Privacy

Your words are yours.

Last updated October 12, 2026 (Freshflo 0.9.8)

Setup milestones (Mac and Windows, only with "Help improve Freshflo" on)

• Each step is sent once per install: installed, finished setup, first dictation, tenth dictation, and whether you used Freshflo again after 1, 7 and 30 days, with the time since installing, the app version, the operating system and the engine in use. It's tied to a random install ID, not to you, and never includes words or app names.

Freshflo for Windows

• The same promises as on Mac: no account; history, dictionary and settings stay on your PC; API keys and licence keys are kept in Windows Credential Manager.
• Offline engine: with "On this PC (offline)", speech is recognised on your PC and never sent anywhere. The one-time model download comes from the official whisper.cpp repository on Hugging Face.
• Crash reports (only with "Help improve Freshflo" on): where the app crashed and its version. No user data.
• Update checks download freshflo.vercel.app/updates-windows.json a few times a day; updates are signed and verified before installing.

Freshflo for Chrome (tester preview)

• Speech is recognised by your browser's built-in speech service (Google's servers in Chrome, Microsoft's in Edge), the same as the browser's own voice typing. The clean-up runs in your browser. The extension keeps your last 50 dictations in your browser only.

The Freshflo app for Mac

• No account, and nothing shared unless you choose. By default Freshflo sends no usage data, crash reports or analytics.
• "Help improve Freshflo" (off unless you turn it on). Once a day the app sends yesterday's totals: how many dictations, how many words, how many failed, the typical time to text, which engine was used, your streak, plus the app version, macOS version, Mac model and your Freshflo settings (engine, languages, key). It never includes your words, the apps you dictated into, or anything you typed. It's linked to a random ID made on your Mac, not to you. If the app crashes, Apple's crash report (a list of code locations) is sent too. Turn it off any time in Settings → General.
• Feedback you send. Send Feedback… sends your message, your email only if you add it, and, if you leave "Include app details" on, the same app facts as above plus recent timings. Never your dictations.
• Stored on your Mac: your history, personal dictionary, snippets, settings and meeting notes, in your user Library folder. API keys are kept in your macOS Keychain.
• Diagnostics stay local. A log in ~/Library/Logs/Freshflo records timings and errors so you can troubleshoot. It never contains your words.
• The built-in engine uses Apple's speech recognition. On macOS 26 it always runs on your Mac. On macOS 14 and 15 it runs on your Mac when your Mac supports your language offline; otherwise Apple's servers transcribe it under Apple's privacy terms, and History marks it as not on-device.
• Update checks. A few times a day Freshflo downloads a small file (freshflo.vercel.app/updates.json) to see if a new version exists. The request includes the app's version number and nothing about you or your dictations.
• Cloud engines. If you choose Groq, OpenAI or your own server, Freshflo sends the trimmed audio and text of each dictation directly from your Mac to that provider, using your API key. Their privacy terms apply. Freshflo runs no server in between. Each History entry shows whether it stayed on your Mac or went to the cloud.
• Screen context comes only from the text field you're typing in, through macOS Accessibility. Freshflo never takes screenshots and skips password fields.
• Meeting notes keep the recording on your Mac until your notes are written, then delete it unless you turn on "keep audio".
• Calendar, Reminders and Mail are only used when you ask for an action, and only after you confirm it.

This website

• No cookies and no ad trackers.
• Visit counts. We use Vercel Web Analytics to count page views, where visitors come from, and their country, device type and browser. It sets no cookies and stores no IP address: a visit is recognised by a hash of the request that changes every day, so it can't follow you across days or to other sites.
• Hosting. The site runs on Vercel, which keeps standard server logs (such as IP address and browser type) to operate and secure the service.
• Fonts load from Google Fonts, so your browser contacts Google to fetch them.
• The help page's "Still stuck?" form sends your message, your email only if you add it, your browser's name and version, and what you searched for on the page. It's stored like app feedback (below).
• "Send to my Mac" uses your phone's own share sheet or clipboard. Nothing is sent to us.
• The "Try it" demo. Text you type is cleaned up in your browser and never sent to us. If you use voice, your browser's own speech service transcribes it: Google for Chrome and Edge, Apple for Safari. Freshflo never receives that audio.

Where shared data goes

Feedback, opt-in usage counts and crash reports are stored in the same private Vercel Blob store in Mumbai as the waitlist, readable only by the Freshflo team. We use them to fix bugs and decide what to build. We don't sell or share them. Usage counts are kept for up to 13 months.

The waitlist

When you ask to be notified about Freshflo for Windows, iPhone or Android, we store:

It's stored in a private Vercel Blob store in Mumbai, India. We don't sell it, share it or use it for newsletters. We delete a platform's list after we've sent its launch email.

Remove yourself

Enter the email you signed up with. We'll delete it from every waitlist straight away.

Your rights

Under India's Digital Personal Data Protection Act and similar laws such as the GDPR, you can ask to see, correct or delete your data. The only personal data we hold is the waitlist entry above, and the form removes it immediately. A dedicated contact address for other privacy requests will be listed here before Freshflo 1.0.

Changes

If this policy changes, we'll update the date at the top of this page.