Privacy Policy for Hoof Notes

Developer: Meet Pi

Last Updated: October 10, 2026

App version: Hoof Notes 2.1

Hoof Notes does not sell your data. Your videos stay in Photos. Notes sync through your iCloud, and speech, captions, and video analysis run on your device.

Hoof Notes is a video annotation app for iPhone, including iPhone Duo, and iPad. It keeps your notes on your device and, when you use iCloud, in your private iCloud account. We don't sell your data, run ads, or track you across other apps. We have no servers that receive your videos, notes, or recordings. This policy explains what the app can access, what stays on your device, and what iCloud holds for you.

1. Data We Collect

Apple requires us to disclose every category of data the app can access. For Hoof Notes:

• Notes — The text, drawings, and timestamps you save. Notes are stored on your device and, when iCloud is available, in your private iCloud account via CloudKit. A note also keeps a reference to its video (a Photos identifier when you are on the same iCloud account, otherwise the filename, duration, and creation date) so the note can be matched to that video on another device. The video file itself is not uploaded.
• Photos — With your permission, the app reads videos in your library so you can play and annotate them. It caches small thumbnails, and a still of a noted frame, for display. With full access it can add a video to a Hoof Notes album. It can mark a video as a Favorite, and on iOS 27 it can read and write the star rating Photos already stores for that video.
• Location — When you add a location filter, the app may use your location while it is open, to center the map. The filter you save (a place name, coordinate, and radius) is stored on your device and in your private iCloud. It is never shared with other people. Editing a filter you already saved does not request your location. Filtering uses the location Photos stored on the video, compared on your device with the places you saved.
• Camera and microphone — The camera records videos into your Photos library. The microphone records audio with those videos, and, in Coach Mode, hears you talk while a video plays. On iPhone Duo, while you film with the phone open, the outer display shows the live camera view, and a timer while recording, so the person you are filming can see themselves. That view is not recorded or saved separately.
• Speech — Coach Mode (iOS 26 and later) turns what you say into suggested notes with Apple's on-device speech recognition. The recording is not saved. Unusual words from notes already on the device are passed to the recognizer as hints for that session and are not stored separately. On iOS 26 and later, generated captions can also transcribe spoken audio in a video on the device. Those transcripts stay on that device.
• On-device video analysis — On iOS 27, suggested moments and Suggested Draft look at video that is already on the device. Suggestions, key-frame stills, and drafts that you have not saved stay on that device. They are not synced, shared, or indexed.
• Search on this device — Notes, and the videos that have notes, are indexed in Spotlight on the device so Siri and search can find them. The rest of your photo library is not indexed. Caption transcripts are searchable inside Hoof Notes and are not added to Spotlight.
• Widgets — Home Screen and Lock Screen widgets show note text, the day the video was taken, and a still from that moment. That copy lives on your device, in storage shared with the widget, and is marked private so iOS can hide it on the Lock Screen while the device is locked. The widget does not upload it.
• Identifiers — If you use iCloud, Apple's iCloud user ID associates your notes with your account and, when you share, names you as the author. A display name may be stored on your notes so family members can see who wrote them. We do not receive or store these identifiers on our own systems.
• Family directory — While you share notes, the app writes a FamilyMember record in CloudKit's public database so members' devices can find one another. The record holds a share link, the family you are in and who organizes it (by iCloud user ID, which is specific to Hoof Notes), the members the organizer admitted, when you joined or left, removal records, and a count of your notes. It does not include note text, drawings, video, your email address, or your phone number. Because the record is in the public database, it is not limited to your private iCloud storage. Meet Pi does not operate a server that reads it.
• Notifications — If you allow notifications, a family member's new or updated notes can produce one notification on your device with their name and a count. The notification does not include note text.
• Diagnostics — Hoof Notes uses Apple's MetricKit. The app also keeps the newest crash, hang, and performance reports on the device. Those local copies are not uploaded by Hoof Notes, and they do not include note text or video identifiers. On iOS 27 a report can include which screen was open (library, player, camera, editor, or settings). When you have Share iPhone Analytics (and Share with App Developers) enabled, the system may send the same reports to Apple. We see aggregate crash and performance trends in App Store Connect for released builds. We do not use any third-party analytics or crash-reporting SDKs.
• App Store Connect (aggregate) — For released builds, Apple provides aggregate, app-level trends (adoption, usage, subscriptions, crash trends). We do not receive individual user behavior or custom events.
• Purchase history — Subscriptions are processed by Apple through StoreKit. We learn whether your Apple ID has an active Hoof Notes subscription. We do not receive your payment card, billing address, or Apple ID password.
• Usage data — We do not track custom events (for example which video you opened or which note you created), feature taps, or session analytics. The only usage-related data we see is the aggregate reporting in App Store Connect described above.

We never see your content. Meet Pi has no servers that receive your videos, notes, drawings, or recordings. Your videos remain in Photos. Your notes live on your device and in your iCloud. People you share with can read the notes you share, as described below.

2. How We Use Your Data

• To play your videos and store, show, and sync the notes, drawings, and timestamps you save.
• To record videos into your Photos library when you use the camera.
• To filter your library by a place you save, by favorites, and, on iOS 27, by a Photos star rating.
• To run the on-device features in the next section, and to show your notes in widgets, Spotlight, and Siri on this device.
• To share your notes with family members you invite, and to show you the notes they share with you.
• To tell you, on this device, when a family member has added or updated notes.
• To fix bugs and improve performance using Apple's diagnostics (MetricKit and App Store Connect). We do not use custom behavioral or feature-level analytics.
• To unlock note creation beyond the free limit when Apple reports an active subscription.

