Privacy policy

Draft for the private beta, pending legal review.

The short version: Oyma is a local-first app. Your notes, recordings and transcripts are stored on your Mac and are never sent to us. This website uses Google Analytics to count visits; in the EU, EEA, UK and Switzerland it runs without cookies. If you join the beta, we keep your email address to send you an invite.

Who we are

This policy covers the Oyma Mac app and this website. The data controller is Marqly, Inc.. Contact: hello@getoyma.com.

The Mac app

What stays on your Mac

Notes and attachments. Stored as plain files in a folder you choose. We never receive them.
Recordings and transcripts. Audio is recorded to your Mac. Transcription runs on your Mac with Whisper by default.
Search. A local index on your Mac.
API keys. If you add an Anthropic or OpenAI key, it is stored in the macOS Keychain.

When data leaves your Mac

Only in these cases, each of which you set up yourself:

Cloud AI with your own key. If you configure Anthropic or OpenAI and run a summary, Ask or another AI action, the text involved is sent to that provider under your account and their terms. We are not a party to that request.
Cloud transcription with your own key. If you choose OpenAI transcription, the audio is sent to OpenAI.
Model downloads. Choosing a transcription model downloads it once from its host.
Link previews. Pasting a link can fetch that page’s title and image from the linked site.
Updates. The app checks for updates unless Local-only mode is on.

Local-only mode blocks all of the above (how Local-only mode works). The app keeps an egress log (when, which provider, which feature and how many bytes, never content) that you can read in Settings.

Usage statistics and crash reports

Both are off by default. If you turn them on, usage statistics are a fixed list of content-free events, and crash reports are scrubbed of file paths, email addresses and keys. Neither ever includes note content.

Accounts

There are no accounts during the beta. Nothing is collected to identify you in the app.

This website

Analytics. We use Google Analytics 4 to count visits and see which pages lead to sign-ups. It sends usage data (pages viewed, rough location, device type) to Google. Visitors in the EU, EEA, UK and Switzerland are measured without analytics cookies (Google’s Consent Mode); elsewhere Google Analytics sets its standard cookies. Advertising features are off. We never send your email address or anything from the app to Google.
Beta sign-ups. If you join the waitlist we store your email address, your computer platform, which page you signed up from and when. We do not store your IP address. We use the address only to send your invite and essential product notices, and you can ask us to delete it at any time.
Spam protection. Sign-up forms use Cloudflare Turnstile, which processes technical signals to tell people from bots. See Cloudflare’s privacy policy.
Hosting. The site is served by Cloudflare.

Your rights

You can ask us to access, correct or delete the data we hold about you (in practice, your waitlist entry) by emailing hello@getoyma.com. If you are in the EU or UK you can also complain to your data protection authority.

Changes

The privacy architecture page explains the same facts in more detail, and the terms of use cover the beta itself. If this policy changes we will update the date at the top of this page, and tell beta users by email about anything material.