Privacy

• There is no Convene account and no Convene server. Matthew Blode, who makes Convene, receives no data from either app.
• Neither app contains analytics, telemetry, or crash reporting.
• Your API keys are your own. They are stored in your device’s Keychain, and each key is sent only to the service it belongs to.
• While a meeting records, audio goes to AssemblyAI under your own account. If summaries are on, the transcript goes to Anthropic or OpenAI under your own key.
• Your notes are Markdown files on your device. Delete a meeting and the file is gone.

Nothing. There is no sign-up, no licence check, and no Convene endpoint for anything to arrive at. The apps talk to the transcription and summary services you configure, and — on the Mac — to GitHub to check for a new version. Those are the only network requests either app makes.

Convene is MIT licensed and the source is public, so this is something you can check rather than take on trust. Read the source.

Two things leave, and both go to services you hold the account for.

• Audio, while a meeting is recording. It streams to AssemblyAI at wss://streaming.assemblyai.com/v3/ws using your AssemblyAI key, and comes back as text. Convene never writes an audio file: there is no recording left behind on your device or anywhere else.
• The transcript, when a meeting ends, if summaries are on. It goes to https://api.anthropic.com/v1/messages or https://api.openai.com/v1/responses, whichever provider you picked, using your own key. Summaries are optional: with no summary key saved nothing is sent and the meeting simply saves without one.

Convene sends your data to these services on your behalf, under your own account. Once it arrives, their privacy policy and their terms govern it, not this page.

• AssemblyAI transcribes your audio. Required — nothing can be transcribed without a key.
• Anthropic writes the summary if you choose Claude. Optional.
• OpenAI writes the summary if you choose OpenAI. Optional.

Each has its own position on how long it keeps data and what it does with it. Read theirs before you record something sensitive.

You create the keys in each provider’s own dashboard and you can revoke them there. Convene stores each one in your device’s Keychain and sends it only to the service it belongs to: your AssemblyAI key never goes to Anthropic, and your Anthropic key never goes to AssemblyAI.

• The note is a Markdown file. On iPhone it saves to Convene’s own folder — Files › On My iPhone › Convene — or to a folder you pick, such as an Obsidian vault. On the Mac it saves to the folder you pick.
• While a meeting runs, the transcript is appended to a recovery log in the app’s own storage, so a crash cannot lose it. The log is deleted once the note is saved.
• Convene uploads and backs up nothing. Your notes sync only if the folder you chose already syncs, iCloud Drive being the usual case.

On iPhone, the microphone is the only permission the app asks for, and it is used only while recording. iOS asks the first time you record. Recording keeps going when the screen locks, which is the audio background mode rather than a second permission.

On the Mac, the app is sandboxed and asks for:

• The microphone, to capture your side of the call.
• System audio recording, to capture the other side. Audio only: no video and no picture of your screen is captured.
• Your calendar, to show today’s events and title a meeting. Convene reads events and never writes them, and what it reads stays on your Mac.
• Notifications, for the prompt that offers to record when a meeting app opens.
• Apple events, to notice when Zoom, Meet, Teams, Webex, or BlueJeans is running.
• Files: the folder you pick for your notes, and nothing else. The sandbox gives it access to nothing you have not chosen.

The Mac app checks for new versions with Sparkle, which fetches a signed appcast file from GitHub. Like any web request, that lets GitHub see your IP address. Nothing about you or your meetings is sent.

This site uses PostHog to count page views and see which links get clicked. That is website analytics, and it is separate from the apps: neither the Mac app nor the iPhone app contains any analytics code.

If this policy changes, the date at the top changes with it. The page lives in the same public repository as the apps, so every revision is in the history.

Questions about any of this, email m.blode@gmail.com.