Sergii Ziborov · support@tellwick.com · privacy@tellwick.com
iPhone and iPad: processing choices
The iPhone/iPad beta requires iOS/iPadOS 26 or later. Build 43 is available to the existing private TestFlight group. Tellwick prepares first-party speech/text access automatically through Hostwatch; ordinary setup has no AI server address or API-key fields. Credentials are purpose-separated and stored in this device’s Keychain without iCloud synchronization. Connecting does not grant processing permission: message text, personal preferences, task titles and recording text use their respective consent categories.
For me analysis, related-message aggregation and summaries use the last 3 days (rolling 72 hours) by default. Personal preferences can set 1–365 days. Message selection, its pending count and merged evidence use that interval; a changed period rejects an outdated result. Names, interests, watched chats and permitted recent originals can be sent for personal-card processing. Old originals, saved notes and tasks remain in the protected local library.
For conversations you explicitly select for automatic translation, the WhatsApp Go service can process original message text while Tellwick is closed. With Hetero selected, requests use our compute allocated through Hostwatch. The account stores originals and completed translations so they can sync on reconnection. Check translation requests a new candidate and neural comparison using the original and previous translation. Disabling the conversation, master automation or message-processing consent stops future automatic work; completed translations remain.
Optional premium GPT Luna applies to WhatsApp message text, with separate OpenAI consent and subscription access checked by the server. Selected originals and prior translations needed for review go to OpenAI; that selection does not upload recording audio, attachments or local voice-profile vectors. Selecting Hetero stops future Luna requests. Where purchases are enabled, Apple handles payment; Tellwick receives a verified transaction and account-binding information, not your card number. Price and availability appear in the app’s Apple purchase screen.
Speaker turns and 24-value MFCC acoustic signatures are computed locally from microphone audio. Remember voice saves the entered name and signature only on your action. Profiles can be renamed or deleted locally; possible matches need confirmation and are not identity authentication. Voice-profile names and vectors are not sent to Hetero or GPT Luna. Consented remote speech still sends the underlying audio for transcription.
Photos and WhatsApp attachments are fetched using the linked account’s access. Chat/sender photos use an account-scoped protected cache, refresh after six hours and can remain available offline for up to seven days; attachment storage is bounded separately. Apple Vision OCR runs only when you request recognition. Reply suggestions and reply translations are editable drafts; sending requires confirmation of the recipient and exact text. A source-bound idempotency receipt prevents a blind automatic resend after an uncertain network result.
WhatsApp linking uses your phone number and a code confirmed in WhatsApp. The first-party service provisions an isolated account and retains linked-device session material, received history and ready translations. Unconfirmed pairing expires; confirmed sessions remain until you remove them. Disconnect and delete server history revokes that connection and erases its active session and received history; local notes, messages and source references remain. If unlinking fails, remove Tellwick in WhatsApp’s Linked devices as well. Removing the app alone does not unlink WhatsApp.
Notes, tasks, calendar events, transcripts, source references and recording metadata stay in the protected mobile container. Retained audio stays there when storage is enabled; unfinished processing keeps temporary audio for recovery, and completed temporary audio can be removed with retention off. The app does not capture a Mac’s system audio on iPhone/iPad. The Mac-specific bundled-model and CLI descriptions below apply to macOS. No advertising SDK, cross-app tracking or use of content for model training is included in this native build.
The mobile recording workflow is record first, then transcribe. Speech level adjustment and rumble filtering operate on recognition windows and preserve original timing. Recordings are limited to two hours; completed windows use a protected local recovery checkpoint. Meeting-note processing uses the recording-text permission and our Hostwatch/Hetero service. AI notes require source quotations and local audio-fragment links. Saving creates a local note; no task or reply is sent automatically.
Mac: local workspace and AI
Tellwick Notes stores notes, tasks, events, transcripts, source references and optional recordings in its private macOS application container. It does not share writable databases with the Electron application. Import copies data; it does not alter the original library. Local AI uses the Hetero runtime and model weights inside the app, or Apple platform features. Local Hetero requests stay on loopback on this Mac; no separate AI service installation is needed.
When native live transcription is enabled, captured audio is temporarily saved locally until processing finishes, even if permanent recording storage is off. An interrupted or failed job remains available in Recording history for Retry transcription or Finish without transcription. With storage off, successful processing or explicit abandonment removes temporary audio; partial transcripts and capture-gap warnings remain. Sound that was not captured cannot be reconstructed.
Waveforms and anonymous speaker turns are recording metadata. Remember voice saves a local acoustic signature with the name you enter; profiles can be renamed or removed in Recording. Recognition suggestions require human confirmation and do not establish identity. These profiles are not automatically uploaded or used to train models.
