On the device
Whisper, on the machine, on Windows and Android alike. There is no cloud transcription tier — not on the free plan, not on the paid ones.
Features/Security
What Minuted holds, and what it cannot.
This page exists because we ask it of everyone else. What leaves your device compares six notetakers on what they publish, and quotes each vendor’s own security page. It would be a poor argument if ours were the one row you had to take on trust.
Last checked 10 August 2026 · updated when the answers change
The same five, answered for us.
Word for word the questions the comparison table asks, so our row can be read against the others rather than around them.
No
Never, on any plan. Not “encrypted in transit”, not “deleted after processing” — there is no code path that uploads a recording. See the section below on how that stays true.
Locally, for as long as you choose
30 days, 90 days, a year, or forever. The default is 90. Recordings stay on the device, which is what makes clicking a transcript line to hear it possible.
No
Not by us, and not by Anthropic, who process the text of your minutes and do not train on it. There is no opt-out to find because there is nothing to opt out of.
None
No SOC 2, no ISO 27001, no HIPAA. Minuted is small and new, and an audit is a cost we have not paid. Saying so is the point: the table records what vendors publish, and this is what we publish.
A promise nobody checks is a promise until somebody breaks it.
Every claim above is easy to make and easy to break by accident — a debug upload added to chase a bug, a dependency that phones home, a font fetched from a CDN because it was the quickest way to get one. So the ones that matter are checks that fail the build rather than sentences on a page.
No audio upload
A test reads every file in the app and fails if any of them builds a multipart upload, or if the transcription code acquires a network client at all. It is a tripwire on the accidental version — somebody adding a “send us your recording so we can debug it” button — and that is the version that actually happens. It is not a security control, and we would rather say that than imply more.
No fonts fetched at launch
The app used a package whose default is to download its typefaces from Google the first time it runs. That is one request to a third party before you have done anything, and it happened in local mode too — the mode sold as needing no account and no network. The typefaces are now inside the binary, and a test fails the build if the package returns.
The website does the same
This site’s build refuses to publish if the stylesheet references Google Fonts, for the same reason: it would leak the IP address of every visitor to a page about not leaking things.
No analytics, no advertising
No analytics SDK, no advertising SDK, no crash-reporting service. If Minuted closes unexpectedly on Android the app shows you what Android recorded, on your device, for you to include in a bug report if you want to. Nothing is sent unless you send it.
Everyone who touches anything.
The complete list, and what each one gets. None of them receives audio, because nothing does.
| Who | What they get | When |
|---|---|---|
| Anthropic | The text of a meeting — your transcript and typed notes — to write the minutes and answer questions. Does not train on it. | Cloud mode only. Never in local mode. |
| Cloudflare | Hosts the server and the database holding your account and, if you use sync, your meeting text. | Whenever you are signed in. |
| Stripe | Payments. We never see or store card details. | Only if you subscribe. |
| Resend | Account email — welcome, password reset, plan changes — and the product mailing list if you joined it. | When we email you. |
| Sign-in, if you use it. Calendar events, read-only, if you connect it. | Only if you connect them. | |
| Todoist | The tasks you choose to push, and nothing else. | Only if you connect it. |
| monday.com | The tasks you choose to push, and the write-up if you send it to a board. | Only if you connect it. |
| Notion | The write-up for the meetings you file there, with the title, date and who was in the room. | Only if you connect it. |
Local mode uses none of these. With local AI selected and no account, Minuted makes no outbound request at all — the one exception is the first-run model download on Android, which happens once and is the model coming to you rather than anything of yours going anywhere.
Deleting an account, and the one thing that survives it.
Settings → your account card → Delete account, confirmed by typing your address. It takes effect immediately and cancels any subscription.
Your email address stays with Resend afterwards, on a suppressed list. That sounds like the opposite of deleting you, so the reasoning: erasing it would destroy the record that you had asked not to be emailed, and nothing would then stop you being added back by a later signup or an import at our end. So it is kept in a state that cannot be mailed — unsubscribed, name cleared, removed from every list. It is there to keep us away from you, not to keep you.
Ask and it goes entirely. The full account of what deletion does, and the two other things that outlast it, is in the privacy policy.
Found something?
Email hello@minuted.io. There is no bug bounty and it would be dishonest to imply one — but a real report gets a real answer, and credit if you want it.
Please do not test against other people’s accounts. Anything you can reproduce against your own is fair game.
The short version.
Your recordings never leave your machine, nobody trains on your meetings, and the whole thing works with no account at all if that is what you want.