Your vault and profile folder
Daisy keeps your sensitive data in a vault and stores everything else in a profile folder on your machine. This article explains both and how to manage them.
The vault — two ways to unlock
The vault holds your API keys and voiceprints. During setup you pick how it's unlocked:
- I trust this machine (recommended for a personal device) — no passphrase. Daisy unlocks automatically each time you launch. Simplest. The vault is still encrypted on disk; the unlock secret lives in your OS keychain.
- I want to encrypt my keys (shared or work computer) — set a passphrase of at least 22 characters. Daisy asks for it on each launch. There is no recovery if you forget it — keys and voiceprints can't be decrypted without it. Write the passphrase down somewhere safe.
Your meetings (recordings, transcripts, summaries, and notes) are saved as plain files in the profile folder and are not encrypted. They stay intact even if the vault is reset.
Unlocking on launch
If you chose I trust this machine, Daisy unlocks the vault automatically when you open the app — nothing to do.
If you chose to encrypt with a passphrase, an Unlock screen appears each launch:
- Type your passphrase, or tick Show passphrase to check it.
- Click Unlock.
If you forget it, Forgot passphrase? offers to destroy and recreate the vault. This clears your stored keys and voiceprints but keeps your meetings.
Managing your profile
Open Settings and go to the Profile section:
- Your name — the name used in summaries; the summarizer refers to you as "you" instead of by name. Edit it and click Save.
- Profile directory — shows where your data lives.
- Move profile… — pick a new location to move all data there. The vault locks afterward, so you re-enter your passphrase. Your old data stays in place until you delete it manually.
- Lock vault now — returns you to the Unlock screen, useful when stepping away from your machine.
Good to know
A cloud-synced folder (Dropbox, iCloud Drive, OneDrive) makes your recordings, transcripts, and notes readable by anyone with access to that account, since those files are not encrypted. Keep the default local path if that is a concern.