Privacy Policy

Overview

TypeWhisper is a local-first app for macOS, iPhone, iPad, and Windows. By default, data is processed entirely on your device. If you explicitly configure a cloud or custom endpoint, the data needed for that request is sent to that provider.

Data Collection

TypeWhisper does not collect telemetry by default. Audio processing, transcription, and storage happen locally on your device by default. No audio or transcription data is sent to TypeWhisper-operated servers unless you explicitly install and enable Improve TypeWhisper, review selected corrections, and confirm a manual submission. If you opt into a cloud engine or configure a custom endpoint, data for that request is sent to the selected provider.

Website Analytics and Attribution

The TypeWhisper website uses a self-hosted instance of the open-source Plausible Community Edition to measure aggregate page visits, referring domains, campaign parameters, download choices, and checkout starts. Analytics data is stored on infrastructure operated by TypeWhisper and is not transferred to Plausible Cloud. Plausible does not set tracking cookies or store raw IP addresses. Download events contain only the platform, download target, page placement, language, and optional public app version; they never contain email addresses, license keys, audio, or transcription content. Standard UTM campaign parameters are kept in session storage for the current browser session and forwarded to Polar when checkout starts. No persistent visitor ID or cross-device profile is created by TypeWhisper.

Local Storage

TypeWhisper stores the following data locally in your OS-specific app data directory (for example Application Support on macOS or AppData on Windows):

• Transcription history (text, timestamps, app context)
• User profiles and settings
• Downloaded AI models

This data is stored on your device by default and is not accessible to us. Optional cloud or custom endpoints only receive the request data you explicitly route to them.

Optional Premium Account and Sync

Premium Sync is optional. Sign in with Apple gives the TypeWhisper entitlement service a stable account identifier. The service stores only hashed account, license, StoreKit transaction, session, and device references plus entitlement status, tier, expiry, device limit, and verification time. Polar license keys are used for validation and are not stored or logged in their original form. Dictionary and snippet contents never pass through the TypeWhisper entitlement service: they remain in the private iCloud container or Files/Finder folder selected by you. Signing out or an expired entitlement pauses sync without deleting local or already synchronized data. In-app account deletion removes the TypeWhisper account and its entitlement links; cloud files remain until you delete them separately.

Optional Correction Contributions

Improve TypeWhisper is an optional marketplace add-on and is disabled by default. When enabled, only before-and-after text that you manually changed is queued locally; audio, target application, URL, and unchanged dictations are excluded. Nothing is uploaded until you select corrections, review the complete texts, and confirm sending. Submitted text is protected in transit and stored as application-level encrypted ciphertext. An anonymous contributor token is stored in Keychain; no email address or TypeWhisper account is required. Authorized TypeWhisper reviewers and a private validation workflow using Codex/OpenAI may process submitted pairs to assess training quality. You can delete a submission until it is incorporated into a validated dataset snapshot. Rejected, pending, or quarantined submissions that are not incorporated are automatically deleted after 90 days. Accepted contributions may be retained for model evaluation and training. Once incorporated into a dataset or model, removing the contribution from already created datasets, model artifacts, or learned parameters may no longer be technically possible.

Network Access

By default, TypeWhisper connects to the internet only for product services such as updates and AI model downloads. After local models are downloaded, local transcription can function offline. If you enable a cloud engine, configure a custom endpoint, use Premium account services, or manually submit corrections through Improve TypeWhisper, the app also connects to the corresponding selected service.

Third-Party Services

The website uses self-hosted Plausible for aggregate analytics and Polar for checkout, payment, licensing, and purchase attribution. Apple provides Sign in with Apple, iCloud, Files, StoreKit payments, and subscription status. Cloudflare operates the TypeWhisper entitlement and optional contribution APIs and forwards requests to the analytics endpoint. OpenAI may process manually submitted correction pairs when Codex is used in the private validation workflow. The apps do not contain advertising trackers and do not send usage, audio, or transcription telemetry to TypeWhisper.

Law-Firm Security Review

For firm IT and privacy review, there is also a public checklist covering data flow, storage locations, and optional cloud building blocks .

Open Source

TypeWhisper is open source under the GPLv3 license. You can audit the entire source code on GitHub.

Contact

If you have questions about this privacy policy, please open an issue on our GitHub organization.