Who is responsible
For Lenn Cloud and this website, the data controller is Synapsr, [legal form to be completed], [registered address to be completed], [company registration number to be completed]. Any question: lenn@synapsr.io.
If you use Lenn on a self-hosted server, the person or organisation running that server is responsible for your data. Synapsr has no access to it.
What we process
| Category | What it is |
|---|---|
| Account | Your email address, and your companion’s settings: its name, colour, voice, formal or casual address, language, time zone. |
| Moments | The audio of what you let it hear, its transcript, and what Lenn keeps from it: title, gist, key points, promises, people mentioned. The photos and screenshots you add, the passages you mark. |
| Thread with Lenn | Your written or dictated messages, and its answers, with the passages they cite. |
| Voice conversations | The sound of your voice during a spoken conversation (streamed live, see below), and the transcript of the exchange, which joins your thread. |
| Memory | The people, promises and facts Lenn remembers. You can correct or erase them. |
| Voiceprints | Optional. A numerical representation of your voice and, if you confirm it, of the voices of people close to you. No audio sample is ever kept. |
| Devices | The name and type of your connected devices, the token used to send them notifications. |
| Subscription | Your plan, its status, your invoices. Payment is handled by Stripe: we never see your card number. |
| Usage | Listening time and voice minutes used, to apply your plan’s limits. |
| Technical logs | IP address, date and time, request type and errors, to run and protect the service. |
Why, and on what basis
| What we do | Legal basis (GDPR) |
|---|---|
| Providing the service: listening, transcribing, understanding, remembering, answering, reminding you of promises | Performance of our contract with you (article 6(1)(b)). For sensitive data, your explicit consent (article 9(2)(a)). |
| Recognising voices with voiceprints | Your explicit consent, given separately and withdrawable at any time (article 9(2)(a)). |
| Managing your subscription and invoices | The contract, and our accounting obligations (article 6(1)(c)). |
| Security, abuse prevention, fair use | Our legitimate interest in protecting the service and its users (article 6(1)(f)). |
| Writing to you: sign-in codes, important account information | The contract. No promotional email without your agreement. |
| Answering your support requests | The contract, or our legitimate interest. |
What we don’t do: sell or rent your data, show ads, build a marketing profile, use your memories to train AI models.
Where your data is processed
The path of a moment, from listening to answering:
- On your device first. Listening is recorded locally, then sent in chunks to your Lenn server over an encrypted connection.
- On our servers. Lenn Cloud is hosted by [hosting provider and country to be completed]. That is where your moments, memory and thread are kept.
- Transcription is done by Groq (Whisper model), which receives the audio.
- Who speaks is determined by our own audio service (noise reduction, speaker separation, voiceprints), on our servers. No third party does it for us.
- Understanding and answers are done by Anthropic (Claude), which receives the transcript, added photos and the memory excerpts needed to understand a moment or answer a question.
- Spoken conversation goes through OpenAI (GPT-Live): the sound travels directly between your device and OpenAI, and our server stays connected so that Lenn answers with its memory. Answers read aloud on the Watch are also produced by OpenAI.
- Notifications are delivered by Apple (Apple Push Notification service). Their text may include a preview, such as a moment’s title.
- Payment is processed by Stripe.
We chose business offers whose terms exclude training models on your data. Some providers briefly keep the data they receive, up to 30 days, to detect abuse, then delete it.
Groq, Anthropic, OpenAI and Apple are established in the United States. These transfers rely on the EU–US Data Privacy Framework where the provider is certified, and on the European Commission’s standard contractual clauses.
Sensitive data
Your health
If you let Lenn listen to a medical appointment, your moments contain health data, protected by article 9 of the GDPR. We only process it to provide the service, with your explicit consent, which you can withdraw by deleting the moments concerned or your account. Lenn is not a medical device: it reminds you what was said, it never makes a diagnosis.
A conversation can also reveal other sensitive information (opinions, beliefs, private life). It gets the same treatment: used for you alone, never analysed for anything else.
Your voice
A voiceprint is biometric data. It is optional: you only turn it on with explicit, dated consent, separate from everything else. Only numbers are kept, never the sample of your voice. You can withdraw your consent at any time: all voiceprints are then deleted.
When you confirm who is speaking (“that’s Marc”), Lenn may also keep that person’s voiceprint to recognise them later. Only do so if they agree. These voiceprints are deleted along with yours.
People around you
Your moments also contain other people’s words. It is up to you to let them know: our guide Listening with respect helps you do it simply. Lenn reminds you every time it listens.
We never contact these people and never profile them: their words are used for you alone. If you think you were listened to by a Lenn Cloud user, write to us at lenn@synapsr.io: we will look into your request.
How long we keep your data
| Data | Duration |
|---|---|
| Moments, audio, photos, thread, memory | As long as your account exists, until you delete them. |
| Temporary processing audio | Deleted as soon as the moment is processed. |
| Voiceprints | Until you withdraw your consent: they are then deleted at once. |
| Deleted account | All your data is erased within 30 days, backups included. |
| Invoices | As long as accounting law requires. |
| Technical logs | 6 months. |
| At the AI providers | According to their business terms, at most 30 days for abuse detection. |
Your rights
At any time, you can:
- Access your data and get a copy.
- Take it with you: the full export, in an open format (JSON, original audio and photos), is in the settings, under Memories.
- Correct it: change a title, a person, a promise, a remembered fact.
- Erase it: a moment, a fact, a voiceprint, or your whole account.
- Withdraw your consent for sensitive data or voiceprints.
- Object to processing based on our legitimate interest, or ask for it to be restricted.
Write to us at lenn@synapsr.io. We answer within one month. If you believe your rights are not respected, you can complain to the data protection authority where you live.
Security
- All connections are encrypted (HTTPS).
- Devices sign in with short-lived access tokens, renewed regularly; you can disconnect a device at any time.
- Our providers’ keys are encrypted on our servers, never in the apps.
- Access to our servers is limited to the people who need it to run the service.
Our subprocessors
| Provider | Role | Data | Location |
|---|---|---|---|
| [hosting provider and country to be completed] | Hosts Lenn Cloud | All service data | [to be specified] |
| Groq, Inc. | Transcription | Listening audio | United States |
| Anthropic, PBC | Understanding moments, companion | Transcripts, messages, photos, memory excerpts | United States |
| OpenAI | Spoken conversation, read aloud | Audio and text of voice conversations, answers to read | United States |
| Stripe Payments Europe | Payment, invoices | Billing and payment data | Ireland |
| Apple Inc. | Notifications | Device token, notification text | United States |
| [Email delivery provider to be specified] | Sign-in codes | Email address | [to be specified] |
Hugging Face receives no personal data: it is only used to download our audio service’s models. We will let you know before adding a new subprocessor.
This website
This website uses no cookies, no analytics and no trackers. Your appearance choice (light, dark or automatic) is kept in your browser and never sent. Our host keeps technical logs (IP address, requested page) for security.
If you host Lenn yourself
Synapsr receives nothing: no memories, no statistics, no telemetry. Your data stays on your server and only goes to the providers you configure, with your own keys and under their terms. For your family or your team, you are the one responsible for their data.
Minors
Lenn Cloud is for adults only.
Changes
If we change this policy in a significant way, we will email you at least 30 days in advance. The date of the last update is at the top of this page.
Contact us
lenn@synapsr.io · Synapsr, [registered address to be completed].