Where your recordings are kept, and why.
On your phone first, then in your region under your own key. Server storage is planned.
Audio stays here today.
- ✓Kept in app storage
- ✓Never uploaded yet
- ✓Deletable anytime
- ✓No upload
- ✓Contacts hashed
Metadata, not audio.
- ✓Each recording's language, length, choice
- ✓Append-only consent records
- ✓Earnings ledger
- ✓Not hosted in Africa
- ✓No audio
- ✓Codes stored hashed
What we never keep.
- ✓Your contacts list
- ✓Codes made from contacts
- ✓Religion, ethnicity, health, politics
- ✓Precise location
- ✓Device ids
- ✓Payout details
Until you choose upload.
- ✓Key in secure store
- ✓Upload on Wi-Fi
- ✓Backup optional
- ✓Deletable anytime
- ✓Data budget
Encrypted at rest.
- ✓A separate key per member
- ✓Raw, then cleaned
- ✓Cleaned copy
- ✓Africa before public launch
- ✓Pseudonymous datasets
- ✓Deleted key, unreadable
What we never keep.
- ✓Your contacts list
- ✓Codes made from contacts
- ✓Religion, ethnicity, health, politics
- ✓Precise location
- ✓Device ids
- ✓Payout details
Retention, plainly stated.
Every kind of recording has a rule for how long it is kept. Withdrawn recordings are listed in the next release changelog.
Mapped to the Scorecard.
How storage maps to the Sovereignty Scorecard's data and infrastructure layers.
Data
Infrastructure
Retention
Governance

Server storage is not built yet. Audio stays on phones.
Recordings stay on the phone today. Encrypted in-region storage with a key per member is first in the pilot plan.
Questions about storage.
Where is my audio right now?
On your phone. Only details reach the server: language, length, date, review status and your choice for each recording.
Which region will store my recordings?
Your region by default once upload is built. The pilot storage region is still an owner decision.
Who holds the encryption keys?
Planned: a key per member; deleting it makes audio unreadable.
Are “Only me” recordings uploaded?
No. They stay on your phone, private to you, and you can delete them any time.
What happens to rejected recordings?
Deleted after a set period, published before launch.
Can withdrawn recordings return?
No. They leave storage and future training; trained models cannot unlearn.

See every control you have.
No invite yet? Try the demo with code 482917.