AfterBell beta privacy guidance ยท version M11-2026-09-06
Privacy and data
AfterBell is designed to reduce unnecessary exposure, not to promise that every identifier will always be detected.
What happens to a debrief
Your browser records audio and sends it temporarily over HTTPS to the trusted AfterBell server for Faster-Whisper transcription. The transcript is returned to you for review and editing. Typed text and reviewed voice transcripts are then locally privacy-processed before any external call.
AfterBell shows you the exact text it proposes to send to the configured external LLM provider. Check that names or identifying details have been removed, edit it if needed, and explicitly choose Send anonymised reflection. Nothing is sent to the external AI while the preview is being created. The edited text is checked again before sending; if the local check would change your wording, you will see your exact wording again and must deliberately choose to keep it before anything is sent.
Some anonymised content therefore leaves AfterBell. It leaves only after your confirmation, and the external provider's terms and data handling apply to that request.
What is not retained as durable AfterBell data
Raw audio, raw transcript, identity mappings, rehydrated teacher-visible text, and generated speech audio are temporary processing data. They are not written to the durable AfterBell record store, logs, or backups as product records.
Anonymised debrief records may be retained on the trusted AfterBell server for up to 30 days for the beta. Encrypted recovery backups are a separate rolling copy and may retain deleted live data until their seven-day expiry. AfterBell does not claim instant erasure from backups.
Important limitation and language
Automatic anonymisation is risk reduction, not a promise of perfect anonymisation. Anonymisation can miss an identifier, especially when names, places, or other details are unusual or transcribed imperfectly. The preview is a human-verifiable safety step; do not submit content that requires a guarantee of complete anonymity.
This invite-only beta is English-only for typed input, reviewed transcripts, local privacy detection, response generation, and speech. The English detector does not protect arbitrary multilingual input. The preview remains mandatory for every input.