- Your device first. Encrypted in transit and at rest.
- Only you can reach your sessions.
- Report problems to security@pamoai.com.
On your device
Recordings are saved on your device first, and recording never depends on the internet. The app stores sessions in its own private storage. Lock-screen notifications never show session names or anything said.
In our cloud
- All connections use encryption (TLS). Stored data is encrypted by our providers.
- Every request is checked so that only the owner can reach a session. We test this.
- Server keys stay on our servers and are never built into the apps.
- Test systems are kept apart from real accounts and never hold real recordings.
- Deleting a session or account removes every copy we hold.
Backups (coming later)
Backup to your own Google Drive isn't in Pamo yet. When it comes, backups will be locked on your device with a key made from your passphrase (Argon2id and AES-256-GCM) before they go to your Drive. We will never see the passphrase, so neither we nor anyone else will be able to open your backups. If you lose it, the backup can't be opened.
AI providers
Our speech and AI providers don't use your sessions to train models. See the privacy policy and the subprocessors list.
Report a problem
If you find a security problem, email security@pamoai.com with how to reproduce it. Please don't access other people's data or disrupt the service while testing, and give us a fair chance to fix it before telling others. We'll reply within 3 working days and credit you if you'd like.