Stride
That is the whole idea, and it is the only reason it is safe to actually say what you think out there. Below is what it means in practice, including the four things that do leave, because a policy that claims nothing ever does would not be true.
Effective 10 October 2026
Everything that touches what you said. Your voice is recorded on the device, turned into text on the device, and read and summarised on the device. There is no server for any of it to go to, because Stride does not have one.
Speech recognition happens on the phone at every point in the app. In English, the transcript you keep is written by Parakeet, an open speech model that runs on the iPhone itself. Everywhere else, including the live words on screen while you talk, Stride uses Apple's on-device recogniser, and it is pinned there. That is a setting with teeth, not a preference: if a language has no on-device model on your iPhone, transcription simply fails rather than quietly sending your audio to Apple to be processed. It is why the language list only ever offers what your particular device can handle offline.
Once the AI models are downloaded, Stride works fine in airplane mode. That is a reasonable way to check this for yourself.
Four things, none of which is your content.
The model that writes your summaries is about 1.28 GB and is not bundled with the app, so Stride fetches it the first time, from its own storage at Cloudflare, and only after you say yes. This is an ordinary file download, like any website serving you a file. It sends nothing about you, and nothing about your walks. Until you agree to it, no download happens and no summaries are generated.
Two more models come down in the same one-time setup, from Stride's storage at Cloudflare or, failing that, from Hugging Face, the public library they are published in. One tells voices apart when more than one person is talking; it is small. The other turns English speech into text; it is a few hundred megabytes, so it only downloads over Wi-Fi. Until it arrives, Apple's recogniser writes the transcript instead. If you skip setup, the small one comes down with your first walk. Both are downloads only: your audio is processed by them on the phone, and nothing is ever sent back.
When the app breaks, Stride can send a technical crash report through Sentry, a third-party error reporting service, so the bug can be found and fixed. A report contains device model, iOS version, and a stack trace: the programming equivalent of which floorboard gave way. On a share of ordinary sessions it also sends timings, such as how long a screen took to open, so slowness can be found the same way. Neither carries recordings, transcripts or summaries, or anything that identifies you.
Stride counts what happens, never what is said. That a walk finished, how many minutes it ran, whether a summary succeeded and how long it took, which screens get opened: numbers, durations and yes-or-no answers, sent through PostHog so the app can be made better at the things people actually do with it.
What is never sent, in any form: your recordings, your transcripts, your summaries, topics, key points, titles, the words of any prompt, and the names of any files. The rule is that content stays on the phone and only counting leaves it, and it is enforced in the code rather than by good intentions, as a fixed list of events that cannot carry anything else.
There is no account attached to any of it. The app has never asked who you are and has no way to find out, so these numbers are a crowd rather than a person. Nothing is used for advertising, nothing is sold, and there is no tracking across other apps or websites. If you would rather send nothing at all, Settings has a switch, and turning it off stops the sending rather than merely hiding it.
If you buy Stride Pro, Apple handles the payment and Stride never sees your card. To check the purchase and turn Pro on, the App Store receipt goes to RevenueCat, the service Stride uses to manage purchases, along with a random ID the app makes up for this purpose. RevenueCat keeps that purchase history so Pro can be restored on a new phone and so Stride can count sales. It is not linked to your name or email, it carries nothing you said, and it is not used for advertising or tracking. The app checks in with RevenueCat when it opens, so a purchase is recognised on every launch; that check carries only the random ID and the receipt.
To record your voice while you walk. Audio is written to the app's private storage on your device and is never uploaded.
The step counter is how Stride knows you are walking, which is how recording starts and stops without you fishing your phone out. Step counts are saved with the walk. No location is involved, and none is recorded.
Only if you tap to send an action item to Apple Reminders. Stride writes it to the Reminders app on your device and nowhere else.
Only if you tap Save Image on a walk's share card, to put that one image in your photo library. Stride never reads or looks through your photos.
Streak nudges and weekly recaps, scheduled locally on your phone. There is no push server, so nothing about the notification travels anywhere.
In a private database on your phone: recordings, transcripts, summaries and settings, all of it local. If you have iPhone backups turned on, your Stride data is included in your own iCloud or computer backup, under your Apple account and Apple's terms. Stride runs no cloud storage of its own.
Stride also has its own iCloud backup, and it is off until you switch it on in Settings. When it is on, a copy of your walks (the database, recordings and waveforms) goes to Stride's private folder in your own iCloud account, so that deleting and reinstalling the app can bring them back. It goes from your phone to Apple and nowhere else: we cannot see it, and it is kept under your Apple account and Apple's terms. It mirrors your phone, so a walk you delete is removed from the backup the next time it runs. Turn it off and nothing new is copied. To remove what is already there, delete Stride's data in your iPhone's iCloud storage settings.
Delete a walk and it is deleted, audio file and all. There is no copy elsewhere for us to also delete, and no undo. Delete the app and everything goes with it, except a copy you chose to keep in iCloud backup.
Stride has no login, no profile, and no way to know who you are. Nothing you say on a walk is collected, so there is nothing there to sell. We do not sell, rent, or share personal data, and the architecture is such that we could not start doing so without rebuilding the app from scratch and telling you.
The form on the home page is the one place any of this collects anything. If you ask for early access, the email address you type and whatever you write in the second box are stored so that an invite can be sent to you. That is the whole of it. There is no tracking on this site, no analytics, no cookies, and no advertising anywhere near it.
Those two things sit in a database run by Upstash and travel through Resend, which is what actually delivers the mail. Neither of them has anything to do with the app on your phone, and nothing from a walk is ever sent to either. Ask at the address below and your entry is deleted, which also means you stop hearing from us.
Stride is not aimed at children under 13, and we do not knowingly collect information from them.
The date at the top changes with it. If a change is a material one, meaning it affects what happens to your data rather than how a sentence is worded, it will be called out plainly here rather than folded quietly into the text.
Questions, or something here that does not match what you are seeing in the app, go to hello@try-stride.app.