Dictation stays on your Mac.

Controller. RELMOS AG, Weieracherstrasse 4, CH-8184 Bachenbülach, Switzerland. Privacy requests can be sent to support@dictaty.com.

Dictation. No Dictaty account is required. Dictaty does not send recordings or transcripts to a Dictaty server. History is deleted after seven days. Successful audio can be removed when the next recording starts, when local audio storage reaches its limit, or once it is more than 24 hours old.

Speech model. Dictaty downloads its local speech model (about 630 MB) directly from Hugging Face (huggingface.co), not from a Dictaty server: during setup, and again if a newer model replaces it. If you turn on “Recognize custom words more accurately” in the app, Dictaty downloads an optional addition of 574 MB from Hugging Face the same way, once. Hugging Face receives the download request from your Mac, including its IP address and the model files requested, and handles it under its own privacy policy (huggingface.co/privacy). Dictaty sends no recordings, transcripts, license data, or email address with it, and dictation needs no connection to Hugging Face afterwards.

Website. dictaty.com uses no advertising or analytics cookies and no third-party tracking service. Page visits are counted on our own server: the date, the page, a two-letter country, and the referring website host. Separately, the server stores anonymous daily totals for campaign landings, active visits (page views in which the visitor first scrolled, clicked, typed, or touched the page), checkout attempts, and their response class, and download requests. Download requests are sorted by outcome (file delivered, or sent back to the download page) and by whether the browser describes a Mac or another device. Requests from the app’s built-in updater are counted separately as updates, without a device. A further daily total counts trial start requests from the app by the class of the answer (issued, already issued, expired, refused, or unavailable), without any installation ID. Campaign labels are limited to a small fixed list (macapps, myproductivemac, macosmenubar, editorial, directory, launch_202609, direct, or unknown); free query values, email addresses, IP addresses, and full referrer URLs are not stored. Labels come from the requested URL or its own public page referrer; the full referrer is discarded. Each of these totals also records one broad origin class (search engine, AI assistant, app directory, social network or forum, other website, or none), worked out from the referring website host and the source named in the link; only the class is stored. These campaign totals are not joined across days or to an individual order, and a download request is not a completed download or installation. To count people rather than clicks, each visit is reduced to an unreadable identifier calculated from the date, the network address, and the browser description. The date is part of that calculation, so the identifier changes every night and cannot be traced back or followed across days. No IP address and no browser description is stored, and these counts are deleted after 90 days. Cloudflare processes the technical request data needed to deliver and protect the site. Short-lived security logs may contain an IP address, request time, and requested path.

Update checks. When the app looks for updates (at launch if its last check was more than a day ago, then about once a day while it runs), our server counts the request by day and app version only, without an IP address, device, or installation ID.

Former free launch offer. For each previously issued free license, RELMOS AG stored an order reference, email address, a protected email fingerprint, claim number, language, accepted-terms version, license status, and the device activation needed to deliver the license, prevent duplicate claims, and provide support.

Purchases. Stripe processes payment, billing address, and tax information. Card details never reach Dictaty. RELMOS AG stores the order reference, email address, amount, license status, and the device activation needed to deliver the purchase, prevent misuse, and provide support.

Seven-day trial. To prevent a second trial on the same installation, we store a keyed hash of its random installation ID and the first issue and expiry times for as long as the trial offer operates; no email address or hardware identifier is required.

Email. For a current purchase, Resend processes the buyer’s email address and license message to deliver the license. It also retains the delivery records needed to support earlier free licenses. Neither checkout nor the former free offer subscribes anyone to marketing email.

Purpose and legal basis. License data is processed to perform the sales contract, answer support requests, and protect checkout and the license system against misuse. Data from the former free offer is retained to honor those licenses and prevent duplicate claims. Paid transaction data is also processed to meet accounting and tax duties. No personal data is sold.

Retention. Accounting and transaction records are kept for ten years from the end of the relevant financial year where Swiss law requires it. License and activation data is kept while the license remains active. Webhook delivery records and short-lived security logs are removed or anonymized when they are no longer needed for reliability, fraud prevention, or legal claims.

Providers and transfers. Cloudflare, Stripe, and Resend may process data outside Switzerland or the EEA. Their contractual safeguards include the applicable Data Privacy Frameworks and standard contractual clauses. Their current privacy information is available at cloudflare.com/policies/privacy, stripe.com/privacy, and resend.com/legal/privacy-policy. Hugging Face, which delivers the speech model, may also process data outside Switzerland or the EEA; its current privacy information is available at huggingface.co/privacy.

Your choices. Subject to applicable law, you may request access, correction, deletion, restriction, objection, or a portable copy by emailing support@dictaty.com. Some transaction records cannot be deleted before a statutory retention period ends. You may also contact the Swiss Federal Data Protection and Information Commissioner or the supervisory authority where you live.

Changes. Material changes are posted on this page with a new update date. Questions can be sent to support@dictaty.com.