Privacy Policy

Last updated: July 30, 2026

Saryu ("we," "our," or "us") is a native macOS application built by Vinay Mora. We take your privacy seriously. This policy explains what data we collect, what we don't, and how we handle information across the Saryu app and this website (https://saryu.app/).

The short version: Saryu is designed to be local-first. Recording, editing, export, Apple transcription, and Whisper transcription run on your Mac. If you choose Cloud transcription, audio is uploaded through Convex to Deepgram, or to Sarvam for Telugu, for that request.

What We Don't Collect

Saryu does not collect, transmit, or store:

  • Your screen recordings or screenshots
  • Your audio recordings or enhanced audio, except audio you choose to send to Cloud transcription
  • Your transcription or subtitle text, except results returned by Cloud transcription
  • Your webcam footage
  • Your timeline edits or project files
  • Your file system contents or browsing activity
  • Your calendar event details
  • Analytics, telemetry, or usage tracking data
  • Advertising identifiers or cross-app tracking

Core content creation and processing happens locally on your Mac using native macOS frameworks. Cloud transcription is optional and is described below.

macOS Permissions

Saryu requests several macOS system permissions to function. Here is exactly what each permission does and how the data is handled:

Screen Recording

Captures the selected window or screen for your recordings and screenshots. The captured content is processed and saved locally. Audio is uploaded only if you later choose Deepgram Cloud transcription.

Camera

Accesses your webcam for the webcam overlay feature. The video feed is composited locally into your recording and never transmitted.

Microphone

Records audio commentary with your screen recordings or standalone audio recordings. Audio stays on your Mac unless you choose Cloud transcription.

System Audio Capture

Records audio output from other applications (e.g., meeting audio). This audio stays on your Mac unless you choose Cloud transcription.

Accessibility

Tracks cursor movements and mouse clicks to add visual cursor effects (highlights, click animations) to your screen recordings. No accessibility data leaves your Mac.

Speech Recognition

Supports Apple On-Device and Whisper Local transcription. Those providers process audio on your Mac. Cloud transcription is a separate, optional choice described below.

Calendar Access

Reads your calendar to detect upcoming meetings and offer one-click recording. Saryu only reads meeting times and titles to show notifications — it does not modify your calendar, and no calendar data is transmitted to our servers.

Apple Events (Automation)

Reads the active tab URL from your browser to detect if you're in a meeting (Google Meet, Zoom, Teams). This is used solely to offer recording prompts. No browsing history or URLs are stored or transmitted.

You can revoke any permission at any time through System Settings → Privacy & Security. Saryu will continue to function with reduced capabilities for any permissions you choose not to grant.

What We Do Collect

We collect minimal data only when necessary for account management, subscription validation, and providing app assets:

Account Sign-In

You can sign in with Apple or Google. The provider gives us an account identifier and available profile details such as your name and email address. We store these in Convex to identify your account and provide access. We do not receive your Apple or Google password.

Subscription & Purchase Data

Payments are processed by Stripe. We store the Stripe customer, purchase, plan, and entitlement details needed to provide app access. Stripe handles payment card information; we do not store full card numbers.

Optional Cloud Transcription

Apple On-Device and Whisper Local transcription stay on your Mac. When you select Cloud, Saryu uploads audio through Convex storage. Deepgram processes most languages. Sarvam processes Telugu. The returned transcript and timing data are used in your project.

App Asset Downloads

Saryu downloads wallpaper images and background music tracks from our servers (hosted on Convex) so you can use them in your recordings. These downloads involve standard HTTPS requests but do not include any personally identifiable information. The downloaded files are cached locally on your Mac.

Crash Reports

If the app crashes, macOS may send an anonymized crash report to Apple through their standard crash reporting system. We do not operate our own crash reporting service.

Website Data

When you visit https://saryu.app/, the following may be collected:

Server Logs

Our hosting provider (Vercel) may collect standard web server logs including your IP address, browser user agent, and pages visited. These logs are used for security and operational purposes and are subject to Vercel's Privacy Policy.

Waitlist & Feedback Forms

If you submit the waitlist signup form or the feedback form, we store the information you provide (name, email, message) in our Convex database. This data is used only to respond to your inquiry or keep you updated about Saryu. You can request deletion of this data at any time by emailing us.

No Analytics or Tracking

We do not use any third-party analytics services, advertising pixels, or tracking scripts on this website. There are no Google Analytics, Facebook Pixel, Hotjar, or similar services running on https://saryu.app/.

Cookies

Saryu's website does not set any tracking cookies, advertising cookies, or third-party cookies. The only cookies used are essential ones required for the website to function (such as session management if you sign in). We do not use cookies for analytics, advertising, or cross-site tracking.

Data Storage & Security

Account, entitlement, feedback, and cloud transcription data is stored in or routed through Convex, a secure cloud database with encryption at rest and in transit. Your projects and normal recording, editing, and export files stay on your local file system. Audio is transmitted only when you choose Cloud transcription.

We use HTTPS for all network communications.

Third-Party Services

We use the following third-party services:

We do not use any advertising networks, analytics services, or tracking pixels.

International Data Transfers

Our providers, including Convex, Stripe, Deepgram, Sarvam, Google, and Vercel, may process data in the United States, India, or other locations described in their policies. If you are accessing Saryu from outside the United States, your account data (as described above) may be transferred to and stored in the US. We rely on the security measures of our service providers to protect your data during transfer. For EU users, we process only the minimal data described in this policy, and you can exercise your rights under GDPR as described below.

Your Rights Under GDPR (European Users)

If you are in the European Economic Area (EEA), you have the following rights:

  • Access — Request a copy of any data we hold about you.
  • Deletion — Request that we delete your account and all associated data.
  • Portability — Receive your data in a machine-readable format.
  • Correction — Request correction of any inaccurate data.
  • Objection — Object to any processing of your data.
  • Restriction — Request that we limit how we process your data.

Our legal basis for processing your data is contract performance (providing the service you signed up for) and legitimate interest (operating and improving the product). Since Saryu is offline-first and we collect minimal data, most of your information never reaches our servers in the first place. To exercise any of these rights, email us at the address below.

Your Rights Under CCPA (California Residents)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

  • Right to Know — You can request details about what personal information we collect and how it is used.
  • Right to Delete — You can request deletion of your personal information.
  • Right to Non-Discrimination — We will not discriminate against you for exercising your privacy rights.

We do not sell your personal information. We have never sold personal information and have no plans to do so. Saryu does not share your data with data brokers, advertisers, or any third parties for marketing purposes.

To exercise your CCPA rights, email us at the address below. We will respond to verifiable requests within 45 days.

Data Retention

We retain your account data for as long as your account is active. Waitlist and feedback form submissions are retained until they are no longer needed or you request deletion. If you request account deletion, we will remove all data within 30 days. Subscription records may be retained as required by tax and financial regulations.

Children's Privacy

Saryu is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

Changes to This Policy

We may update this privacy policy from time to time. We will notify users of material changes through the app or website. The "Last updated" date at the top reflects the most recent revision.

Contact Us

If you have any questions about this privacy policy or your data, contact us at:

hello@saryu.app