Private by design: capture stays local. AI is a request, not a pipeline.
If you feed an assistant your schedule, conversations, and tasks, vague “we care about privacy” is not enough. This page states what stays on the iPhone, what is transmitted for AI, what you can erase, and how masking works. Core privacy is included in every plan — it is not a premium add-on.
What stays on the phone
Recordings and transcripts are stored on your iPhone. Claire.vision does not keep a copy of that archive. Search of the text works offline. You can delete a capture immediately, including a panic cleanup that keeps only starred items.
Claire is an iPhone app you start and stop. It is not an always-on desktop listener and it is not a browser chatbot that stores the thread on someone else’s servers as the product.
What is transmitted — only when you ask
Nothing is sent while transcribing. Voice notes exist without AI. When you ask Claire a question, the app finds relevant excerpts and sends those with your question for processing. It does not upload your entire history.
AI features need the internet. Account login, plans, and billing are separate from the life-log files. Your personal logs are not used as training material for a public model.
Masking, modes, and what you control
Anonymity mode can replace supported names, phone numbers, and emails with temporary codes before an AI request. While that mode is on, spoken replies use the iPhone’s built-in voice so the reconstructed answer is not sent to an online voice studio.
Personal, work, and private modes choose which memory lane is active — or stop recording entirely. Higher plans add work mode, scheduled switches, and more AI usage. They do not unlock the right to be private.
How masking and the voice change work →Work, personal, private →Why this is a secretary, not Gemini →