Privacy Policy
This policy explains what data Infinity Dictate collects, how we process it, and the choices you have. We believe in transparency and keeping things simple.
Last updated: February 2026
1. Data We Collect
Account Information
Your email address, collected during sign-up. This is used for authentication, account recovery, and essential service communications.
Audio Recordings
All transcription happens entirely on your Mac using on-device AI (WhisperKit). Your audio never leaves your device. For Pro AI features, only transcribed text (never audio) is sent to our servers for refinement, processed immediately, and discarded.
Transcripts
Your transcriptions are stored locally on your device only, in ~/Library/Application Support/InfinityDictate/. We do not have access to your transcripts unless you explicitly share them.
Usage Metrics
We collect aggregate usage data including request counts, audio duration, and token usage. This information is used solely for billing accuracy and rate limiting. It does not include the content of your dictation.
Device Information
We collect your device name, macOS version, and app version for device management and to help diagnose issues when you contact support.
Payment Information
Payment processing is handled entirely by Stripe. We never see or store your full credit card number. We only receive a confirmation of payment status and the last four digits of your card for your reference.
2. How Your Data Is Processed
Speech-to-Text
All transcription happens entirely on your device using on-device AI (WhisperKit). Audio is processed locally and never transmitted over the network. No audio data ever leaves your Mac.
AI Text Refinement
Transcripts may be sent to AI language models for grammar correction, formatting improvement, and text refinement. All AI processing happens through our secure proxy servers — your data is never sent directly from your device to third-party AI providers.
Automatic PII Redaction
Before any text is sent to AI models for refinement, personally identifiable information -- including credit card numbers, Social Security numbers, phone numbers, and email addresses -- is automatically redacted on a best-effort basis. While this process catches common PII patterns, it may not identify all sensitive information. You should avoid dictating highly sensitive data such as passwords or financial account numbers.
3. Third-Party Processors
We work with a limited number of trusted third-party services to deliver Infinity Dictate. Each processor only receives the minimum data necessary for their specific function.
| Category | Purpose |
|---|---|
| Cloud Infrastructure Provider | Authentication, database, and serverless functions |
| AI Language Model Providers | Text refinement, grammar correction, and formatting (Pro/Enterprise only) |
| Payment Processor | Subscription billing and payment handling |
4. Data Retention
Audio
Not transmitted or retained. All transcription happens entirely on your Mac using on-device AI. Audio never leaves your device.
Transcripts
Stored locally on your device only. You control retention through the app's history settings.
Usage Logs
Retained on our servers for billing accuracy and abuse prevention. Logs do not contain transcript content.
Account Data
Retained until you delete your account. Upon deletion, all server-side data is permanently removed.
5. Your Rights
You have full control over your data. Here is what you can do at any time:
Access
View all your data through the app. Your transcripts are stored locally, and your usage history is available in your account settings.
Export
Download all your data as JSON via the Export Data feature in the app. This includes your transcripts, settings, dictionary entries, and usage history.
Deletion
Permanently delete your account and all server-side data at any time. Local data on your device can be removed by uninstalling the app or clearing it from within the app settings.
Portability
Export your data in machine-readable JSON format, making it easy to migrate to another service or keep for your own records.
6. Children's Privacy
Infinity Dictate is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected data from a child under 13, we will take immediate steps to delete that information from our servers. If you believe a child under 13 has provided us with personal data, please contact us at support@infinitydictate.com.
7. Security
We take the security of your data seriously and employ multiple layers of protection:
- TLS Encryption: All data transmitted between your device, our servers, and third-party providers is encrypted using Transport Layer Security (TLS).
- Rate Limiting: Our API enforces strict rate limits to prevent abuse and protect service availability for all users.
- Abuse Detection: Automated systems monitor for unusual patterns and suspicious activity to protect your account and our infrastructure.
- PII Redaction: Sensitive information is automatically stripped from text before it reaches third-party AI providers.
- Secure Proxy Architecture: All third-party API calls are routed through our authenticated proxy servers, ensuring your credentials and data are never exposed client-side.
8. Regulatory Compliance
GDPR (European Union)
If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate personal data.
- Right to Erasure: Request deletion of your personal data.
- Right to Data Portability: Receive your data in a machine-readable format.
- Right to Object: Object to processing of your personal data for certain purposes.
Our legal basis for processing personal data is contractual necessity (to provide the service you signed up for) and legitimate interest (to improve our product and prevent abuse). We do not transfer personal data outside the EEA without adequate safeguards.
CCPA (California)
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:
- Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected.
- Right to Delete: Request deletion of your personal information.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
We do not sell personal information to third parties. To exercise any of these rights, contact us at support@infinitydictate.com.
Data Processing Agreements
Enterprise customers who require a Data Processing Agreement (DPA) for compliance purposes can request one by contacting sales@infinitydictate.com.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you via email at the address associated with your account. We encourage you to review this page periodically. The "Last updated" date at the top of this policy indicates when the most recent revisions were made.
10. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
We aim to respond to all privacy-related inquiries within 2 business days.