Your records and review links.

Local records

Meeting drafts, participant names, motion wording, participation, actions, private notes and issued minutes are stored in the app’s local files with iOS data protection. DecisionSession does not provide an account or automatic cloud synchronization. Operating-system device backups may include app files according to your device settings.

Optional online review

When the recorder creates review links, the app encrypts a fixed edition before uploading it to NexLevel’s hosting service. Private working notes are excluded. The service stores encrypted edition and response bytes, opaque edition and recipient identifiers, content and envelope digests, expiry times, response order and revocation state. It does not receive plaintext meeting content through the API.

Each private link contains access credentials and decryption keys in its fragment. Anyone holding it can read that edition and respond as its named attendee. The review page uses these keys in the browser. Keep links private and trust the device and browser you open them on. Owner keys are kept in the originating iPhone or iPad Keychain and do not migrate through this app’s backups. Losing those keys can prevent link management.

Retention and deletion

Review access expires after 30 days. Expired encrypted content is removed when the service next handles activity; expiry does not guarantee immediate physical deletion. The recorder can withdraw an edition earlier. Minimal hashed spent-edition markers remain to prevent recreation through replay. Local editions and response history remain until you delete their meeting. Exports, backups and copies held by recipients must be deleted separately.

Technical and payment data

The review API keeps salted, hashed network-address buckets and request counts to limit abuse. Expired buckets are cleaned up during service activity. Hostinger automatically logs requests, including time, IP address, requested resource and method, browser/device information, country inferred from the IP address, request size, response duration and errors. These records support service operation, security, troubleshooting and traffic reporting. The app does not request GPS location. Hosting logs and their backups follow the provider’s retention practices; the 30-day review-link period is not a promise to delete hosting logs. Apple processes purchases; the app checks StoreKit entitlements and does not receive your payment-card details. Upgrade interaction counts are kept locally on your device and are not sent to us.

Our App Store disclosure conservatively includes names, private messages and other meeting content in encrypted uploads, associated identifiers, security metadata, usage, diagnostics, performance and coarse location from hosting requests. Uploaded content is used for private edition review; plaintext minutes and names are not sent to traffic analytics. We do not describe these records as anonymous or unlinked.

Notifications, Watch and tracking

Local reminders require your permission. Notification text is generic and does not include meeting names or motion wording. The paired Watch receives the selected meeting and agenda title, next action due date, appearance setting, and request acknowledgments. There are no advertising SDKs, tracking identifiers, analytics cookies, recording, or AI transcription in DecisionSession.

Your choices

You can use local records without online review, decline notifications, revoke individual review links, withdraw online editions, export issued records, or delete meetings. Do not send private links or confidential minutes when contacting support.