Transcribr Flow is built on one premise: your audio belongs to you. The macOS app captures, transcribes, cleans, and dictates entirely on your device. We do not run any servers that receive your audio, transcripts, or dictation history.

Data controller

The data controller for any personal data described in this policy is DevX Group LLC, a California limited liability company based in San Diego, California, USA. You can reach us at support@devxgroup.io.

Audio and transcripts

Audio capture happens locally on your Mac. Transcription runs on-device through Apple Silicon and WhisperKit. Cleanup runs through a small language model the app downloads once at first launch and stores on your Mac. Nothing from your microphone or your transcripts is sent to us. Ever.

What we do collect

Email address, if you join the waitlist or buy a direct license. We use it to deliver your license key, send refund confirmations, and notify you of security or compliance updates that require your attention.
Order metadata from Lemon Squeezy when you buy a direct license: order ID, license ID, currency, and amount. We keep this so we can re-issue your license if you lose the email. We do not store card numbers or payment credentials. Lemon Squeezy is the merchant of record and handles payment processing.
Anonymous web analytics on this site: page views, referrer source, and approximate country. This uses no cookies, no fingerprinting, and no third-party tracking scripts.

What we don't collect

Audio. Ever.
Transcripts. Ever.
Dictation history.
Files you drop on the app.
Your custom dictionary entries.
IP addresses linked to individual users.
Device identifiers beyond what's in your license key activation.

Cookies and tracking

This website does not use cookies for tracking or advertising. The anonymous analytics described above are session-level aggregates with no persistent identifiers. No third-party ad networks, remarketing pixels, or social media tracking scripts are loaded on this site.

Data retention

Order data (email, order ID, license ID, amount): kept for 7 years to meet tax and accounting obligations, then deleted.
Waitlist emails: kept until you unsubscribe or ask us to delete them, whichever comes first.
Support emails: kept for 3 years after the last message in the thread, then deleted.
No audio, transcript, or dictation data is ever stored on our servers. There is nothing to retain.

Your rights (GDPR and CCPA)

Regardless of where you live, you can contact us to:

Access the personal data we hold about you.
Correct inaccurate data.
Delete your data ("right to be forgotten").
Export your data in a portable format.
Object to how we process your data.
Opt out of any future marketing emails.

To exercise any of these rights, email support@devxgroup.io. We respond within 7 calendar days.

If you are in the European Economic Area, you also have the right to lodge a complaint with your local data protection authority. If you are in California, you have rights under the California Consumer Privacy Act (CCPA) including the right to know what personal information we collect, the right to delete it, and the right to opt out of any sale of your information. We do not sell personal information.

Data breach notification

If we discover a breach that compromises your personal data, we will notify affected users by email within 72 hours of becoming aware of it, or as soon as practically possible. The notification will describe what happened, what data was involved, what we're doing about it, and what you can do to protect yourself.

Third-party services

We use the following third-party services to operate:

Lemon Squeezy: payment processing and license key management for direct purchases.
Resend: transactional email delivery (license keys, confirmations).
Vercel: website hosting.

Each of these services has its own privacy policy. We choose services that we believe handle data responsibly, but we are not responsible for their practices.

Children

Transcribr Flow is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has submitted personal data to us, contact us and we'll delete it promptly.

Changes to this policy

If we make material changes to this policy, we'll notify waitlist members and existing customers by email before the changes take effect. The "Updated" date at the top of this page always reflects when the policy last changed.

Contact

Questions or requests: support@devxgroup.io. We respond within 7 days.

What we do and don't collect