Prologue Prompts ("Prologue", "we") is operated by Jaime Aguilera García, who is the data controller for the personal data described here. Contact: aguileragarcia.jaime@gmail.com. We are a small operation and are not required to appoint a Data Protection Officer; the same address handles all privacy matters.
| DATA | PURPOSE | LEGAL BASIS (GDPR ART. 6) |
|---|---|---|
| Email address | Signing you in (magic link) and matching subscription payments to your account | Contract (6(1)(b)) |
| Prompt notes ("cues") you write or dictate | The product itself: storing and syncing your notes to your devices and tools | Contract (6(1)(b)) |
| Sync metadata — device label (e.g. "ios", "terminal"), timestamps, note status | Making sync work and showing where a note came from | Contract (6(1)(b)) |
| Billing records (subscription status, Stripe customer/subscription ids) | Operating your subscription; tax and accounting | Contract (6(1)(b)); legal obligation (6(1)(c)) |
| Standard server logs (IP address, request metadata) at our hosting providers | Security, abuse prevention, and keeping the service running | Legitimate interests (6(1)(f)) |
That's the whole list. No advertising identifiers, no tracking, no analytics scripts — in the app or on this site. We do not sell personal data and we do not use your content to train AI models.
Dictation is transcribed on your device using Apple's on-device speech recognition. Audio never leaves your phone: on hardware or languages where on-device transcription isn't available, dictation is disabled rather than falling back to a server. Only the resulting text is stored, like any typed note.
Your notes and account data are stored in a Postgres database hosted by Supabase in the EU (Ireland, eu-west-1), isolated to your account by row-level security. Notes captured offline stay on your device (protected by iOS) until you're online and signed in.
We share personal data only with the processors needed to run the service:
| PROCESSOR | ROLE | LOCATION / TRANSFER SAFEGUARD |
|---|---|---|
| Supabase | Database, authentication, sync backend, sign-in emails | Data hosted in the EU (Ireland); Supabase DPA with SCCs for any support access |
| Stripe | Subscription payments — your card details go directly to Stripe, never to us | US; EU–US Data Privacy Framework and SCCs |
| Apple | App distribution (App Store / TestFlight) | Per Apple's own terms and privacy policy |
| Vercel | Hosting for this website (static pages; standard access logs only) | US/global edge; DPA with SCCs |
Where a processor is outside the EU/UK, transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses as noted.
Under the GDPR (and UK GDPR) you can ask us for: access to your data, rectification, erasure, restriction of processing, portability (your notes, in a machine-readable export), and you can object to processing based on legitimate interests. Email us and we'll act on it — normally well within the one-month statutory window.
You also have the right to complain to a supervisory authority: in the UK, the ICO; in the EU, your national data protection authority.
None with legal or similarly significant effect. Prompt quality scores are informational only and never gate your access to anything.
Data in transit is encrypted (TLS); the database enforces per-account isolation with row-level security; sessions are stored in the iOS Keychain on your device; payment credentials are handled entirely by Stripe. If a breach ever affects your data, we'll notify you and the relevant authority as the law requires.
This website sets no cookies and runs no analytics. Stripe's checkout pages (on stripe.com) use their own strictly-necessary cookies, covered by Stripe's privacy policy.
Prologue is not directed at children under 16, and we don't knowingly process their data.
Material changes will be posted here with a new effective date; if a change meaningfully affects your rights, we'll tell you by email first.