We do not use your data for advertising. We do not sell it to third parties.

3. On Your Device

These features are optional. Settings → AI Features turns them off, together or one at a time, on systems that offer them. Turning them off hides them. It does not delete notes you already saved.

• Coach Mode (iOS 26 and later) listens while you talk through a video, transcribes on the device, and proposes notes at the moments you were discussing. You edit them before anything is saved. The recording is never written to a file. The first use may download an Apple speech model onto the device.
• Captions (iOS 27, and caption search on iOS 26 and later) are made from the video's spoken audio on the device. The transcript is stored on that device so the player can show captions and the library can search them. It is not synced, shared, or indexed in Spotlight. Deleting the app deletes it. Losing the file only means the app would transcribe again later.
• Suggested moments (iOS 27) mark busy stretches of a video after you have had it open for a moment. Analysis runs on the device and covers the opening three minutes. A video that exists only in iCloud may be downloaded into your Photos library on an unmetered network, the same way Photos downloads it for playback. A temporary copy of that opening stretch may be written and is deleted when analysis finishes. Suggestions and key-frame stills stay on this device until you delete the app. They are not notes until you save one.
• Suggested Draft (iOS 27) runs only when you ask. A few frames from the video already playing are read by Apple's on-device model, which may propose one coaching note. The draft is not saved until you save the note. Frames and note text are not sent to Meet Pi.

These features can be wrong. You choose what to keep.

4. Data Storage & Sync

Your videos stay in Photos. Hoof Notes does not upload them. Playback and suggested-moment analysis may download an iCloud-only video into your Photos library. Analysis may also write a temporary file of the first three minutes and then delete it.

On the device: Notes are stored in the app. Captions, suggested moments, key-frame stills, the widget's copy of recent notes, the Spotlight index, and local crash reports stay on that device. They are not part of iCloud sync.

Your private iCloud: When you are signed into iCloud, notes sync through CloudKit so your devices can show the same notes. Location filters sync only to your private iCloud, and only to your own devices. We cannot read either store.

A note longer than 500 characters still syncs to a device running an older version of Hoof Notes. Editing it on that older version can shorten it to 500 characters.

5. Family Sharing

Sharing is optional and separate from Apple's Family Sharing. A family has at most three people. The person who starts a family is its organizer: only the organizer invites and removes people. Each member shares their own notes, read-only, from their own iCloud. New notes are always saved to the author's private store.

People you share with can read your notes, drawings, timestamps, and the video reference on each note, and they can see your name as the author. They cannot edit or delete your notes. They do not receive your video files, and they do not receive your location filters. You can read their notes on the same terms.

You can leave at any time. If the organizer leaves, the family ends for everyone. Leaving, removal, or the end of a family ends access. It does not delete anyone's notes. A note you wrote remains in your iCloud.

Sharing requires iCloud. Each person's device matches a note to a video it already has. The same video can reach another device through Photos tools you choose yourself, such as AirDrop or iCloud Shared Library. Hoof Notes does not transfer the video.

6. Third-Party Services

Hoof Notes uses Apple frameworks only. No third-party analytics SDK runs in the app.

We do not use third-party analytics, ad networks, or custom event tracking.

7. Your Rights & Controls

Access: Your notes are in the app. On your devices, iCloud data is available through your Apple ID.

Permissions: You can change Photos, Camera, Microphone, Speech Recognition, Location, and Notifications in iOS Settings. Coach Mode needs the microphone and speech recognition. Location is used when you add a place to filter by. Denying a permission turns off the feature that needs it. Browsing and notes you already have keep working when Photos access is limited to videos you selected.

On-device features: Settings → AI Features turns suggested moments, Suggested Draft, generated captions, and Coach Mode off. Notes you already saved stay.

Analytics and diagnostics: To limit diagnostic data sent to Apple, turn off Share iPhone Analytics (and "Share with App Developers") under Settings > Privacy & Security > Analytics & Improvements.

Deletion:

• Delete a note — Swipe the note and choose Delete. Only the author can delete it.
• Leave a family, or, as its organizer, remove a member — This ends access to one another's notes. It does not delete them.
• Delete local app data — Remove Hoof Notes from your device. Notes stored only on that device, captions, analysis files, widget data, and local diagnostic reports are deleted with the app.
• Delete iCloud data — On your device: Settings > [Your Name] > iCloud > Manage Account Storage > Hoof Notes, then delete the app's data. This removes synced notes from your iCloud. Location filters are included in that private iCloud data.

GDPR (EU): If you are in the European Economic Area, you have the right to access, rectify, erase, and port your data, and to object to or restrict processing. To exercise these rights, contact us at the email below. You may also lodge a complaint with your supervisory authority.

CCPA (California): If you are a California resident, you have the right to know what personal information we collect and to request deletion. We do not sell personal information.

8. Children's Privacy

Hoof Notes is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have received such information, please contact us and we will delete it.

9. Data Security

We rely on Apple's protections for data we never hold ourselves:

• Encryption in transit — iCloud traffic uses HTTPS/TLS.
• Encryption at rest — Your device uses iOS Data Protection. iCloud data is encrypted by Apple. We cannot decrypt your notes or videos.

No method of transmission or storage is 100% secure. Keeping content off our systems limits what a breach of Meet Pi could expose.

10. Changes to This Policy

We may update this policy to reflect changes in the app or the law. We will notify you of material changes by updating the "Last Updated" date at the top of this page and, where appropriate, through the App Store release notes. The privacy policy URL will not change between app versions without a new App Store submission, per Apple's guidelines.

11. Contact

For privacy questions or to exercise your rights, contact us at: [email protected]