The contract, and how we keep it.

All audio and API traffic is transmitted over TLS 1.2 or newer. Recordings are never sent anywhere except the transcription endpoint, over an encrypted connection.

Audio is held in memory for the duration of a transcription request and then released. We operate a delete-on-completion pipeline with no archive stage and no long-term storage of recordings.

The website collects anonymized page-view events (event type, path, coarse device class, language) to understand what pages people use. No cookies are set, no IP addresses are stored, no personal data is collected. The app itself sends no crash reports, no usage pings, and no analytics events — the only network calls are the transcription request and licence validation.

Third-party dependencies are audited quarterly. We do not ship analytics or advertising SDKs of any kind.

Found something? Report it to [email protected]. We take reports seriously, reply promptly, and do not retaliate.