Trust center

Privacy and security

What Speedy Flow keeps on your Mac, what goes through the cloud and why, for how long, and how to report a problem to us. In plain English, no jargon.

Where your data goes

On your Mac, or in transit

Everything you create with Speedy Flow is stored locally. The cloud is only used to turn your voice into text and to write, and then we keep nothing.

Stays on your Mac

Your content never leaves your computer

  • Your dictation history and, if you choose to keep them, the audio recordings.
  • Your meeting transcripts, notes, summaries, action items and answers.
  • Your personal vocabulary, learned corrections, Snippets, styles and settings.
  • Your sign-in tokens, stored in the macOS Keychain, encrypted by the system.
  • Your calendar, read on your Mac only if you connect it, never sent to our servers.
This content is not copied to our servers: we can neither read it nor pass it on.
Goes through the cloud

Only what's needed, and why

  • Audio to transcribe, sent encrypted to the speech-to-text engine, processed in memory and never written to our servers.
  • Text to rewrite or summarize, when you use a Speedy feature, then deleted.
  • Your account: email address, current plan and, if you sign in with Google, your name and profile picture.
  • Usage counters (request type, audio duration, word count), with no content at all, to apply your plan.
Transcription happens online, so an internet connection is required. See the FAQ.

Speech to text

Your voice's journey

From your microphone to text typed at your cursor, here's exactly what happens.

You start it

Shortcut or button. Before that, the microphone is off: nothing is captured continuously.

Audio travels encrypted

Over HTTPS/TLS to our service, which checks your account and plan, then relays it to the engine.

The text comes back

It's typed wherever your cursor is. We keep only the duration and word count, never the text.

Nothing lingers

In meetings, temporary audio chunks are deleted from your disk as soon as they're transcribed, unless you keep the recording.

Engines used today: Groq, with OpenAI as a fallback. In meetings, Speedy Flow adds no bot to your calls and never records without you taking action. Always let participants know before you transcribe them. Discover meeting notes.

AI and training

No training without your consent

By default, none of your data is used to train or improve any model, neither by us nor by our providers.

“Help improve Speedy Flow” option

Off by default

  • If you turn it on, Speedy Flow only shares word pairs: the word it heard and your correction (for example “Otopsie → Otopcy”).
  • This sharing is based on your consent. You can turn it off in one click, and you can ask us to delete pairs already shared.
  • Our providers act as subprocessors. Under their developer terms, they don't use data received through their API to train their models.
Never shared

Even with the option on

  • Never any audio.
  • Never the full text of a dictation, note or meeting.
  • Never the name of the app you were writing in.
  • No advertising, no profiling, no selling of data.

Retention periods

How long, and no longer

DataPeriod
Audio and text in transitFor the duration of the request, in memory. Never stored by us. At OpenAI, 30 days at most, solely for abuse detection.
Account and planAs long as your account exists, then 1 year after it's deleted. After that, this data is erased.
Usage countersAs long as your account exists, then 1 year after it's deleted. After that, they are deleted or anonymized.
Payments and invoicesThe period required by accounting and tax obligations, even after the account is deleted.
ReferralsAs long as both accounts exist, then 1 year after the account concerned is deleted.
Shared word pairsUntil you ask for them to be deleted (only if you turned the option on).
Support messages3 years, to follow up on your request.
Content on your MacAs long as you keep it. You delete it from the app, or by uninstalling Speedy Flow.

Full details in the privacy policy.

Subprocessors

Few providers, all named

They act on our instructions, use your data only to provide their service to us, and are bound to confidentiality by contract.

ProviderRoleData involved
GroqMain transcription engineAudio in transit
OpenAIFallback transcription and Speedy featuresAudio and text in transit
SupabaseAccounts, database, server functions that relay requestsAccount, plan, usage counters, referrals
GoogleSign-in with a Google account, if you choose itEmail address, name, profile picture
Payment providersCard, PayPal or mobile money, billing, refundsPayment details, entered directly with them

We never see your card numbers, PayPal credentials or mobile money codes: we only receive the payment status, its amount and a reference. Our providers may process data outside your country, notably in the United States, with recognized safeguards (adequacy decisions, standard contractual clauses). The list is updated before any change of provider. Learn more.

This website and cookies

Your consent comes first

No advertising cookies

No ad pixels, no social media buttons that track you. The app itself uses no cookies and includes no tracking tools.

Analytics only with consent

Google Analytics 4 loads only if you click “Accept”. Declining takes one click, and Global Privacy Control or “Do Not Track” count as declining.

Bot protection without tracking

The contact form is protected by Cloudflare Turnstile, which checks that you're not a bot, without advertising cookies.

Your choice is remembered for six months. Change it anytime with the “Manage cookies” link at the bottom of every page. Read the cookie policy.

Security

The best way to protect data is not to keep it

Encrypted in transit

HTTPS/TLS connections between your Mac, our service and our providers.

Keys kept out of the app

Sign-in tokens in the macOS Keychain; our providers' keys stay server-side, never in the app.

Per-account access

The database enforces per-account access rules: each person can only access their own information.

Limited internal access

Only the people who need it can access internal systems.

No notes database

No central database holds your notes, dictations or meetings.

If an incident occurs

If a breach poses a risk to you, we notify the competent authority and, where necessary, the people affected, within the legal deadlines.

Your rights

You're in control

The same rights, wherever you live.

Delete

Your content and your account

  • Delete a dictation, a meeting or your entire history in one click, from the app.
  • Delete your account from the app, or request it by email, at any time. Your local content stays on your Mac.
  • After deletion, account data is kept for 1 year and then erased; support messages for 3 years, invoices for the period required by law.
Exercise a right

Access, correction, objection

  • Your content is already with you. For what we hold (account, plan, counters, referrals, correspondence), we send you a copy in a common format.
  • Write to us from your account's email address: we reply within 30 days at most, free of charge.
  • You can also contact the data protection authority in your country (the CNIL in France, for example).
Make a request about your personal data

Responsible disclosure

Report a security vulnerability

Think you've found a vulnerability in the app, your account or this website? Write to us: we handle every good-faith report.

How to reach us

What to include

  1. A description of the problem and what it would allow someone to do.
  2. Where it occurs: app and macOS version, or the page address.
  3. Steps to reproduce it, with screenshots if possible.
  4. An address where we can reply to you.

Send your report to [email protected] with the subject “Security”, or use the contact form. We'll get back to you as soon as possible.

Please don't

Staying on the right side

  • Access, modify or delete other people's data.
  • Disrupt the service: overloading, mass sending, abusive automated testing.
  • Go beyond what's needed to describe the problem. Our terms of use prohibit testing the security of the service without written permission.
  • Make the vulnerability public before we've had a chance to talk with you and fix it.

Dictate with peace of mind

Voice to text in all your apps, your notes on your Mac. Free to get started.