Who we are
Crypt'd LLC builds local-first applications and publishes them as Crypt'd Apps. The public site is cryptdstudios.com. Optional network features run through services we operate, named in each app note.
This policy covers the Crypt'd website and Crypt'd mobile applications we publish now or later, unless a later app posts a superseding notice. Android is shipping first. iOS is in scope of this policy if and when we publish there.
Privacy and support: support@cryptdstudios.com
1. Core principles
- No account required to do the work. We do not make a login the price of the core feature. We do not track you across apps or sites, do not build a marketing profile, and do not ship advertising SDKs or third-party behavioral analytics.
- Local first. Notes, plans, recordings, transcripts, imports, and settings live on the device. Unless you start a named network action, that content does not leave the device.
- Network is a tap. If something leaves, you can name the button in one sentence.
- Minimum payload. We send the smallest artifact that makes the action work. Text instead of a whole file when text is enough. Audio only when the action is transcription.
- No sale. We do not sell personal information and do not share it for cross-context behavioral advertising.
- No Crypt'd model training on your work. We do not use your content to train a Crypt'd model. We select vendor tiers whose contracts, as we understand them, forbid using that traffic to train the vendor’s public models. Vendor monitoring windows still apply and are named below.
- These pages do not spy. The studio site is static HTML. No cookies. No analytics script.
2. Information we handle
On the device
Typical local store — exact items are in the app notes:
- Content you type, import, record, or generate.
- Files the app copies for your use.
- Preferences.
- A device-generated identifier if that app talks to our proxy, used to enforce quotas or entitlements — not to stitch an advertising profile.
Where the OS allows it, we turn off automatic cloud backup of sensitive app data so a platform backup does not quietly copy a recording or a private file into another company’s cloud.
Handled by our proxy
- Quota and entitlement checks. An anonymous device identifier and monthly usage counts, so a plan cannot be reset by reinstalling and so a paid entitlement can be honored.
- What we do not need to run the apps: username, email, or government ID.
- Website and proxy logs. IP address, user-agent, timestamp — for upkeep, security, and rate limits. Not for ads.
- Support mail. If you write us, we receive the address and the message so we can answer.
- Diagnostics. Stored on the device. Sent only if you tap Send. If a build has no such button, nothing is sent.
3. When you tap an AI action
Offline features keep working on whatever is already stored. If you never tap Extract, Ask, Transcribe, Summarize, or a later named action, we do not receive your content.
When you do tap, the device talks to our proxy over HTTPS. The proxy authenticates the app, checks the plan, and forwards the submitted text or audio to the processor named for that action. It returns the result to the device. We sit in the middle so vendor keys are not baked into a public app.
DueNext Extract and Ask send text, not the original PDF. ClassReplay Transcribe sends the audio, because audio is the work. ClassReplay Summarize sends the transcript text, not the audio. App notes say which.
Processors we use, and what their public terms say as of this draft:
| Provider | Purpose | Vendor retention (as represented to us) |
|---|---|---|
| xAI (Grok family) | Extract, ask, summarize | Zero Data Retention on the path we buy: processed to answer, then discarded. |
| OpenAI (transcription models) | Speech to text when you tap Transcribe | Zero Data Retention on the path we buy. |
Ordinary hosting, DNS, and TLS vendors may see IP addresses and connection metadata. We do not grant processors a right to advertise to you from that traffic.
4. Payments
Billing runs through Google Play. A later iOS app would use the App Store. We do not collect card numbers, bank accounts, or billing addresses. Play may share a purchase token with our proxy so we can add the hours or the month you bought. We do not see your card.
5. Permissions
Each app asks only for what a feature needs. ClassReplay asks for the microphone to record, and for notifications if you opt in. Refusing a permission turns that feature off. Playback of what is already stored still works.
6. Retention, deletion, export, and loss
On the device. You hold the store. Use the in-app delete control, then uninstall if you want the app gone. Export only what you mean to let out.
On our proxy. Audio and transcript bodies are kept only long enough to finish the job. Quota rows (device id, timestamps, counts) may last up to 45 days. Write support with the device id shown in Settings if you want those rows removed.
Loss is yours. We do not keep a spare copy of your recordings or notes that we can restore onto a new phone. Uninstall, Delete all, or a wiped device can make that content gone. Make your own export if you need a spare.
7. Children and other people’s voices
Apps are aimed at adults and at college students. They are not directed at children under 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If that happens through a network action, tell us and we will delete server rows we can find.
A recording can contain other people. You are responsible for having the right to record that room. Some places require all-party consent. Many schools restrict recording without permission. Crypt'd is not a school’s FERPA official.
8. EEA and UK
Legal basis. Device quota identifiers and server logs: legitimate interests in running a service that is not abused, and in answering mail you send. AI transmission: your direction when you tap the action.
Rights. Access, rectification, deletion, objection, restriction. Because we do not keep accounts, verifying a quota row may require the anonymous device id from Settings.
Transfers. Processors may handle data in the United States under standard contractual clauses or an equivalent framework. You may lodge a complaint with your local authority.
10. California
We do not sell personal information and do not share it for cross-context behavioral advertising.
In the prior 12 months we may collect standard network activity (server logs) and a unique device identifier for quota. California residents may request to know or delete that server data, subject to legal exceptions. We will not discriminate for asking.
We believe in digital privacy and sovereignty, so while California law requires this, we honor it for any of our customers, regardless of citezenship.
11. Security
HTTPS to our proxy. Vendor keys for public builds live on our side of that proxy, not in the app. No transmission is perfect. Do not paste secrets into a title field.
12. Changes
When we add an app, a payment, a processor, or a new kind of data that leaves the device, we update this page and the date. New apps inherit these rules. Differences appear as a labeled note — not as a silent change.
13. App notes
If a note conflicts with a studio rule, the note wins for that app, and we will say so.
ClassReplay · com.cryptd.classreplay · Crypt'd Apps
Lecture recorder
On the phone: the recording, the transcript, the summary, titles, course labels, flashcards, and timestamps. Audio does not leave the phone until you tap Transcribe.
What leaves, only if you tap: Transcribe sends the audio to replay.cryptdstudios.com. Our proxy sends that audio to OpenAI and returns the transcript. Summarize and Ask AI send the transcript text, not the audio, to the same proxy, which calls xAI and returns the notes. A quota check sends the device id. Sharing a PDF leaves the phone only if you choose Share.
Money: the month and extra class hours are sold by Google Play. We receive a purchase token so the proxy can add what you bought. We do not see your card.
Delete: delete the lecture in the app. Uninstall removes the rest. Write support@cryptdstudios.com with the device id from Settings to remove the quota row.
Rooms: ask before you record. A summary is not harmless if it quotes people who did not agree.
DueNext · com.cryptd.duenext
Planner
On the phone: terms, courses, tasks, study suggestions, extracted text, and any local copy of a file you import.
What leaves, only if you tap: Extract sends text (not the original PDF), a device id, and a year/term hint to apps.cryptdstudios.com. Ask sends your question plus a short excerpt. Quota check sends the device id. The proxy calls xAI and returns the result.
Delete: Settings → Delete all local data. Uninstall removes the rest.
14. Apps not shipped yet
A future Crypt'd app is covered by these rules the day it ships under this name or the com.cryptd root.
We will add a note: what lives on the device, which tap sends what, where it goes, and where Delete lives.
Until that note exists, assume nothing leaves unless the in-app copy says it does.
15. Contact
Crypt'd LLC
Crypt'd Apps on Google Play
Austin, Texas, United States
cryptdstudios.com
support@cryptdstudios.com