Skip to content

SYSTEM Cited by 1 source

Pixel Recorder

What it is

Pixel Recorder is Google's on-device audio-recording and transcription app for Pixel phones (Play Store link), which runs on-device speech recognition to produce live transcripts without sending audio off the device.

For the wiki's purposes, Pixel Recorder is significant as the first-named production deployment of TEE-backed differentially private aggregation for AI insights at Google — the second-generation privacy-preserving analytics architecture that the 2026-05-27 zero-trust-aggregation post later builds on.

Architectural significance

Per the 2026-05-27 post:

"Google has deployed TEE-backed differentially private aggregation for computing insights into AI systems in the Pixel Recorder app."

This identifies Pixel Recorder as the first-published production target for TEE-based DP aggregation at Google. The architecture used there:

  • On-device ASR runs over private audio.
  • Outcome / quality metadata is encrypted and shipped to a TEE-resident aggregator.
  • TEE memory encryption + attestation provide the confidentiality primitive.
  • Differential-privacy noise bounds individual leakage from the aggregate.

This is the second-generation federated-analytics architecture in Google's lineage:

Generation Architecture First production target
Gen 1 (2017+) Multi-round cryptographic secure-aggregation systems/gboard keyboard learning
Gen 2 (~2024) TEE + DP aggregation (no crypto layer) Pixel Recorder AI insights
Gen 3 (2026-05-27) Cryptographic + TEE + DP + client-committee systems/android-safetycore

The 2025-12 Toward provably private insights into AI use post is the deeper writeup of the Gen-2 Pixel Recorder deployment; it's referenced from the 2026-05-27 post but not yet ingested separately on the wiki.

Caveats

  • Stub wiki page. Pixel Recorder is referenced primarily in the 2026-05-27 post as a prior-generation deployment. The deeper architectural treatment lives in the linked 2025-12 post which is not yet ingested.
  • What specifically is aggregated in Pixel Recorder's federated analytics is not detailed in the 2026-05-27 post; presumably ASR quality / confidence metrics rather than transcribed content.
  • TEE substrate for the Gen-2 deployment is not specified.

Seen in

Last updated · 542 distilled / 1,571 read