TIHO

Privacy and your recordings

Tiho records speech, turns it into text, and keeps notes in your account across your devices. Cloud processing is optional and requires your permission in the app.

What is processed

When you enable cloud processing, recordings and text needed for transcription or formatting are sent through Tiho's server to OpenAI. Optional reflection and mood analysis require a separate setting. These suggestions are estimates, not medical assessments.

Account email, device credentials, saved notes and uploaded recordings are held by Tiho on Railway. Stripe handles checkout, subscription status and payment details. Tiho does not receive your full card number. Google receives sign-in information if you choose Google sign-in.

Storage and retention

Saved notes and audio remain until removed. Failed recordings stay on your device for recovery. Device backups may include local notes according to your system settings. Short-lived transcription retry receipts contain text and are cleared after 24 hours during scheduled maintenance; cleanup runs every 30 seconds while the service is running and on restart. Usage totals and processing-budget records support limits and billing. Tiho does not log recording content in its server request logs.

Network communication uses encryption in transit. Tiho is not an end-to-end encrypted service: the server and processing providers must process the content you submit. Provider retention is governed by their service terms and account configuration; Tiho does not promise zero provider retention.

Website analytics and support

With your consent, Tiho records page views, selected button clicks, broad traffic sources and viewed sections of this website. A random session identifier is kept in your browser tab; your analytics choice is saved in this browser. Events are retained for up to 90 days. We do not record form contents, full referrer URLs, screen recordings or account identifiers in website analytics. You can withdraw consent using Analytics preferences. Do Not Track and Global Privacy Control are respected.

The owner console displays account contact details, subscription status, usage totals and internal support notes. Access is restricted to the owner account. Administrative subscription actions are audited. Internal support notes are removed when an account is erased; audit entries are retained without its account identifier.

Tiho Letters

The optional newsletter uses Brevo to confirm your email and deliver technology articles, free lessons and offers from Tiho and selected partners. It is separate from your app account and website analytics. Subscribe only with your own email and confirm the email request. Each newsletter includes an unsubscribe link. We check confirmed list membership to apply the welcome discount; we do not send your recordings or notes to Brevo. Unsubscribe separately when deleting an app account. Contact contact@tihoflow.com to request removal of newsletter data.

Keyboard typing, translation and voice editing

Spelling suggestions and automatic corrections run locally using iOS dictionaries. When you choose translation or voice editing, Tiho processes the selected text or your last Tiho dictation, along with your spoken instruction when applicable. Text next to the chosen passage is checked only on your device to avoid replacing the wrong text. Temporary editing targets expire after five minutes. The keyboard does not receive account credentials or journal entries.

Personal spelling dictionary

Edits to transcripts in Tiho can create short spelling corrections in your account dictionary. On Mac, the optional “Remember corrections after insertion” setting locally checks the focused field containing the last Tiho dictation for up to two minutes, stopping when focus changes. Only short correction pairs are saved and synced as spelling references for future transcription. The surrounding field content is not stored or sent for this feature. You can edit or remove dictionary pairs and disable this setting.

Your choices

You can disable cloud processing or optional analysis in Settings, export saved notes, remove recordings, and delete your account within the app. Deleting an account closes it at once: every device is signed out, sync and cloud processing stop, and the Tiho-managed subscription is cancelled immediately. Paid access ends right away and the remaining paid days do not carry over.

By default the closed account and its notes, audio, credentials and usage records are kept for 30 days in case you change your mind. Sign in again within that time with the same email, Apple or Google account and the app offers to restore it. Restoring returns your data on the free plan; the cancelled subscription is not reinstated. Nothing is restored without your confirmation, and a new account is not created for the same sign-in while the old one waits. After 30 days the account and its data are erased automatically during scheduled maintenance, and a linked Apple sign-in is revoked.

You can also erase everything immediately: choose “Delete permanently now” when deleting the account, or sign in to a closed account and choose to erase it now. Immediate erasure removes the server account and its notes, audio, credentials and usage records at once and cannot be undone. To prevent resetting the free allowance by recreating an account, an opaque keyed account reference and the current week’s word/setup-check counters are retained until the weekly reset. This record contains no email, audio or notes; expired references are removed during scheduled maintenance. Copies you exported and device-local recovery archives must be removed on those devices. Financial records retained by payment providers follow their own obligations.

The server keeps the latest seven backup snapshots on its hosting volume. Deleted information can remain in those snapshots until they rotate out; restoring an older snapshot requires reapplying deletions. Anonymous processing-cost totals may remain without an account identifier. Contact us to ask about access, correction, deletion, or backup handling. Do not submit recordings of other people without the permission required for your situation.

Service providers

Кратко по-русски

Облачная обработка включается с твоего разрешения. Аудио и текст обрабатывает внешний сервис; заметки и записи хранятся в аккаунте Тихо. Анализ настроения включается отдельно. Это не медицинская оценка. В настройках можно отключить обработку и удалить аккаунт. Удалённый аккаунт закрывается сразу, подписка отменяется, а данные хранятся 30 дней: за это время аккаунт можно восстановить, войдя снова. Через 30 дней данные стираются автоматически. Стереть всё сразу и без восстановления тоже можно: при удалении или при входе в закрытый аккаунт. После восстановления подписка не возвращается. Локальные архивы и экспортированные копии удаляются на соответствующих устройствах. По вопросам данных: contact@tihoflow.com.

Updated 1 October 2026. Contact Tiho