Privacy policy

Summary

SpeechShield doesn't collect your conversations. Contexts, session history and recordings stay on your Mac. SpeechShield servers only keep your account and signed-in Macs, billing, minutes used, and how far you've got with the app.

Stored only on your Mac

The following is encrypted on your Mac with AES-256-GCM, with the key kept in the macOS Keychain. It is never sent to SpeechShield servers.

• Interview contexts: resume, job posting, answer settings
• Session history: transcribed lines, translations, answers, notes
• Recordings: off by default, saved only for sessions you turn recording on for

Sent to AI providers

To produce answers and translations, SpeechShield sends the audio and text of the current session to an AI provider such as OpenAI or Soniox. When you make meeting notes for a Meeting record, its transcribed lines and notes, and the meeting context's counterpart, participants, your role, goal and agenda, go to the AI provider you use for answers; meeting sources are not sent. No other past sessions are sent.

When you take a screenshot (⌘K), SpeechShield sends that image to the AI provider with the next answer. Screenshots are only taken when you ask for one, and SpeechShield's own windows are left out. They are never saved to your Mac's disk or session history, and with SpeechShield-hosted AI they are not stored on SpeechShield servers either.

SpeechShield-hosted AI uses the provider's API only, and providers don't train models on API data. With your own API key or a local CLI, your agreement with that provider applies.

Stored on SpeechShield servers

Only what we need to run your account and paid plan, and what you enter yourself.

• Account: email address, sign-in method (Apple, Google, email), sign-up date
• Signed-in Macs: device name, device public key, Mac identifier, when it signed in, when it last renewed its sign-in, and when it was signed out. Used to keep you signed in and to let you sign a Mac out from the account page. The Mac identifier is a one-way hash of the Mac's hardware UUID; the UUID itself is never sent.
• Profile (what you enter on the account page): name, what you use SpeechShield for, site language, and whether and when you opted in to or out of marketing emails
• Subscription: plan, payment status, renewal date. Card details are held by our reseller Paddle and never reach SpeechShield.
• Usage: when and for how many seconds you used SpeechShield-hosted AI. Never audio or conversation content.
• App milestones: when you first opened the app and when you open it again, which main screens you viewed (names such as home, records, contexts or a settings section), how far you got in the walkthrough, whether you allowed microphone and screen recording access, signing in, when you first added an interview context, resume, job posting or meeting context, when sessions start and end (mode, what kind of AI they used, a length range, how many answers and note lines), your first answer, connecting a phone, making and copying meeting notes, looking up or saving a term (only where the explanation came from), and which button opened the plans. Only the milestone name and time, the app version and the Mac identifier are sent; never conversations, answers, or what your contexts and sources say. Milestones from before you sign in are tied to the next account that signs in on that Mac. We use them to see where people get stuck and to decide whether to send you a getting-started email, and delete them after a year. You can turn them off in the app under Settings → Privacy → "Send usage statistics".
• Website analytics: cookieless page views
• How you found us: when you first arrive from another site or a campaign link, a cookie keeps the link's campaign tags (utm values), the other site's domain, the first page you opened and when, for 30 days. If you sign up or click a download button in that time, it is stored with your account or the click. The other site's full address is never stored.
• Download button clicks: time, which button, site language, app version, browser details (User-Agent), the country and city estimated from your IP address, and how you found us. The IP address itself is not stored.
• Plans and checkout steps: when you open the pricing page, open or close the checkout or finish paying, the plan and billing period chosen, which button in the app you came from, the Paddle transaction ID, and the country estimated from your IP address. They are stored with your account when you are signed in, or else with a random visit ID the pricing page keeps in a cookie, and tied to your account if you sign in later. Your IP address, browser details and email are not stored, and the steps are deleted after a year.
• Getting-started emails: if you sign up and don't start a session, we email you within a few days to help you start, and when you have used most of the free trial we email once to ask what you think. They contain no ads. We store which of these emails we sent and when with your account, and you can stop them with the unsubscribe link in each one. They are not sent while you are on a paid plan.
• Mac install link: when you tap Get started on a device that isn't a Mac, such as a phone or a Windows PC, and sign up or sign in, we email the Mac install link to your account's address. With your account we store when it was sent, the site language, how that device found us, and when and on what kind of device the link was first opened on a Mac, and delete it after 30 days. If the browser that opens the link has no how-you-found-us cookie, it gets that device's.
• Friend invitations: your invitation code, the accounts that signed up with your link and how far along they are, and the rewards you received. The Mac identifier of the Mac an invited friend first signs in on is used to stop people from inviting themselves. People who open an invitation link see the inviter's profile name; inviters see how many friends joined, not who.
• Invitation link visits: time, invitation code, site language, device type, and the country estimated from your IP address. Opening an invitation link stores its code in a cookie for 30 days, until you sign up.
• Gift codes: the code you claimed and when, and the plan it gave and when it ends. Signing up through a gift link records the gift as how you found us.

App error reports

If the app crashes or freezes, it sends a crash report to Sentry. A report holds only where in the code the error happened, the app and macOS versions, the Mac model with its memory and language settings, and a random per-device identifier. It never includes conversations, prompts, AI answers, your screen, contexts, API keys, your IP address or location. You can turn it off in the app under Settings → Privacy, and Sentry deletes reports after at most 90 days.

"Export diagnostics" in Settings only saves a file on your Mac, which reaches SpeechShield only if you attach it to a message.

When you use "Report an issue or suggest a feature" in Settings → About, the SpeechShield team receives what you wrote, the category you picked, the app and macOS versions, and an email to reply to (your account email if you are signed in). With "Include a diagnostics summary" on, it also includes your Mac model, language, session state and permission states. Conversations and logs are never included.

Retention and deletion

Deleting your account from the account page erases your account, signed-in Macs, usage records and the app milestones tied to it immediately, and from backups within 30 days. Milestones sent before you signed in stay, no longer linked to your account, until their retention period ends. Payment records are kept for 5 years as required by law.

The free trial is given once per Mac. To keep it that way, the device public key and Mac identifier of each Mac that received the trial and when it was given are kept after you delete your account, no longer linked to it.

Data on your Mac is removed when you delete it in the app or delete the app.

Processors

We rely on these companies to run the service.

• Supabase: account, subscription and app milestone storage
• Paddle.com: payments, taxes and receipts (reseller)
• OpenAI: speech recognition, translation and answers (with SpeechShield-hosted AI)
• Soniox: speech recognition and realtime translation (with SpeechShield-hosted AI). It does not store realtime audio, transcripts or translations.
• Sentry (Functional Software, Inc.): app crash reports
• Vercel: website hosting and analytics
• Resend (Plus Five Five, Inc.): sending sign-in, Mac install link, and getting-started and feedback emails
• Slack (Slack Technologies, LLC): internal team notifications (sign-up email, subscription plan, download clicks, issue reports and suggestions sent from the app)

Contact

Send privacy requests to the contact address at the bottom of the site. We reply within 7 business days.