Privacy Policy

Effective date: May 24, 2026 Last updated: May 24, 2026

This Privacy Policy describes how Mohammad Hassani ("we", "us", or "Mantel") collects, uses, and discloses information when you use the Mantel mobile application and any related websites or services (collectively, the "Service").

By using the Service, you agree to the practices described in this Privacy Policy.

At a glance

• Mantel is designed to be mostly local. Your tasks, lists, and app preferences are stored on your device.
• On iOS, your tasks are mirrored to your own private iCloud (CloudKit) container so they survive reinstalls and sync across your devices. We can't read this data.
• When you tap the microphone, the recorded audio is sent to our backend and then to a third-party AI provider (OpenRouter) so it can be transcribed and turned into tasks. We don't keep the audio.
• We do not use analytics or advertising SDKs, we do not sell or share your data for advertising, and we do not create user accounts.
• Mantel is intended for users 13 and older.

1. Who we are

The Service is provided by Mohammad Hassani, an individual developer based in California, USA. You can contact us at contact@phassani.com.

If you are in the European Economic Area (EEA) or the United Kingdom, Mohammad Hassani is the data controller for the personal data described in this Privacy Policy.

2. Information we collect

We collect only the information necessary to make Mantel work. Specifically:

2.1 Information you provide

• Voice recordings. When you tap the microphone, Mantel records short audio clips of your voice. These recordings are uploaded to our backend solely to transcribe them and extract tasks. We do not persistently store the audio on our servers (see Section 4).
• Task content. The text of your tasks, notes, lists, due dates, priorities, recurrence rules, and reminder preferences. This content is created from your voice transcriptions or anything you type or edit in the app.
• Support communications. If you email us, we will receive your email address and the contents of your message.

2.2 Information collected automatically

• Device permissions and status. Whether you have granted microphone and notification permissions (so we can display accurate status in Settings).
• App preferences. Your theme choice, default reminder lead time, and onboarding completion flag.
• Technical request metadata. When your device contacts our backend, our hosting provider (Cloudflare) may automatically receive standard request metadata such as your IP address, user-agent string, request timestamp, and the IANA timezone string your device sends (e.g., America/Los_Angeles) so the AI can interpret phrases like "tomorrow at 5pm". We do not use this metadata to build profiles of you, and we do not associate it with your tasks beyond fulfilling the immediate request.

2.3 Information we do not collect

• We do not require you to create an account.
• We do not collect your name, email address, phone number, or location, except where you voluntarily share it with us (e.g., by emailing support).
• We do not embed analytics, tracking, or advertising SDKs in the app.
• We do not access your contacts, calendar, photos, or other apps' data.

3. iCloud and CloudKit (iOS only)

On iOS devices that are signed into iCloud, Mantel uses Apple's CloudKit to mirror your tasks and lists to your private CloudKit database for the container iCloud.com.thragna.mantel. This lets you restore your data after reinstalling the app and sync between your own devices signed into the same Apple ID.

• This data lives in your iCloud account, under Apple's control, governed by Apple's iCloud terms and Apple's privacy policy.
• We do not have access to your private CloudKit data. We cannot read your tasks.
• If you disable iCloud or revoke Mantel's access in iOS Settings, sync will stop and your data will remain on your device until you delete the app.

4. How voice recordings are processed

When you tap the microphone, the following happens:

1. Your device records audio locally using your microphone permission.
2. The recording is uploaded over HTTPS to our backend, a Cloudflare Worker hosted at a *.workers.dev URL.
3. Our backend forwards the recording to OpenRouter, a third-party AI gateway, along with your device's IANA timezone string and the names/IDs of your current lists so the model can resolve dates and pick the right list.
4. OpenRouter routes the request to an underlying speech-to-text provider (currently a Whisper-family model) for transcription, and then to a language model to extract structured task data.
5. The transcript and structured task data are returned to your device and stored locally.

Retention:

• Our backend processes audio and text in memory to fulfill the immediate request and does not write recordings or transcripts to persistent storage.
• OpenRouter and the underlying model providers are independent third parties. They may temporarily process, log, or retain the audio and transcript in accordance with their own privacy policies and data-handling practices, including for safety, abuse prevention, and service-reliability purposes. We do not control their retention.

