Privacy policy.

This Privacy Policy explains how Candy Studio Apps (“we”, “us”) handles personal data when you use Wisper AI for Mac, including the menu-bar app, the Wisper bar and widgets (“Wisper” or the “App”). Wisper is a voice dictation app: you speak, and it turns your speech into clean text. We wrote this policy to be specific about what leaves your device, where it goes and for how long.

Separate policies apply to Wisper on iPhone, iPad and Android — see the links at the top of this page.

1. Who we are

The controller responsible for your personal data is:

You can contact us about anything in this policy, including requests to exercise your rights, at support@wisperai.app.

2. What we collect

Wisper works without an account. You never give us your name, phone number or password. Here is what Wisper does process:

2.1 Content you create

• Voice recordings — the audio you record when you dictate with your dictation key or record a note in the app.
• Transcripts and notes — the text produced from your recordings, plus summaries, key points, flashcards, rewrites and note chat that you ask for.
• Text you choose to edit — when you use Edit with voice or Transforms, the text you selected and your spoken instruction.
• Your settings — dictionary words, snippets, voice styles, custom style descriptions, languages and translation targets.

2.2 Identifiers

• A random user ID created by the App. It is not linked to your name or email. It is stored on your device and in your private iCloud key-value storage, so that Wisper on your iPhone, iPad and Mac share the same subscription.
• Analytics device IDs — random IDs that our analytics and crash-reporting tools assign to your installation.

2.3 Usage and device data

• App events — for example that a dictation started or finished, how long it was, word and character counts, which features and styles you use, paywall views, and error codes. These events don’t contain the words you said or typed.
• Device and app information — device model, operating system version, app version, language, region, and microphone input type.
• Destination app — the name and bundle identifier of the app you dictated into with your dictation key (for example “Slack”, com.tinyspeck.slackmacgap). See section 5.2.
• Network data — your IP address is processed by our servers and service providers when the App connects to them.

2.4 Purchases

If you subscribe, Apple processes your payment. We never receive your card details. Through RevenueCat we receive your subscription status, plan, price, currency, purchase and renewal dates and store transaction IDs.

2.5 Feedback and support

• In-app feedback — when you send a feature request or tell us what to improve, we receive your message (up to 1,000 characters) and the email address if you choose to add one.
• Emails — if you write to us, we receive your email address and message. The “Contact us” email the App prepares includes technical details such as your device model, OS version and user ID so we can help you; you can remove them before sending.

3. What we don’t collect

• We don’t log your keystrokes. Wisper never asks for Input Monitoring.
• We don’t capture your screen.
• We don’t record audio when you aren’t dictating or recording.
• We don’t create voiceprints or use your voice to identify you.
• We don’t collect your contacts, photos, location, health data or browsing history.
• We don’t sell your personal data, and we don’t use what you say or write for advertising.

4. How your voice is processed

4.1 Dictation and recordings

1. You start recording. Press or double-tap your dictation key, use the Wisper bar, or start a recording in the app.
2. Audio is sent for transcription. Your audio is sent over an encrypted connection (TLS) to our servers, which pass it to a speech-to-text provider. Depending on the settings, audio is sent as a file after you finish or streamed while you speak.
3. Text is cleaned up. The raw transcript is sent to a language-model provider together with what is needed to apply your choices: your style or template, dictionary words, snippet trigger phrases, language and translation target, and the name of the app you’re dictating into, so the text can fit it.
4. The text comes back to your device, where it is inserted where your cursor is and saved in your history.

4.2 AI features

When you ask for a summary, key points, flashcards, a rewrite or a note chat answer, the text of that note (and, for chat, your recent messages in that chat) is sent to our servers and a language-model provider to produce the result. When you use Edit with voice or Transforms, the selected text (up to 5,000 characters) and your instruction are sent the same way.

4.3 What our servers keep

• Audio: not stored. It is held in memory only while it is being transcribed.
• Transcripts: the finished text is kept for up to 30 minutes so the App can collect it if the connection drops, then deleted automatically.
• Edit results: the result of an edit is kept for up to 24 hours so a retried request doesn’t run twice, then deleted automatically. The text you selected is not stored.
• AI feature requests (summaries, flashcards, rewrites, chat): not stored.
• Logs: our servers log technical details such as your user ID, request times, audio length and the AI model used — not the words you said.

4.4 Our AI providers

We currently use these providers to transcribe and process your content. Each one processes it on our behalf only to return the result:

• OpenAI — speech-to-text, text cleanup, and AI features.
• Cerebras — fast text cleanup and edits.
• Anthropic — backup for AI features if our primary model is unavailable.
• ElevenLabs, xAI and OpenRouter — alternative speech-to-text providers we may route audio to for quality or reliability.

We use these providers through their business APIs. Under those terms they do not use your audio or text to train their models. Some providers may keep request data for a limited time — typically up to 30 days — to detect abuse, and then delete it. We don’t use your recordings or text to train AI models either.

5. Device permissions

Wisper asks only for the permissions it needs. You can change them at any time in your device settings; features that depend on a permission stop working without it.

5.1 Microphone

Used to record your dictations and notes. Recording starts when you press your dictation key, double-tap it for hands-free mode, use the Wisper bar microphone, or start a recording in the app; a very short accidental tap is discarded.

