Dumpling

Privacy Policy

Effective October 20, 2026

Dumpling is made by Even Seal Productions LLC (“we”, “us”). This policy explains what Dumpling does with your information. The short version: your notes live on your iPhone, and very little ever leaves it.

What stays on your iPhone

  • Audio recordings never leave your device. Transcription happens on your iPhone.
  • Recordings made on Apple Watch transfer to your paired iPhone only.
  • Your notes, transcripts, folders, tags, to-dos and journal are stored on your iPhone.
  • If you use Apple Intelligence for AI sorting, it runs on your iPhone and nothing is sent anywhere.

What we don't do

  • No accounts or sign-in.
  • No ads.
  • No analytics or tracking SDKs in the app. The app sends only crash reports and, unless you turn them off, anonymous usage counts (both below).
  • We don't sell your data.

AI sorting with Dumpling AI

AI sorting is optional. When you first open Dumpling it uses Apple Intelligence (on your iPhone) if your iPhone supports it, and Dumpling AI if it doesn't. You can switch between them or to your own API key, or turn AI off, in Settings.

When Dumpling AI sorts a note, your iPhone sends the following to our server, which passes it straight to OpenAI and returns the result:

  • The transcript text of the note
  • Your folder names, folder descriptions and tag list
  • Note titles, summaries and tags (used for wrap-ups, finding notes and sorting new notes the way you do)
  • Short loose-end phrases from your earlier notes, such as "Get back to Sam about the deck", so a new note can close the ones it settles (never from locked folders)
  • The text of to-dos that have no folder yet, so it can suggest a new folder for them (never from locked folders)

Our server does not save this text, and OpenAI is asked not to store it (store: false). Our server keeps only a random ID for your install, an Apple App Attest key that proves requests come from the real Dumpling app, and usage records that enforce the free limit: how many minutes of each note Dumpling AI sorted (with a random note ID, never the note itself) and when you reached the limit. We keep these for 13 months.

Dumpling Plus

If you buy Dumpling Plus, Apple handles the payment: we never see your card or your Apple Account. Your iPhone sends our server the App Store's signed record of the purchase, and Apple tells our server about renewals, cancellations and refunds. We keep the purchase's transaction ID, plan, renewal status and expiry date, linked to your install's random ID, so Plus works on your iPhones. No name or email address is involved.

Optional: your own API key

If you choose your own key instead, Dumpling uses that key directly with the service it belongs to: OpenAI, Anthropic, xAI, Google Gemini or OpenRouter. The key is stored in the iOS Keychain on your iPhone and is never sent to our server.

When you use your own key, Dumpling sends the following directly from your iPhone to that service:

  • The transcript text of each note
  • Your folder names, folder descriptions and tag list
  • Note titles, summaries and tags (used for wrap-ups, finding notes and sorting new notes the way you do)
  • Short loose-end phrases from your earlier notes, such as "Get back to Sam about the deck", so a new note can close the ones it settles (never from locked folders)
  • The text of to-dos that have no folder yet, so it can suggest a new folder for them (never from locked folders)

The service handles this data under its own terms: see OpenAI, Anthropic, xAI, Google Gemini or OpenRouter. With OpenAI, requests are sent with storage turned off (store: false). OpenRouter passes your request on to the company that runs the model you pick.

Locked folders

Notes in locked folders are left out of wrap-ups entirely: they are never sent to the AI for a wrap-up, never included in what our server delivers, and never emailed. AI sorting (above) still applies to them like any other note.

Optional: daily wrap-up delivery

Your daily wrap-up is always available in the app's Journal. If you also turn on push notifications or email delivery, then only while at least one of them is on, our server (hosted on Vercel) receives:

  • The finished wrap-up text. If you use CalendarPA, it also lists meetings AdaPA booked, moved or cancelled that day, with the person's name and the meeting time.
  • Your send time and time zone
  • Your push notification token
  • Your email address, if email is on

Our server never receives audio, and never stores transcripts. Wrap-up emails are sent through our email provider, Resend, which receives your email address and the wrap-up text.

Turn off both push and email in Settings and our server deletes everything it has for that device.