Names/mentions, interests, personal context, watched-chat identifiers, cached translations and AI summary cards with their source references are stored in the private local workspace. Automatic translation and analysis can be disabled separately in Settings and run while the app is open. Dashboard analysis uses the bundled local model; your relevance profile is not sent to a remote Hetero coordinator. Selection, summaries and inferred relevance may be incorrect; each card explains relevance and links to its original messages.
There is no advertising SDK, advertising identifier, cross-app tracking or automatic upload of recordings for model training in this native build. Translation and transcription can be inaccurate; their source stays available for review. Apple speech/translation assets and permissions are managed by macOS. A user-selected remote Hetero coordinator receives the text/audio needed for the chosen request and operates under its own operator's privacy policy.
Image OCR runs locally only when you press Recognize text. Packaged Tesseract language models include Hebrew, English, Russian, Ukrainian and Arabic. Temporary OCR image/text files are removed after the request; saving the result as a note retains it locally with its source reference. Previewing an image does not run OCR or send it to a CLI. Optional Codex/Claude processing is disabled by default. After you enable and configure a CLI gateway in Settings and press Process, only selected text and your instruction are sent to that gateway. The CLI may forward them to its provider cloud under the provider’s terms and retention policy. Gateway tokens are stored in Keychain. Automatic dashboard analysis and translation do not use this connection.
WhatsApp server exception
WhatsApp is optional. Connecting links your phone account to a Go service using the unofficial whatsmeow library. That linked device runs on the configured server, not solely on your Mac. In the owner's current deployment this is a Hetzner server in Germany. The server operator and administrators with access to that host can access the session and stored message data.
The service stores a separate session database and message database for each account: linked-device keys, identifiers (which may include phone numbers), chat/sender names, message text, timestamps, direction, attachment metadata, descriptors for encrypted attachments, embedded history thumbnails where supplied, and a send idempotency ledger. A requested attachment is downloaded and decrypted by that server before delivery to your Mac. Persistent server storage currently holds message text, descriptors and embedded thumbnails; the download response is streamed/returned for the selected attachment.
WhatsApp transport encryption does not make the Tellwick server's plaintext message database end-to-end encrypted against its operator. The current databases have no application-level encryption at rest. SSH/TLS protects the Mac-to-service connection; use a private tunnel or an authenticated HTTPS endpoint. Credentials are stored in macOS Keychain, not in the local work DB.
Data is processed to provide account pairing, history replay, inbox display, selected attachment retrieval and a manually confirmed reply. No message is sent automatically. The native app does not request your WhatsApp password. WhatsApp/Meta and the selected infrastructure provider have their own policies. Tellwick is not affiliated with or endorsed by WhatsApp, Meta or Microsoft.
A profile-picture request retrieves the available WhatsApp preview through the configured server. The service keeps a bounded temporary memory cache and does not write these requested profile pictures to disk; unavailable or hidden pictures use initials in the app.
Mac: retention, disconnecting and deletion
Local work remains until you delete it or remove its stored data. Deleting the app alone may leave its container or Keychain configuration on the Mac. Disconnect pauses the Go connection and retains its session/history for reconnection; it is not an erase operation. Remove the linked device from WhatsApp on your phone to revoke access. Removing an account from the app's connection list also does not erase server history or unlink the phone.
Connections provides a separate confirmed “Erase session and history” action. With the current Go service, it removes that account's active server session, message database and send ledger, then its local inbox messages, cursor, chat metadata, AI cards, processing markers and watched-chat selections for that account. Saved notes and tasks remain. The operation can be retried after an interrupted request; configuration is removed only after both copies are cleared. An older server that lacks this endpoint returns an error rather than claiming erasure.
The server attempts to revoke the linked device when it is connected. If that cannot be confirmed, the app asks you to remove it in WhatsApp on your phone. Erasure does not remove independent server backups, recipient copies or saved exports, and is not a guarantee of forensic deletion. The server owner must delete retained backups separately. The Mac’s own-service setup does not provision managed accounts; its paired history has no automatic retention expiry. For export or deletion requests contact privacy@tellwick.com; do not include private chat content in the email. A managed service still needs retention and backup-deletion policies before paid availability. Revocation does not recall delivered messages.
Permissions, support and Apple
Recording begins only when you start it. macOS asks for microphone, selected system-audio/screen capture or speech access as needed; permissions can be revoked in System Settings. Attachment export and library import use files selected by you. This app does not request access to your system address book.
If you send a support report, we receive what you choose to send and your contact address. Apple processes App Store purchases and TestFlight feedback under Apple's policies; TestFlight may provide crash and testing information to the developer. Do not submit recordings, tokens or private chats in feedback unless they are necessary and you knowingly choose to include them.
You may request access, correction, export or deletion and exercise rights provided by the law applicable to you. We do not sell personal data or use message content for advertising. Disclosures may occur where legally required or necessary to protect users. Material changes will be described in the app and in the published policy before a changed processing practice is introduced.