Privacy

Information Commonplace handles

Commonplace handles account identity and contact information; circle membership, invitations, schedules, attendance, consent decisions, votes, notes, reflections, searches, and product interactions; microphone recordings, transcripts, summaries, and other content you choose to contribute; purchase and subscription status; and limited device or diagnostic information needed to operate and secure the service.

Commonplace does not sell personal information, use conversation data for advertising, or track people across other companies’ apps and websites.

Recording and AI processing

The one-phone recording flow is implemented and awaiting approved notices, supported locations, consent-evidence retention and device verification. New room recording remains disabled until those requirements and service checks are complete.

The proposed flow uses one Host phone. Before opening its microphone, the Host asks every person present, including guests, for permission to record the notice and their responses. The Host then records the actual notice and each person’s own affirmative response before discussion begins. A refusal or unclear answer means continuing unrecorded. The Host must pause locally for a later arrival or withdrawal and explicitly resume only after attendance and consent are resolved; the app cannot detect someone entering the room.

WorkOS provides identity and Railway hosts the application. The proposed room-recording path uses Cloudflare R2 for audio storage and Cloudflare Workers AI for transcription and recaps. Legacy Deepgram transcription and Anthropic recaps remain selectable; archive answers and guide suggestions can separately use Anthropic. Archive search matches saved discussion and recap text within the application database. The approved notice must identify the features and processors actually enabled for that meeting; audio-only recording requests no transcript or recap.

Recordings and meeting records are access-controlled within the circle. Being recorded as a guest does not itself grant archive access. Expo supports app delivery and notifications; Apple and RevenueCat may hold historical subscription records. Sentry receives diagnostic data only when error reporting is enabled.

Retention

The owner-selected policy for new room recordings is permanent archival retention of original audio, transcripts, recaps and consent evidence, without automatic time-based expiration. Activation requires the matching recording notice and verified release configuration. Historical recordings keep the policy disclosed when captured. Authorized deletion requests can remove recordings and related content; permanent retention is not a guarantee of perpetual service.

The original phone retains its copy until archive verification permits cleanup or a confirmed erasure instruction arrives. Offline phones receive erasure instructions when they reconnect. Temporary duplicate uploads are cleaned up after archive verification. Historical finite-policy recordings retain their separately disclosed recovery rules.

Discussion transcripts and recaps have a separate lifecycle and can remain after audio expires. For an affected one-phone room recording, deleting a represented registered participant’s account removes the shared transcript, recap and related derivatives and makes its audio due for deletion, because their speech cannot reliably be separated. Independent guides and unrelated circle records may remain. Historical per-device recordings have different rules for removing an individual’s contributions.

Consent decision metadata can remain after the account link is removed, including method, timestamps and any recorded IP address. This is separate from consent audio and transcript retention; removing an account link does not make every remaining field anonymous. Acceptance of an erasure request does not mean every external or offline copy has already been deleted.

Your choices

The app provides account export and deletion controls. Instructions are also available at /delete-account. Deleting Commonplace does not cancel a subscription billed by Apple; cancellation is managed in the Apple subscription settings.

Questions and privacy requests can be sent to hello@commonplacebookclub.com. We may need to verify the request before disclosing or changing account data.