Privacy Policy

Cereon (“the App,” “we,” “us,” or “our”) is an AI voice memory companion and personal knowledge management tool developed and published by Apptiline. Cereon enables you to capture voice notes, transcribe speech, summarize discussions, map thought relationships via knowledge graphs, and retrieve answers using semantic memory queries.

We recognize that your spoken thoughts and personal notes contain sensitive and confidential information. We operate under a foundational principle: Your memories belong to you. We never sell your personal information, never share your recordings with third-party advertisers, and never use your private voice or text memories to train publicly available AI models.

Cereon requires microphone access via the Android sensitive permission android.permission.RECORD_AUDIO to allow you to record your thoughts. In accordance with Google Play's Sensitive Permissions Policy:

• On-Demand Recording Only: Microphone recording is initiated strictly when you explicitly press the Record button in the app. Real-time visual waveform feedback is shown while recording is active.
• No Background Listening: Cereon never records audio in the background or when the app is idle. The microphone is released immediately when you tap pause, finish, or cancel.
• Local Processing to WAV: Audio is captured locally at 16 kHz mono 16-bit PCM and encoded to standard WAV before being uploaded over encrypted HTTPS/TLS connections for speech-to-text transcription.
• User Control & Revocation: You can grant or revoke microphone access at any time in your Android system settings (Settings > Apps > Cereon > Permissions > Microphone).

Cereon uses advanced machine learning and language models (including Google Gemini and specialized speech models) to provide audio transcription, speaker diarization, executive summaries, knowledge graph extraction, and Q&A assistance.

Cereon includes an optional App Lock feature that prompts for biometric verification (fingerprint or face unlock) before opening the app.

• 100% On-Device Framework: Biometric authentication is handled entirely by Android's native androidx.biometric.BiometricPrompt API.
• Zero Biometric Data Access: Cereon never accesses, stores, or transmits your actual fingerprint or facial biometric data. The Android operating system performs verification inside its hardware-isolated Trusted Execution Environment (TEE) / StrongBox and returns only a binary cryptographic confirmation.

We work with trusted third-party SDKs that operate under strict confidentiality and security standards:

• Google Play Services & Google Identity: Authentication and in-app update delivery (Google Privacy Policy).
• Firebase Analytics & Crashlytics: Stability metrics, crash diagnostics, and anonymous usage telemetry (Firebase Privacy).
• Firebase App Check & Play Integrity: Device attestation and anti-abuse verification.
• RevenueCat: In-app subscription entitlement synchronization (RevenueCat Privacy).
• Google Play Billing: Secure purchase and subscription transactions.

• Encryption in Transit: All communications between the Cereon app and cloud servers are encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS).
• Hardware-Backed Android Keystore: Authentication tokens are encrypted with AES-256-GCM using keys generated inside the hardware-isolated Android Keystore. Plaintext credentials are never saved to disk.
• Cloud Storage Encryption: Stored audio files, transcripts, and database backups are encrypted at rest using AES-256 standards.

We retain your memories for as long as your account remains open. In compliance with Google Play's Account Deletion Policy, you can delete your account and its associated data using either method below:

Deletion Scope: Deletion permanently purges all voice recordings, audio uploads, transcripts, AI notes, knowledge graph links, and account identifiers from our active databases.

Cereon does not currently provide separate Settings controls to bulk-delete all audio, all transcripts, or search history while keeping your account. To erase all of that data, use the account-deletion process above.

Under international privacy frameworks (including GDPR, UK GDPR, and California CCPA/CPRA):

• Right of Access & Portability: You can view and export your memories anytime in open formats (.md, .txt, audio streaming links).
• Right to Erasure: You can permanently delete your account and its associated data at any time using the account-deletion process described above. Separate bulk-deletion controls for audio, transcripts, and search history are not currently available in Settings.
• No Sale or Sharing: We do not sell or share your personal data for cross-context behavioral advertising.
• Non-Discrimination: We never discriminate against users who exercise their privacy rights.

Cereon is intended for adults and professionals. It is not directed at or designed for children under 13 years of age (or under 16 in the European Union). We do not knowingly collect personal data from children. If you believe a child has provided data, contact us at support@apptiline.com for immediate deletion.

For questions, data access requests, or privacy assistance: