Security & Privacy
Your meetings are encrypted.
Every recording, transcript and summary is encrypted on your device before it is uploaded. What our servers store is ciphertext. You choose who holds the key: by default Lamponi keeps a locked backup so you never lose a meeting, and with zero-access encryption only you hold it.
Two ways to keep your meetings
Standard encryption (the default)
Your meetings are encrypted with a key made for your account. Lamponi keeps a backup of that key, locked with a server key that stays on our servers. The backup is handed back only to you, after you sign in, so you can reset a forgotten password or sign in on a new device and still find every meeting. Lamponi has no tool for staff to open your meetings.
Zero-access encryption (optional)
Turn it on in Settings and Lamponi deletes its backup of your key. From then on only you hold it: your password opens it, and a recovery code we show you once is the only other way in. If you lose both, nobody can open those meetings, including us. It takes effect the moment you turn it on, and you can turn it off again in Settings.
How it works
Your password stays on your device
When you sign in, your device turns your password into two separate values (PBKDF2 with SHA-256, 600,000 rounds). One signs you in, and it is the only one our server sees. The other stays on your device and opens your key. We never store the password you typed.
A fresh key for every meeting
Each meeting is encrypted with its own key (AES-256-GCM), and your account key locks those meeting keys. Your account key is only ever stored in locked form, and every app checks it against a fingerprint of your account before using it.
What is encrypted and what we keep
Stored encrypted
- Audio and screen recordings: stored as encrypted frames
- Transcripts: every line and every speaker name
- AI summaries: encrypted with the transcript
- Chats with your meetings: questions and answers
- Meeting titles: even the list of what your meetings are about
With zero-access encryption, only you can open any of this. With standard encryption, only you can open it once you sign in, and Lamponi keeps the backup that makes a password reset safe.
We keep
- Your email address: it is how you sign in
- Usage numbers: minutes transcribed, request counts and what they cost us
- Timestamps and durations: when meetings happened and how long they ran
That, plus routine sync details such as meeting IDs and share link addresses, is the whole list. Usage is kept as numbers, which is how we keep the free plan fair.
AI processing, honestly
Transcription and AI answers are the one place your words leave encrypted storage. When you transcribe a meeting or ask a question, your device decrypts just what is needed and sends it to our transcription service and the AI models that write summaries and answers.
That processing is short lived and locked down by contract: these services keep no copy of your content and never train on it. Our relay servers hold your content in memory only, never write it to disk or logs, and answer with an X-Lamponi-No-Store header that says so. Audio sent for transcription is deleted as soon as your transcript comes back.
For this step we make no end-to-end claim, because an AI has to read the words it works on. What we stand behind: your meetings are stored encrypted, and processed only for the moment it takes.
Your own device stays yours
Meetings on your own computer are normal files on your disk, so things like the Obsidian export keep working. The encryption covers everything that leaves your device.
Share links
A shared meeting is encrypted too. Its key travels inside the link, after the #, and browsers never send that part to a server. Anyone you give the link to can read that meeting, so a share link is as private as you keep it. Sharing is something you choose, one meeting at a time.
Questions you should ask
What if I forget my password?
With standard encryption, reset it from the sign in page and every meeting is still there. With zero-access encryption, reset it and enter your recovery code. If you lose both the password and the code, those meetings are gone for good, and nobody can bring them back.
Can I change my mind?
Yes. Settings, then Encryption, has the zero-access switch. Turning it on shows you a recovery code and then deletes our backup. Turning it off gives Lamponi a backup again, and your recovery code keeps working.
Why is the AI step outside end-to-end encryption?
A transcription engine has to hear the audio, and a language model has to read the words. Around that moment we control everything we can: decryption happens on your device, processing is short lived, our relays never store or log content, and the services delete their copies when the job is done. If another meeting tool says everything is end-to-end encrypted, ask how its AI reads your transcript.
Questions about any of this? matteo@lamponi.ai