Privacy Policy

Last updated: 7 March 2026

Overview

Wispert is a macOS voice dictation application. Your privacy is important, and this policy explains what data Wispert collects, how it's used, and how it's protected.

Data Collection

Wispert does NOT collect, store, or transmit any personal data to the developer.

The app operates entirely on your device with the exceptions noted below.

Audio Data

  • Wispert captures microphone audio solely for speech-to-text transcription.
  • Audio is processed in real-time and is not stored on disk.
  • When using cloud transcription backends (OpenAI or Groq), audio is transmitted directly over encrypted (HTTPS) connections.
  • When using local Whisper or Parakeet backends, all audio processing occurs entirely on your Mac.

API Keys

  • API keys for OpenAI or Groq are stored in the macOS Keychain (encrypted at rest, protected by login password).
  • Keys are only sent to their respective API provider to authenticate requests.
  • You can delete stored keys at any time from Settings > Transcription.

Transcription Text

  • Held temporarily in memory for display and clipboard insertion.
  • History is stored locally, encrypted at rest using AES-256-GCM.
  • Automatically deleted after 30 days (configurable).
  • Uses secure erasure when deleting records.
  • Wispert does not log, upload, or share your transcriptions.

Third-Party Services

When using cloud transcription, audio is sent to:

Analytics & Tracking

Wispert does NOT include any analytics, telemetry, crash reporting, or advertising frameworks.

No usage data is collected.

Local Storage

Wispert stores the following data locally on your Mac:

  • Preferences (backend, model, profile, hotkey settings)
  • API keys (in macOS Keychain, encrypted)
  • Transcription history (encrypted AES-256-GCM)
  • Audit log (encrypted log of security-relevant events, without transcription content)
  • Whisper models (downloaded model files)

Security Measures

Encryption at Rest

AES-256-GCM

Certificate Pinning

For API connections

Biometric Auth

Touch ID, Apple Watch, or password

Session Timeout

Configurable inactivity period

Secure Deletion

Random data overwrite

Console Logs

No PHI in logs

Permissions

  • Microphone — Required to capture audio for transcription.
  • Accessibility — Required to insert transcribed text and register global hotkeys.

Children's Privacy

Wispert is not directed at children under 13 and does not knowingly collect information from children.

Contact

Questions about this privacy policy? Contact us at support@ioi.net.au.