Privacy Policy

Speakist is a dictation product made by Brevoort Studio LLC (“we,” “us,” “our”). This policy explains what we collect, what we don't, and how we handle the information you share with us.

Current Speakist releases process dictation entirely on your Mac. We temporarily continue operating the legacy account and cloud service for people upgrading from older releases; the legacy disclosures below remain in effect while that service is available.

If you've read enough, here's the short version:

• In current releases, audio and transcript text never leave your Mac.
• Speakist does not collect product-usage telemetry from the Mac app.
• Legacy cloud requests are processed but their audio and transcript text are not retained.
• We don't share your personal information with anyone except the infrastructure providers we need to operate.
• We don't sell, rent, or trade your data.
• We retain only the minimum metadata required for billing and operations.

Information we collect

Account information. An account is optional. When you create one for Speakist Cloud, we collect your email address. You can optionally provide a display name. We use a magic-link sign-in flow, so we don't store passwords.

Cloud usage metadata. Each time you complete a Speakist Cloud transcription, we record:

• A unique transcription ID generated by your device
• Word count of the resulting transcript
• Audio duration in milliseconds
• The transcription model used (e.g., Whisper)
• Whether the polish step ran
• Cost in fractional cents
• Timestamp

We do not store the transcript text or audio.

Custom vocabulary. Current releases store vocabulary only on your Mac. Vocabulary previously synchronized by a legacy release remains in that legacy account until it is deleted under the retention terms below.

Billing information. We track your credit balance, top-up history, and Stripe customer ID. Stripe processes all payments — we never see your full card number or banking details.

Authentication tokens. When you sign in from a device, we store a SHA-256 hash of your refresh token. We never store the plaintext token.

Server logs. Our infrastructure logs standard request information (IP address, user agent, timestamp, response status) for a limited period for abuse prevention and debugging. These logs do not include the contents of your transcriptions.

What we don’t store

Current releases. Dictation audio and transcript text are processed on your Mac and are not sent to us. The app can retain recent local audio and history according to settings you control; you can turn audio retention off.

Legacy cloud audio. When an earlier Speakist release uses the legacy cloud service, audio is sent to our backend and forwarded to our transcription provider. The audio is held only for the duration of the request — typically under a second — and then discarded. It never persists in our database, logs, or any other storage system we control.

Legacy cloud transcript text. The transcribed and polished text returned to your device is not stored on our servers. It exists only in transit between you, our transcription provider, and your device. Your final text lives wherever you paste it — your email, your notes, your messages.

Card numbers. Payment data is handled entirely by Stripe under their PCI-compliant systems. We see only metadata Stripe shares (last four digits, customer ID, invoice information).

Reports from earlier releases

Current releases do not include transcription reporting or feedback upload. Earlier releases offered an explicit “Report bad transcription” action. Reports already submitted through that legacy action may contain the audio, raw transcript, delivered text, correction, and optional note the user chose to send.

Those reports remain subject to the retention and deletion provisions below while we operate the compatibility backend. The current Mac app has no path that creates or uploads a new report.

How we use the information

We use the information we collect to:

• Authenticate you and your devices
• Operate, maintain, and improve the service
• Calculate your usage and bill you accurately
• Send transactional emails (e.g., sign-in links, billing receipts)
• Detect abuse and protect the service
• Aggregate usage data to understand product performance (no individual identification)

What we don’t do

We do not:

• Hugging Face — distribution of the model files downloaded during setup. Hugging Face receives the ordinary network metadata needed to serve those files, such as IP address and request headers; Speakist does not send dictation audio, transcripts, vocabulary, or history with a model download.
• Sell, rent, or trade your personal information to anyone, ever
• Share your data with advertisers or marketing networks
• Use tracking pixels or third-party advertising cookies
• Use your audio or transcripts to train AI models
• Read transcriptions you didn’t explicitly report. We don’t store them in the first place.

Third-party services

Local transcription does not send dictation content to these providers. Model delivery and the temporary legacy account, payment, and cloud services use the following providers, each with their own privacy commitments:

• Cloudflare — hosting, edge compute, and database. Speakist data is stored on Cloudflare infrastructure. They process the data on our behalf as a sub-processor.
• Stripe — payments. Stripe receives your payment information directly when you make a purchase. We share only your email and metadata identifying which org is charged.
• Groq — transcription and polish. Groq receives your audio for transcription and the resulting text for the polish step. Per Groq's privacy policy, inputs are not retained after processing.
• Deepgram — alternate transcription provider, used only when a super admin routes an org to Deepgram via its allowed-models list. When used, audio is sent to Deepgram for transcription and not retained after processing.
• Resend — transactional email. We send sign-in links and billing notifications through Resend. They receive your email address and the message we send to you.

Each provider may store request metadata under their own retention policies. We pass through only what is required to provide the service.

Data retention

• Account information is retained while your account is active.
• Usage events are retained for billing reconciliation. We may purge or aggregate older records over time.
• Audio and transcripts are not retained — they exist only for the duration of each request.
• If you delete your account, we delete your account information, billing records, and vocabulary, except where retention is required by law (e.g., tax records).

Your rights

You can:

• Access your information at any time via your dashboard
• Update your account information from your settings
• Delete your account by contacting us at hello@speakist.ai or via your settings
• Export your usage and vocabulary data on request
• Opt out of non-transactional emails

If you are in the European Economic Area, the United Kingdom, or California, you have additional rights under GDPR, UK GDPR, and the CCPA respectively. To exercise those rights, email us.

Security

We use industry-standard practices to protect your information:

• TLS 1.2+ for all data in transit
• Encrypted-at-rest storage where supported by our providers
• Hashing of authentication tokens
• Limited access to systems by team members on a need-to-know basis

No system is perfectly secure. If we ever detect a breach affecting your data, we will notify you in line with applicable law.

Children

Speakist is not directed to children under 13. We do not knowingly collect information from children under 13. If you believe a child has signed up, please contact us and we will delete the account.

In jurisdictions where the digital consent age is higher (e.g., 16 in parts of the EU under GDPR), we apply that local age threshold.

International data transfers

Speakist is operated from the United States. By using the service, you consent to your information being processed in the United States, where data protection laws may differ from those of your country.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or in the dashboard. Continued use of the service after the effective date constitutes acceptance.

Contact

Questions or requests? Email hello@speakist.ai.

Brevoort Studio LLC
Colorado, USA