Verify it yourself
Last updated: 8 July 2026 · Applies to Sopravo 1.0
The claim: your meeting audio, transcripts, summaries and action items are processed and stored on your iPhone and never leave the device. Not "we don't look at them" — there is no server of ours they could go to. This page exists so you don't have to take that on faith: below is every network request Sopravo can make, the exact analytics events, and three tests anyone can run in minutes.
1. What "on-device" means here, precisely
Recording uses the iPhone microphone APIs. Transcription runs on Apple's on-device speech models. Speaker separation runs local open-source ML models (pyannote/WeSpeaker via FluidAudio). Summaries are written by Apple Intelligence's on-device foundation model (iPhone 15 Pro or later). None of these steps sends audio or text anywhere. The app works with no account — there is nothing to sign in to.
We do not claim "the app makes no network requests." That would be false for any app with App Store billing. The honest claim is narrower and stronger: your content is never in any request. Here is the complete list of what is.
2. Every host Sopravo can contact
| Host | Purpose | When | What it carries |
|---|---|---|---|
api.revenuecat.com |
Subscription / purchase state (RevenueCat) | App launch, purchase, restore | A pseudonymous purchase identifier and entitlement state. No account, no name, no content. |
eu.i.posthog.com |
Anonymous product analytics (PostHog, EU) | Only while "Share anonymous analytics" is ON | The four events in section 3 — scalar values only. No person profiles (personProfiles: never), IP masked server-side. |
*.ingest.de.sentry.io |
Crash reports (Sentry, EU) | Only while "Share anonymous analytics" is ON, after a crash | Stack trace, device model, OS version. sendDefaultPii is off. Never content. |
lifetime.sopravo.app |
The founder-lifetime counter on the paywall | When the paywall is shown | A GET that receives one public number (seats left). Sends nothing about you. |
Apple (*.apple.com, iCloud/CloudKit) |
App Store billing; optional backup to your own private iCloud database | Purchase flows; backup only if you enable it | Billing is Apple's, we never see payment details. The private CloudKit database is readable by your Apple account only — the developer cannot access it, by design of the platform. |
That is the whole list. In particular there is no Sopravo content server: no host exists that could receive your audio or text.
3. The exact analytics events
Analytics is limited to four hand-defined events, all about the purchase funnel. Event properties are restricted to safe scalars by construction (the event type cannot carry free-form text), so content cannot leak in even by mistake:
| Event | Properties |
|---|---|
paywall_shown | — |
trial_started | plan (weekly / monthly / yearly / lifetime) |
purchase_completed | plan (same categorical values) |
restore_completed | — |
Opting out: Settings → Privacy & Data → turn off "Share anonymous analytics." With the toggle off, the PostHog and Sentry SDKs are never started on the next launch — not muted, not sampled: zero requests to either host. That is test 3 below.
4. Test 1 — Airplane mode (2 minutes, no tools)
- Enable Airplane Mode (Wi-Fi off too).
- Record a short meeting in Sopravo.
- Watch it transcribe live, separate speakers, and (on iPhone 15 Pro or later with Apple Intelligence enabled) write the summary with action items.
Everything works end to end with no network at all, because nothing about the pipeline needs one. An app that uploads your audio for processing cannot pass this test.
5. Test 2 — Watch the traffic with a proxy (15 minutes)
- Install an HTTPS-inspecting proxy — Proxyman, Charles, or mitmproxy — and trust its certificate on the iPhone.
- Use Sopravo normally: record, transcribe, open the summary, export a PDF.
- Compare the captured hosts against the table in section 2.
What you will see: small JSON requests to RevenueCat, and (if analytics is on) the four events above going to PostHog. What you will not see: any request carrying audio, transcript text, summary text, or anything sized like them. If you ever observe traffic that contradicts this page, please email [email protected] — that would be a bug, and we will treat it as a severity-one incident.
6. Test 3 — The opt-out is real
- Settings → Privacy & Data → turn off "Share anonymous analytics."
- Force-quit and relaunch the app with the proxy from test 2 running.
- Observe: no connection to
eu.i.posthog.comor*.ingest.de.sentry.io— the SDKs were never initialized.
7. Why the iCloud backup doesn't weaken the claim
Optional backup uses CloudKit's private database, which lives inside your own Apple account. Apple's platform design gives the developer no API to read a user's private database — we could not fetch your backups even if we wanted to. Turning backup off keeps everything solely on the device.
8. Corrections
This page is a factual, versioned claim about app behavior. If an app update changes any row of the table above, this page changes in the same release. Found an inaccuracy? [email protected].