Recordleaf

Information stored by the app

Recordleaf stores information you enter: notes, dates, hours, project and work codes, pathway categories, structured evidence, optional supervisor or validator notes, voice recordings, reference photos and captions, and local preferences. These can reveal employment, clients, projects, professional status, work locations or performance. Follow employer, client, regulator and device policies; avoid unnecessary confidential or identifying information.

Where information goes

The described release has no Recordleaf account, advertising service, analytics service or Recordleaf application server. Records remain on your device unless you choose export, share, Files or encrypted backup. The operating system sends the chosen copy to your selected destination; that provider’s practices then apply. Recordleaf does not receive cloud-storage passwords.

Permissions

Microphone access is requested when you choose dictation or recording. Camera access is requested when you choose a reference photo; existing-photo selection uses the operating-system picker. Recordleaf does not request location or contacts. Dictation uses on-device processing without silent fallback to cloud transcription.

Local storage

Text and the local profile are stored in an encrypted SQLCipher database protected by a device key. Retained voice and photos use authenticated encryption in app-private storage. Temporary decrypted playback, preview and export files are removed after use and reconciled at startup. Android automatic backup is disabled because device-keyed data may be unreadable without the original key.

Exports and encrypted backups

You can create text exports, documentation-review copies and complete encrypted backups. Complete backups use a separate recovery key not embedded in the backup file. Protect that key separately and manage copies sent to email, cloud storage, removable storage, employers, reviewers or regulators.

Retention and deletion

Local records and retained media remain until you delete a record, use Erase this archive or uninstall. Erase this archive uses two confirmations and removes the local profile, records, retained voice, photos, captions, pending-photo state and temporary decrypted files. Previously exported copies must be deleted at their destinations; the app cannot delete them.

Security and recovery

Encryption and app-private storage reduce risk but cannot guarantee absolute protection. Loss of the device without a usable backup, or loss of the separate recovery key, may make records unrecoverable. QAMMKO holds no server copy in this release and generally cannot restore your archive.

Support correspondence

Emailing QAMMKO does not automatically attach or upload your archive. Only the message and attachments you choose to send become correspondence. Do not send recovery keys, complete archives, client records or confidential evidence for ordinary help. Support-email retention remains pending.

Audience

Recordleaf is designed for adults managing professional or work records and is not directed to children. The final store target-audience declaration remains a release review item.

Changes to this policy

Changes to app data handling must be reflected in this policy, the in-app notice and applicable store declarations before the changed release is distributed. The effective date will identify the approved policy version.

Contact QAMMKO

QAMMKO · Ontario, Canada. For privacy questions, contact hello@qammko.ca. Do not send passwords, recovery keys, complete archives or unnecessary sensitive information.

Your email address, message and chosen attachments become correspondence separate from app data. Support-email retention has not been confirmed; no deletion period is stated here.

Visiting this page is separate from using the app. See the QAMMKO website Privacy Notice for website inquiry handling.