers Logs are disabled in the source configuration; production deployment and dashboard verification are required before release. We do not intentionally place Cue or Notes bodies, authentication tokens, Apple JWS data, generated text, or local filesystem paths in application logs.

Data categories and purposes

The app’s Privacy Manifest declares Other User Content, Purchase History, User ID, Device ID, Product Interaction, Other Usage Data, Performance Data, Coarse Location, and Other Diagnostic Data. These categories are used for app functionality; product interaction, usage, and performance data are also used for first-party analytics. Data is linked to the trial or subscription identity where applicable. None is used for tracking or advertising.

Children

The cloud features are not directed to children. Do not submit text containing information you are not permitted to share. Adults responsible for a child’s device should supervise use and review local content before any cloud generation.

Your rights (GDPR, CCPA, and similar laws)

You can revoke microphone or speech-recognition permissions in iOS Settings and delete local transcripts and notes in the app. For legally applicable requests concerning account or usage metadata, email [email protected]. We may need information sufficient to verify the relevant account or transaction. Some transaction, fraud-prevention, point-ledger, anti-replay, and legally required records cannot be erased merely by deleting local app content.

Changes to this policy

We may update this policy as the app evolves. Material changes will be reflected on this page with a new “Last updated” date.

Contact

Questions about privacy? Email us at [email protected].