Privacy Policy

Last updated 2026-10-02

Voice transcribes your speech on your Mac. Your audio and your words do not leave your Mac.

Who we are

Voice is operated by Mateusz Hadryś ("we"). You can reach us at privacy@codlume.com.

This policy covers the Voice Mac app, this website (voice.codlume.com), and Voice accounts.

What stays on your Mac

• Speech recognition. Voice recognizes speech locally, using the Parakeet model. Voice captures audio only while you hold the dictation shortcut. The audio is held in memory only. It is never written to disk and never sent anywhere. Voice discards it after transcription, or when you cancel.
• Cleanup. This optional step tidies up the transcribed text. It is on by default and works in English. It runs locally with a local model. Nothing is sent.
• Transcripts and files. Voice keeps the last transcript in memory until you quit Voice. It saves no history. The only file Voice writes for you is its settings file. It holds your microphone, shortcut, and preferences, and none of your text.
• Typing into apps. Voice types into the focused app through macOS Accessibility. It reads the contents of the focused field only to confirm that the text landed. What it reads stays in memory and is never stored or sent. If Voice has to paste, it uses the clipboard temporarily. Afterwards it restores your previous clipboard contents, unless something else changed the clipboard in the meantime. Voice never reads the name of the focused app, your screen, or your windows.
• Permissions. Voice asks for two macOS permissions. Microphone lets it hear you while you hold the shortcut. Accessibility lets it detect the shortcut and type text. The keyboard listener only looks for the shortcut. Your keystrokes are not recorded or sent.

What the Mac app sends over the network

• Model downloads. Voice fetches the speech and cleanup models from Hugging Face (huggingface.co), and only when you click to download them. Hugging Face sees a normal download request, including your IP address. Voice sends no personal data from the app.
• Update checks. About 15 seconds after launch, and then every 4 hours, Voice requests the update feed from downloads.voice.codlume.com, which is hosted on Cloudflare. The request includes your release channel, your IP address, and a random identifier. The update library generates this identifier on its first check and stores it on your Mac. We do not use it to identify you. You can reset it by deleting the app's data.
• Diagnostics (opt-in, off by default). If you turn on sharing in Settings > Data and Privacy, or during setup, Voice sends crash reports, dictation timings, and app events (such as a failed cleanup) to Sentry, hosted in the EU (Germany). Reports never include your words, your audio, your clipboard, or the app you dictate into. Voice removes error messages, and your Mac username in file paths, before sending. Turning sharing off stops sending immediately. Sentry receives your IP address as part of the connection. We configure Sentry not to store it. Sentry deletes reports after the retention period for our plan.

Voice accounts

Accounts are optional and not yet available in every Voice build. You never have to sign in, and dictation works the same whether you are signed in or not.

• Sign in with Google. Voice asks Google only for your name, email address, and profile picture (the openid, email, and profile scopes), plus Google's identifier for your account. We use them to create your account, show who is signed in, and recognize you when you sign in again. We do not request access to Gmail, Calendar, Drive, or any other Google data. We do not ask Google for offline access.
• Storage. We store account records, sessions, and the Google tokens issued at sign-in in a Cloudflare D1 database located in Western Europe. Stored tokens are encrypted. Each session also records the IP address and browser or app details (user agent) it was created from. On your Mac, your session token is kept encrypted in the macOS Keychain.
• Security records. To limit abuse, the account service keeps short-lived rate-limit records keyed by IP address.
• Signing out and deleting your account. Signing out ends the session on the server and removes it from your Mac. Delete account (in Settings > Account) removes your user record, your sessions, and your linked Google account record. We keep your account until you delete it.
• Nightly and Stable. Nightly and Stable builds use separate account databases.
• What never reaches the account service. We never send audio, transcripts, clipboard contents, or app context to the account service.

We use Google user data only to provide sign-in. We do not sell it, use it for advertising, or use it to train models. We share it only with the service providers listed below.

The website

This website uses no cookies, no analytics, and no third-party scripts. Cloudflare serves the site. It processes your IP address and request details to deliver the site and protect it from abuse.

Service providers

• Cloudflare serves this website, the update downloads, and the account service. The account database is in Western Europe.
• Sentry receives diagnostics, only if you opt in. It is hosted in the EU.
• Google provides sign-in, only if you sign in.
• Hugging Face serves the model downloads, only when you click download.

We do not sell personal data or share it for advertising.

Legal bases

Under the GDPR, we rely on these legal bases:

• Accounts. Performance of a contract. We need this data to provide the account you asked for.
• Diagnostics. Your consent. You can withdraw it at any time in Settings.
• Update checks, website delivery, and abuse protection. Our legitimate interests in keeping the app up to date and our services secure.

International transfers

Some providers (Cloudflare, Google, and Hugging Face) may process data outside the European Economic Area. They rely on safeguards such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

Your rights

You have the right to access, correct, and delete your personal data. You can also restrict or object to its processing, and receive it in a portable format. Where we rely on your consent, you can withdraw it at any time.

To exercise these rights, contact us at privacy@codlume.com. You also have the right to complain to your local data protection authority.

Children

Voice accounts are not intended for children under 16.

Changes

When we change this policy, we update this page and the "Last updated" date. We announce significant changes in the app or in the release notes.