Optional: morning plan

The morning plan is off until you turn it on. Dumpling works out your plan on your phone. If you turn on its notification or email, then for each morning it is sent, our server receives:

  • The plan's words: your best free window, the to-dos in it and your top priorities. Your day's schedule is included too: event names come only from CalendarPA; Apple Calendar events show only as "Busy".
  • The send time.
  • Your push token, and your email address if email is on.

Our server deletes the plan's words as soon as it is sent. Resend receives your email address and the plan's words. To-dos from locked folders are never included. Apple Calendar is read only on your phone, and only the calendars you pick.

Optional: CalendarPA

CalendarPA is optional and off until you connect it in Settings. AdaPA is the built-in virtual assistant for CalendarPA that handles your bookings.

When you connect CalendarPA and send a meeting to AdaPA, Dumpling sends CalendarPA the sentence or two you said about the meeting, the person you picked (their name and email, and a phone number if you add one), the details you confirmed (how long, where, and when you are free) and your time zone. Dumpling never sends recordings, full transcripts or notes in locked folders.

Dumpling talks to CalendarPA directly from your phone. The Dumpling server only passes along "something changed" signals, such as "booked", so your phone can tell you; it does not keep the meeting details, the people or your CalendarPA sign-in. What CalendarPA does with your data is covered by CalendarPA's own privacy policy. You can disconnect at any time in Settings.

With the morning plan on, Dumpling also reads your calendar's events for today and tomorrow from CalendarPA, on your phone, to find your free time.

Optional: assistants that add to-dos (Integrations)

Integrations are optional and off until you add a connection in Settings → Integrations. A connection gives an assistant you choose, such as Instinct or Meta Muse, a key that lets it add to-dos to your list and check that they arrived. It can't read your notes, recordings or other to-dos, see locked folders, or change or delete anything. An iPhone with no connection never asks our server for to-dos.

A to-do an assistant sends waits on the Dumpling server until your iPhone picks it up, for at most 7 days. Once your iPhone has it, the server deletes its text after 7 more days, and the rest of the record (an ID and whether it arrived) after 90 days. The server keeps each connection's name and a scrambled form of its key, never the key itself. Revoke a connection in Settings and its key stops working at once, and to-dos it sent that haven't arrived are deleted. If “Notify me” is on for a connection, the server also keeps your iPhone’s notification address for it. When that assistant sends a to-do, Apple’s push service delivers an alert that names the assistant, never the to-do. To-dos from assistants are never sent to an AI. What an assistant does with your information is covered by its own privacy policy.

This website

mydumpling.app uses Google Analytics to count visits: which pages are viewed, roughly where visitors are (country or city), how they found us, and the type of device and browser. We use this only to understand interest in Dumpling. It isn't linked to the app or to your notes, and it isn't used for ads.

Visitors in the EU, EEA, UK and Switzerland are counted without analytics cookies (Google Consent Mode). Elsewhere, Google Analytics may set first-party cookies. You can block them in your browser or with Google's opt-out add-on.

Anonymous usage stats

Once a day, Dumpling sends our server a short report of counts, such as how many notes you recorded, minutes, searches and folders, along with the app version and which AI option you use. It never includes words from your notes, and it is stored without anything that identifies you or your iPhone. You can turn it off in Settings → Share anonymous usage stats.

Crash reports

If Dumpling crashes or hits an unexpected error, it sends a report to Sentry, our crash-reporting provider, along with Apple's crash and performance diagnostics. Reports contain technical details only: the error type, the part of the app it happened in, the app version and the device model. They never include your notes, transcripts, titles, folder names, screenshots or audio, and they aren't linked to you.

Support contact form

When you use the form on our Support page, we receive your email address and your message by email so we can reply. We keep them only as long as we need to answer you. To keep out spam, the form uses Cloudflare Turnstile, which checks your browser in the background; its use is covered by the Cloudflare Turnstile Privacy Addendum.

Your choices

  • Export: Settings → Export everything makes a zip of all your notes and your journal.
  • Delete: delete notes in the app, or delete the app to remove everything stored on your iPhone. Turning off wrap-up delivery deletes your wrap-ups, email address and push token from our server.
  • Questions: email support [at] mydumpling [dot] app.

Children

Dumpling is not directed to children under 13.

Changes to this policy

If this policy changes, we'll post the updated version on this page with a new effective date.

Contact

Even Seal Productions LLC · support [at] mydumpling [dot] app