Privacy Policy

By default, recording and transcription happen entirely on your Mac. Audio and transcribed text are never sent to our servers.

If you opt into cloud speech-to-text or LLM cleanup, audio or text is sent directly to the provider whose API key you supplied, under their terms — not through us.

To deliver and verify your license we store: your purchase email, a hashed license key, your subscription status, and per-device activation records (a hashed device identifier, platform, device name, and app version).

We never store your raw device identifier, your audio, or your transcripts.

The legal basis for processing this data is performance of our contract with you (delivering and maintaining your license). We retain it for as long as your license is active and for a short period afterwards for accounting and dispute resolution, then delete or anonymise it. Operational logs that may contain IP addresses are kept only briefly for security and debugging.

Sending diagnostic reports when the app crashes is off by default. Reports are sent only if you enable it in Settings or agree when asked after a crash.

A report contains only the crash type and time, the app and macOS versions, your Mac's model name, and a technical stack trace. It never includes audio, transcripts, or anything you typed.

We use reports solely to investigate and fix bugs, and keep them only briefly.

When you sign in to your dashboard, this site sets an http-only session cookie to keep you signed in.

We do not sell your personal data or share it with advertisers.

Our website uses a cookie-free analytics service to count page views and button clicks in aggregate. It sets no cookies and does not track you across sites.

When you download the app, we record the time, the app version, your browser's platform (such as macOS), the host name of the page you came from, and the site language. We do not store your IP address or your full browser signature.

When the installed app checks for updates, we count those checks in aggregate to estimate how many installations are active. IP addresses are used only to estimate daily unique counts through a one-way salted hash that changes every day, and are never stored.

Payments are processed by Stripe. We do not store your card details; they are handled entirely by Stripe, who acts as an independent controller for the payment data it collects.

In addition to Stripe, which processes payments, we rely on external service providers to run this service — for example, for database hosting and email delivery. These providers may process the limited data described above on servers located outside your country, including the United States, under their own data-protection safeguards. We share only the minimum data each provider needs to perform its function.

Depending on the laws where you live, you may have the right to request access to, correction of, or deletion of the personal data we hold about you. To exercise any of these rights, contact us at support@ultrawhisper.app.

For data held by cloud providers you connected via BYOK, refer to that provider's privacy policy — we have no access to it.

The data controller for the licensing service is the operator named in our notice for sales (see Tokushoho for Japan). Questions about this policy, or to exercise any of the rights above? Contact us at support@ultrawhisper.app.