01
Audio never leaves the device
Recording, transcription, and minutes generation all run locally on your phone.
SumaFlow Minutes
Private AI meeting minutes — on-device, no cloud.
Built for financial advisors, lawyers, therapists, and other professionals who handle confidential conversations. Audio, transcripts, and minutes stay on your phone. We can't read them.
The privacy contract
Seven promises. No exceptions.
These are the product. They hold in v1 and every version after. Each one is verifiable in code or in the manifest — not a marketing claim.
02
Encrypted at rest
Transcripts and minutes are stored in a SQLCipher-encrypted database. Audio files are AES-256-GCM encrypted.
03
Zero outbound network calls
The core app does not hold the INTERNET permission. There is no telemetry, no analytics, no "anonymous" launch counters.
04
Exports are explicit
Every export is user-initiated and shows a confirmation screen with the content and destination before anything moves.
05
No account, no sync, no login
There is nothing to sign up for. Your minutes do not belong to a cloud account because there is no cloud account.
06
Open architecture
A plain-English architecture page explains exactly what runs where, with the network manifest you can verify yourself.
Read the architecture →07
Privacy-critical code is open source
Recording, encryption, key management, and the network manifest are published on GitHub under a permissive license.
View on GitHub → What's inside
The mechanics. Without the marketing.
Every feature exists to support a regulated professional doing real work. No bots, no calendar scraping, no auto-join — just a recorder, a transcriber, and a minutes generator that stay on your phone.
Single-tap recording
One tap to start. Recording continues with the screen off and survives incoming calls. Auto-save every 30 seconds.
Configurable consent prompt
Off, verbal capture, or silent confirmation. Includes a built-in guide to one-party and two-party consent jurisdictions.
On-device transcription
Whisper runs locally on your phone. The base English model ships with the app. No audio uploaded, ever.
Four minutes templates
Client Meeting Minutes, Decision Register, Action Items with Owners, and General. Edit before exporting.
Encrypted local storage
SQLCipher-encrypted database, AES-256-GCM audio files, key in Android Keystore (StrongBox where available).
Export audit log
Every export captures a timestamp, destination, and SHA-256 hash of the content. Append-only. Exportable as CSV.
How it works
One device. No round trip.
Everything happens between the microphone and the SQLCipher database on your phone. The only data path out is the export button — and only when you tap it.
1
Record
Tap once. The recorder captures audio at 16 kHz mono to an encrypted file on your device. Pause and resume supported.
2
Transcribe
Whisper runs locally via Dart FFI. The base English model ships in the app. No audio is uploaded — there is nowhere to upload it to.
3
Generate minutes
Gemini Nano (via Android AICore) produces structured minutes on-device on supported phones. A deterministic template extractor handles every other device.
4
Optionally export
PDF, email draft, share sheet, or copy to clipboard. Every export shows a confirmation screen and writes an entry to the local audit log.
Who it's for
People who can't upload the meeting.
SumaFlow Minutes is designed for professionals whose work is governed by confidentiality obligations or principle — and who cannot use cloud meeting tools as a result.
Independent financial advisors
Solo RIAs and registered investment advisors who run 25–80 client meetings a month and cannot use cloud meeting tools because of fiduciary duty and Reg BI obligations. US, UK (FCA), AU (ASIC), and SG advisors alike.
Lawyers, therapists, and journalists
Professionals whose work is confidential by default — privileged conversations, session notes, source interviews. Currently fall back to a yellow pad because cloud AI tools are off-limits.
Technical skeptics
Developers, security professionals, and journalists who will read the architecture page, inspect the manifest, and only adopt tools whose claims they can verify. SumaFlow Minutes is built for them.
Common questions
Direct answers, no hedging.
Does the app work offline?
Yes. The full record → transcribe → generate minutes flow runs entirely offline. SumaFlow Minutes does not need a network connection to do its job — that is the point.
Do you store my recordings?
No. Audio, transcripts, and minutes stay on your device. There is no server, no account, and no cloud sync. We do not have a copy of your data because there is no place for us to put one.
Can you read my minutes?
No. We cannot read what we never receive. The app does not transmit your audio, transcripts, or minutes to us or to any third party. Inspect the Android manifest — the core app does not hold the INTERNET permission.
Is SumaFlow Minutes HIPAA, FINRA, or SEC compliant?
We do not claim regulatory certifications. The architecture is designed to support your confidentiality obligations under frameworks like Reg BI, FINRA recordkeeping, FCA, ASIC, and similar regimes — but compliance with any specific framework is your responsibility. We recommend reviewing the privacy architecture page with your compliance officer before adoption.
What devices are supported?
Android 10 or newer, ARM64, with at least 4 GB of RAM. On-device AI minutes generation (Gemini Nano via Android AICore) requires a Pixel 8 series, Galaxy S24 series, or newer supported device. Every other phone gets a deterministic template-based extractor that produces useful — if less fluent — minutes.
How much does it cost?
Free during launch. A premium tier with longer recordings, the larger Whisper model, and custom templates is planned for v1.1. There is no paywall in v1.
When can I get it?
The app is in closed beta with financial advisors and other regulated professionals. Join the waitlist and we will email you the Play Store link when SumaFlow Minutes is live.
Is there an iOS version?
Not yet. Android first, because the on-device AI surfaces (Whisper via FFI, Gemini Nano via AICore) are more open on Android today. iOS is on the v2.0 roadmap.
How does the consent prompt work?
Three modes you can configure: Off (records immediately), Verbal capture (plays an editable consent script and records the response as the first segment), or Silent confirm (a modal asks you to confirm you have obtained consent before recording starts). Two-party consent jurisdictions are supported — the in-app guide explains where each applies. This is not legal advice.
Is the code open source?
The privacy-critical modules — recording, encryption, key management, and the network manifest — are open source under a permissive license on the SumaFlow-App GitHub organization. The full app remains a commercial product, but the parts you would want to audit are publicly verifiable.
Pre-launch waitlist
Be the first to get the Play Store link.
SumaFlow Minutes is in closed beta. Join the waitlist and we'll email you the Play Store link the day we go live. No marketing, no sharing your address.
Or email [email protected] with the subject line "Minutes waitlist."
SumaFlow Minutes is an independent product. Google Play is a trademark of Google LLC.