We don’t collect your data. Here is the detail.

ClearDictate is made by Megakad XD Ltd, registered in England and Wales under company number 13675166. Our registered office is 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.

For this website and for any email you send us, we are the controller under the UK GDPR and, where it applies, the EU GDPR. For what you dictate in the app, we are neither controller nor processor: it stays on your Mac and never reaches us.

Contact for anything in this notice: [email protected].

• History (your recent dictations, with the app name and time): in the app’s Application Support folder.
• Settings and personal dictionary: in the app’s preferences.
• Your OpenAI key, if you add one: in the macOS Keychain.
• The speech model: in Application Support. It contains no personal data.

None of this is sent to us or to any cloud service, and the app contains no analytics, telemetry or crash-reporting code.

You can delete History entries in the app, or delete everything by removing the app and its data. Your organisation may set how long History is kept, including not keeping it at all.

Model download: on first run, the app downloads its speech model (about 470 MB) from Hugging Face, or from a mirror your organisation runs. As with any download, the host can see your IP address and the files requested. No audio, text or identifiers are sent. Hugging Face handles that request under its own privacy policy.

In on-device mode, the app makes no other connections.

If you turn on the Cloud engine or Smart cleanup and add your own OpenAI API key, the audio or text of each dictation goes directly from your Mac to OpenAI. That happens under your agreement with OpenAI, and OpenAI’s privacy policy and data-use terms apply. It doesn’t pass through us, and we can’t see it.

If you use these features for work, your organisation is responsible for its relationship with OpenAI. These features are off by default, and your IT team can force them off on managed Macs.

cleardictate.com sets no cookies, runs no analytics and loads nothing from third parties. Fonts are served from this site.

The site and downloads are delivered by Cloudflare, our processor. Cloudflare processes standard request data, such as IP address, browser details and the page requested, to deliver and secure the site, and keeps it only briefly for those purposes. Our lawful basis is legitimate interests: running a secure website.

If you email support@, security@ or [email protected], we process your name, email address and whatever you choose to tell us, so we can reply and resolve your request.

• Lawful basis: legitimate interests, namely supporting our users and keeping ClearDictate secure.
• Our providers: Cloudflare (Email Routing) forwards these addresses to our mailbox, which Apple (iCloud Mail) hosts.
• How long we keep it: up to 2 years after your request is closed, then we delete it. We keep security reports for as long as we need to track the issue.

Please don’t send sensitive personal data, or the content of dictations, unless we need it to help you.

We don’t sell or rent personal data, and we don’t share it for advertising. We share it only with the providers named above, or where the law requires us to.

Cloudflare and Apple may process data outside the UK. Where they do, the transfer is protected by the safeguards the law requires, such as UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, or EU Standard Contractual Clauses.

When an organisation deploys ClearDictate, it manages its own Macs and the data on them. We don’t receive any dictation data, so we don’t act as its processor and no data processing agreement is needed for on-device use.

The Compliance page has more for procurement and data-protection teams.

You have the right to:

• access the personal data we hold about you;
• correct it or have it erased;
• restrict or object to its use;
• move it to another service (portability).

In practice the only personal data we hold is in emails you have sent us. Write to [email protected] and we’ll respond within one month.

We make no decisions about you by automated means.

You can complain to the UK Information Commissioner’s Office (ico.org.uk), or, in the EU, to your local data-protection authority. We’d appreciate the chance to resolve it first.