Rapport records a conversation you take part in, with consent, and gives you a read on how you came across. It can also prepare reply options from one written conversation you choose to share with it. This page explains what Rapport handles, who else touches it, how long it is kept, and how to get it out or have it deleted.
Rapport is operated by Rapport Science, Inc. Questions, or to exercise a right the in-app tools do not cover: privacy@rapportscience.com.
Our consumer health data privacy notice explains how Rapport handles information that is consumer health data under Washington or Nevada law.
Rapport uses an email address for sign-in, and stores an optional chosen name if you give one during intake. Before you use the app you confirm you are 18 or older; Rapport stores that yes or no, not your birth date. Rapport has no way to check your age, and the screen says so at the moment you confirm.
A recording cannot begin until Rapport's server has written a consent record for it, holding the time, the jurisdiction and the version of the wording you agreed to. If you decline, the microphone stays shut.
Rapport takes one coarse location reading to work out which US state's recording law applies, converts it immediately to a state code, and does not keep the coordinate. If location is unavailable or you decline it, Rapport asks you to pick the state. In a state that requires everyone's agreement you confirm, before recording starts, that you have already asked out loud and everyone said yes. In a state that does not, you confirm you have told the other people present. Rapport cannot independently check either statement. The attestation is your own timestamped word, and the screen says that too.
While recording, Rapport writes the audio to your phone encrypted and sends it to Rapport's servers in pieces. A network connection is required to start. Before the audio leaves the phone, the consent screen names AssemblyAI and Deepgram for turning speech into text and Anthropic for the read.
Rapport stores the transcript and the analysis so you can read the conversation back. Before the transcript is stored, an automated pass redacts things shaped like email addresses, phone numbers, payment-card numbers and US Social Security numbers. That is pattern matching, not a privacy filter: names, addresses, employers and anything else said out loud can remain in the transcript exactly as spoken.
You can separately record a short voice sample so Rapport can tell your voice apart from other people's across conversations. Recording and scoring work without it.
Only you get a persistent voiceprint. Everyone else in a recording is given a label that means something only inside that one conversation and is never matched across two. Your voiceprint is destroyed one year after your last recorded session, when you delete your account, or at any time you remove it from the account screen. Removing it is immediate and does not delete your account, your past conversations or your scores; a record that you asked survives, and you can record a new sample later. The recording made to enrol your voice is kept only to support the voiceprint, and is deleted whenever the voiceprint is.
Rapport can suggest two or three replies from one written conversation you deliberately give it. Before any of that text leaves the phone, Rapport shows a disclosure naming Anthropic and records your confirmation.
The usual route is screen capture: you start Apple's system screen broadcast and scroll through one conversation, Apple's Vision framework reads the text from the frames on the device, and the recognised text is held briefly and passed to the app through a local socket. No screenshot is stored and none is sent. When you stop, you choose whether to use or discard what was read, and only when you choose to use it does the text go to Rapport's servers and to Anthropic. You can also paste text yourself, or pick one screenshot, after the same disclosure; in this release those image bytes stay in memory and are never sent anywhere.
Rapport does not store the text of your message threads in its database. It does not guess how the other person feels, predict what they will do, type for you, or send anything.
Rapport includes a full custom keyboard. It types, switches keyboards and shows prepared reply options whether or not you turn on Full Access, which is a switch in your phone's own settings, next to the Rapport keyboard. Rapport cannot turn it on for you, and until it is on, the keyboard cannot reach the internet at all.
Once it is on, and only after you have separately agreed to keyboard replies inside the app, the keyboard can read the text near your cursor, including what the other person wrote, and asking for a suggestion sends that text to Rapport's servers and to Anthropic, its processing provider, to draft your reply options. Rapport does not store the conversation text in its app database, though Anthropic may retain request data under its agreement with Rapport. You can leave Full Access off, or turn it off again at any time; the keyboard still types either way, and without it, it cannot ask Rapport for a reply.
The keyboard reads nothing unless it is the one you have switched to and are actively typing with. It sees nothing while another keyboard is active or outside the field you are typing into, and it has no microphone. Prepared reply lines expire after ten minutes. The message thread, the screenshot, the transcript, your credentials and the model's reasoning are never placed where the keyboard can read them. Tapping a line inserts it into whatever you are typing in; the keyboard never presses send, and prepared replies never appear on the Lock Screen or in the Dynamic Island.
Where the consent wording offers the other participant their own read, you can create a link for that one conversation. Rapport does not send the link or collect their contact details; you send it however you choose. Anyone holding the complete link can open it until it expires after 14 days or you end it, so treat it as a key. Rapport stores only a one-way hash of it, which consent event it came from, when it expires and whether it has been ended. The page does not show the recording, the transcript, either person's name, or your score.
If the other person takes their agreement back, that ends their access to their own read. It does not delete the recording or your read of it, and the card they are shown says exactly that. Deleting the conversation is yours to do. Someone who was recorded and has no Rapport account can write to privacy@rapportscience.com, and the card carries that address.
Rapport can improve how it reads conversations only from conversations whose participants separately agreed to that. It is off unless you turn it on, it is a different permission from consent to be recorded, and declining changes nothing about what you get. You turn it on from the account screen after reading the full agreement, and you can turn it off there. Turning it on keeps that transcript and its measurements permanently for that purpose instead of the usual window; turning it on does not keep the recording itself any longer; the recording follows the schedule under How long things are kept. On any conversation's page you can stop Rapport learning from that one, and it cannot be turned back on for it.
With your permission, the Today screen reads upcoming calendar events to prepare what it shows. It does not add or change events, and it does not send event details off the phone. If you turn on notifications, Rapport stores the Apple push token against your account. If you complete intake, Rapport stores your answers and the optional name you chose.
Rapport does not sell personal data, and does not share it for third-party advertising or cross-app tracking.
Inside the app you can export your account record: your consent history, your learning-consent history, your intake answers, and the style observations Rapport holds. That export does not include recordings, transcripts or scores.
Deleting your account closes access and deletes your sessions, transcripts, scores, analysis, audio and voiceprint. Removing the sign-in itself can take a moment to finish; the app shows that step as pending and keeps retrying until it is done. The consent record survives, as the receipt that the deletion happened. You can also delete one conversation on its own, from that conversation's page, and remove your voiceprint on its own, from the account screen, without deleting anything else.
Capture files are encrypted on the phone with Apple's CryptoKit, and network traffic uses HTTPS. Access is scoped to the signed-in account. No system can promise an incident will never happen.
If what Rapport collects or how it uses it changes materially, you will be told before the change takes effect.
Rapport Science, Inc.
privacy@rapportscience.com