5.2 Accessibility

macOS Accessibility permission lets Wisper work inside other apps. Wisper uses it to:

• Paste your text — it puts the text on the clipboard and presses ⌘V for you, then restores what was on your clipboard before (except in a few cases, such as when Accessibility is off and the text is simply left on the clipboard for you to paste).
• Listen for your dictation key — it watches only modifier keys (such as Fn or right ⌥) to detect your shortcut. While a dictation is in progress it also notices other key presses, so that pressing a key can cancel the dictation and the number keys can pick a style. Keystrokes are never recorded or sent.
• Read the text you selected — only for Edit with voice and Transforms (off until you enable them), and only when you trigger them. If the app doesn’t expose the selection, Wisper copies it with ⌘C and restores your clipboard. Password fields are skipped. The selected text (up to 5,000 characters) is sent to our servers to perform the edit.
• Check its own paste — when text is streamed in while you speak, Wisper reads the text just before your cursor on your device to confirm the draft is still there before replacing it with the final version.

Wisper never captures your screen. To position the Wisper bar it reads basic window information (such as size and the owning app), not window contents.

Destination app. When you dictate with your key, Wisper notes the name and bundle identifier of the app you’re dictating into (for example “Slack”). It is sent with your dictation so the text can suit that app, and saved with the note in your history on your Mac. It is not sent to our analytics.

5.3 Notifications, login item and widgets

If you allow notifications, Wisper may send a few local reminders (for example to try your first dictation, or to ask for a rating). Wisper is set to open at login so your dictation key is always ready; you can turn this off in Wisper’s settings or in System Settings → General → Login Items. Wisper’s widgets show your recent stats and latest note on your Mac.

6. How we use data and our legal bases

We process personal data only for the purposes below. If you are in the European Economic Area or the UK, the GDPR requires a legal basis for each:

We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects.

7. Service providers and sharing

We share personal data only with service providers that process it on our behalf under contracts requiring them to protect it and use it only to provide their service to us, and with the parties described below.

We may also disclose personal data when required by law or a valid request from a public authority; to protect the rights, safety and security of our users, us or others; or as part of a merger, acquisition or sale of assets, in which case we will tell you before your data becomes subject to a different privacy policy.

Apple handles your payments under Apple’s own privacy policy; we don’t control it.

8. International transfers

We are based in the European Union. Several of our providers are in the United States or process data there. When personal data is transferred outside the European Economic Area, we rely on the European Commission’s Standard Contractual Clauses included in our providers’ data processing terms, or on the EU–US Data Privacy Framework for certified providers, together with safeguards such as encryption in transit. You can ask us for a copy of the relevant safeguards at support@wisperai.app.

9. How long we keep data

10. Security

All data between the App, our servers and our providers is encrypted in transit with HTTPS/TLS. We don’t store your audio on our servers, and we keep transcripts there only for minutes. Access to our production systems is limited to people who need it. On your device, your notes are protected by Apple’s app sandboxing and your device passcode. No method of transmission or storage is completely secure; if a personal data breach is likely to put your rights at risk, we will notify the supervisory authority within 72 hours and inform you where the law requires it.

11. Your choices and deleting data

• Delete a note: delete it in the App. Its text and audio are removed from your device.
• Delete everything on your device: delete the Wisper app and its data. Your random user ID stays in your iCloud key-value storage so a reinstall can restore your subscription.
• Delete data held by us: email support@wisperai.app from the App’s Contact us option or include your User ID (Settings → User ID). We will delete your user record, usage counts and the analytics data linked to your user ID, except purchase records we must keep by law.
• Export your notes: copy the text of any note from the App.
• Withdraw consent: revoke the microphone, Accessibility or notification permission in your device settings. Withdrawal doesn’t affect processing that took place before it.

12. Your rights (EU and UK)

Under the GDPR you have the right to:

• access your personal data and get a copy;
• rectify inaccurate data;
• erase your data (“right to be forgotten”);
• restrict processing;
• data portability — receive the data you gave us in a structured, machine-readable format;
• object to processing based on legitimate interests, including ad measurement;
• withdraw consent at any time, without affecting earlier processing.

Because Wisper has no accounts, we identify your data by your user ID; please include it in your request (Settings → User ID). We answer within one month; for complex requests we may extend this by up to two further months and will tell you why.

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU country where you live or work. Our lead authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl.

13. US state privacy rights

If you live in California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon or another US state with a consumer privacy law, you have the right to know what personal information we collect and how we use and disclose it; to access, correct and delete it; to receive a portable copy; and not to be treated differently for exercising these rights.

• Categories we collect (sections 2 and 6): identifiers (user ID, device IDs, IP address); audio information (voice recordings); commercial information (subscription purchases); internet or other electronic activity (app usage events); and your content (transcripts, notes, selected text). We collect them from you and your device, and use them for the purposes in section 6.
• Sale and sharing. We don’t sell personal information for money. We don’t share personal information for cross-context behavioral advertising, and we don’t use it for targeted advertising.
• Sensitive information. Voice recordings are used only to provide the service you request. We don’t use them to identify you, to infer characteristics about you, or for any purpose that would require a right to limit.
• Retention is described in section 9. In the past 12 months we have not sold personal information or knowingly processed data of anyone under 16.

To make a request, email support@wisperai.app with your user ID. You may use an authorized agent; we may ask for proof of the authorization. If we decline your request, you can appeal by replying to our decision; if the appeal is denied, you can contact your state attorney general.

14. Children

Wisper is not directed at children. You must be at least 16 to use it, or the age of digital consent in your country if lower (and never under 13), unless a parent or guardian has agreed. We don’t knowingly collect personal data from children under 13. If you believe a child has given us personal data, contact us and we will delete it.

15. Changes to this policy

We will update this policy when Wisper or the law changes. The date at the top shows the latest version. If a change is significant, we will tell you in the App or through the App Store listing before it takes effect.

16. Contact

Questions, requests or complaints about privacy: