Security and encryption
TellDone uses multiple layers of security to protect your data.
Authentication
- Secure tokens - your sessions are protected with tokens that refresh automatically
- iOS Keychain - credentials are stored in the most secure storage available on Apple devices
- Apple Sign In - use Apple's secure authentication instead of passwords
Data at rest
- Encrypted storage - audio files and exports are stored on secured cloud infrastructure
- Password hashing - passwords are never stored in plain text; they are hashed using a one-way algorithm before storage
- Token security - authentication tokens are hashed server-side
Data in transit
- HTTPS everywhere - all communication between the app and servers is encrypted with TLS
- Webhook signing - webhook deliveries use HMAC-SHA256 signatures so receiving services can verify the data came from TellDone
Privacy options
You control how your data is processed:
- On-device transcription - choose Apple Speech Recognition so transcription happens locally (audio is still uploaded for playback and AI analysis)
- Server transcription - for maximum accuracy, audio is sent to the server over an encrypted connection
- Integration permissions - you choose which services can access your data
- Email forwarding control - decide what gets forwarded and to which email addresses
Data management
- Export all your data anytime (Basic plan and above)
- Delete your account with a 7-day safety window
Deleted notes, tasks, and events are kept in the Activity screen for a window that depends on your plan (Free: 7 days, Basic: 30 days, Pro: 90 days, Ultra: 365 days), then removed permanently. The Activity screen shows when each item was deleted in relative time (e.g. "2 hours ago", "yesterday").