If you would like to review the third-party processors' policies before using voice features, please see Section 7.

5. How we use information

We use the information we collect to:

• Provide the Service: transcribe your voice, extract tasks, store them on your device, sync them to your private iCloud, and schedule local notifications you've asked for.
• Maintain the security and reliability of the Service (for example, detecting abuse of our backend).
• Respond to your support requests.
• Comply with legal obligations.

We do not use your tasks, transcripts, or voice recordings to train any AI model that we operate. We do not control whether third-party AI providers may use their inputs for model improvement; please consult their policies (see Section 7).

6. Legal bases for processing (EEA / UK users)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

• Performance of a contract (Art. 6(1)(b)): to provide the Service you request, including transcription and task extraction.
• Legitimate interests (Art. 6(1)(f)): to keep the Service secure, prevent abuse, and respond to your support requests, where those interests are not overridden by your rights.
• Consent (Art. 6(1)(a)): for device permissions you grant (microphone, notifications) and for any optional features that ask you for it.

7. Service providers and third parties

We share information with the following service providers strictly to operate the Service:

These providers act as our subprocessors or as independent controllers, and each handles data under its own terms and privacy policy. We encourage you to review them:

• Apple Privacy Policy: https://www.apple.com/legal/privacy/
• Cloudflare Privacy Policy: https://www.cloudflare.com/privacypolicy/
• OpenRouter Terms & Privacy: https://openrouter.ai/terms and https://openrouter.ai/privacy

We do not sell your personal information, and we do not "share" your personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA).

8. Data retention

• On your device: Tasks, lists, and preferences remain on your device until you delete a task, clear the data, or uninstall the app.
• In your iCloud / CloudKit: Your tasks remain in your private CloudKit container until you delete them in the app, sign out of iCloud, or delete the data via iOS Settings → Apple ID → iCloud → Manage Storage.
• On our backend: Audio and transcripts are not persistently stored. Standard request logs maintained by Cloudflare may persist for a short period for security and abuse-prevention purposes.
• At third-party AI providers: Retention is governed by their policies.

9. Security

We use HTTPS for all communication between the app and our backend, and we rely on Apple's platform security for on-device storage and CloudKit. No system is perfectly secure, however, and we cannot guarantee absolute security.

If you become aware of a security issue, please contact us at contact@phassani.com.

10. Children

Mantel is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

If you are between 13 and the age of majority in your jurisdiction, you may use the Service only with the involvement of a parent or legal guardian.

11. International data transfers

We operate primarily in the United States. If you use the Service from outside the United States, the information we process may be transferred to and stored in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from those of your country. By using the Service, you consent to such transfers.

12. Your choices and rights

You can:

• Stop voice processing at any time by not tapping the microphone, or by revoking microphone permission in iOS Settings → Mantel.
• Stop notifications by revoking notification permission in iOS Settings → Mantel, or by turning notifications off per task in the app.
• Delete your data by deleting individual tasks, clearing completed tasks, or uninstalling the app. To delete CloudKit data, uninstall the app and use iOS Settings → Apple ID → iCloud → Manage Storage → Mantel.

Depending on your location, you may also have the right to:

• Access the personal information we hold about you.
• Correct inaccurate personal information.
• Delete personal information ("right to be forgotten").
• Object to or restrict certain processing.
• Lodge a complaint with a data protection authority (EEA/UK).
• Exercise rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know, delete, correct, and opt out of "sale" or "sharing" (we do neither).

To exercise these rights, email us at contact@phassani.com with a description of your request. Because we don't maintain user accounts, we may not have personal information tied to you. If we do, we will respond within the timeframe required by applicable law.

We will not discriminate against you for exercising any of these rights.

13. Do Not Track

We do not respond to "Do Not Track" browser signals because Mantel does not perform cross-site or cross-app tracking.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page, update the hosted version at https://thragna.com/mantel/privacy, and, where required by law, provide more prominent notice. Your continued use of the Service after an update means you accept the revised Privacy Policy.

15. Contact us

Questions, requests, or complaints about this Privacy Policy can be sent to:

Mohammad Hassani Email: contact@thragna.com California, USA