Privacy Policy

We don't collect your content. Pipit processes all audio transcription locally on your device using open-source models. Your voice recordings and transcriptions never leave your Mac.

The app stores your transcription history locally on your device for your convenience. This data is stored in a local database and is never transmitted to any external servers.

We send basic anonymous app health signals to TelemetryDeck for reliability monitoring. No transcripts, audio, or personal data is included.

The only exception: If you explicitly enable "AI Enhancement," transcribed text (not audio) is sent to the AI service you choose to improve quality: OpenRouter with your own API key, OpenAI through your ChatGPT sign-in, or a server you set up yourself. This is disabled by default, completely optional, and under your control.

All speech-to-text processing happens entirely on your Mac using on-device models. No internet connection required for transcription, no data sent to cloud services (unless you enable optional AI enhancement), and no external API calls for core transcription.

• Microphone (Required): Records your voice for transcription.
• Accessibility (Required): Global hotkey monitoring and automatic text insertion. Does not read other apps' content or spy on activity.
• Screen Recording (Optional): Captures system audio only (no video or screenshots).

You can revoke any permission in System Settings → Privacy & Security.

Voice Recordings: Audio is held in memory only during processing, then immediately deleted after transcription completes. Audio never leaves your Mac and is not saved to disk unless you explicitly choose to save it.

Transcription History: Stored locally on your Mac. Includes transcribed text, timestamps, and duration. Automatic pruning keeps the most recent entries.

Settings: Your preferences and settings are stored locally on your Mac.

API Keys and Sign-ins (If Provided): If you enable AI enhancement, the OpenRouter or custom-server API key you provide, or your Sign in with ChatGPT tokens, are stored securely in macOS Keychain. They're never transmitted to us. Your ChatGPT account email is shown in the app blurred until you click it, so it stays hidden on a screen share.

Personal Dictionary (Optional): If you choose to sign in, your personal dictionary is securely stored on our servers to sync across devices. Sign-in is completely optional and not required to use the app.

You can delete individual entries or clear all data through the app's settings at any time.

This is completely optional and disabled by default. If you enable AI enhancement, you choose where the text goes:

• OpenRouter: you provide your own OpenRouter API key, and OpenRouter charges you according to their pricing
• ChatGPT: you sign in with your ChatGPT account, and requests go to OpenAI and count toward your ChatGPT plan's usage, which you can manage in ChatGPT's settings. Signing out in Pipit asks OpenAI to revoke its access.
• Your own server: requests go to the URL you enter, such as a model running on your Mac. We have no involvement with that server.

After local transcription completes, the transcribed text (not audio) is sent to the service you chose, which improves grammar, removes filler words, and sends the result back to your Mac.

What's sent: Transcribed text, optional context (clipboard content, window title) if you enable "Context Capture," and your API key or ChatGPT sign-in token for authentication.

What's NOT sent: Audio recordings (never transmitted), your settings, information about other transcriptions, or anything we can see.

OpenRouter and OpenAI have their own privacy policies, at openrouter.ai/privacy and openai.com/policies/privacy-policy. We have no control over or access to their systems. You can turn AI enhancement off, remove a key, or sign out of ChatGPT anytime in the app's Enhance settings.

Pipit does not use advertising or marketing trackers. For reliability, we use TelemetryDeck for anonymous app health signals and Sentry for crash reporting. Both are completely anonymous—no transcripts, audio, personal data, or device identifiers are ever shared.

Website analytics: This website uses PostHog, Google Analytics, Vercel Analytics, and Vercel Speed Insights to understand visits, referrals, download-button engagement, and site performance. These services may process standard web-request and device information, page URLs, referrers, and interactions. Website analytics never includes your Pipit audio or transcription content.

Optional support payments: Stripe processes one-time and monthly support payments on its hosted checkout and customer portal. Stripe collects your email address and payment information. Pipit can access contact, billing, and transaction records in Stripe to manage support; this website does not receive or store full card numbers. A signed, short-lived checkout cookie lets the website verify your payment confirmation. Your Pipit audio and transcripts are not sent to Stripe. See Stripe's privacy policy for how Stripe handles payment data.

Model Downloads: The app downloads open-source models for offline transcription. Your IP address is visible during download (standard for any web request), but no personal data is shared.

To prevent unlimited storage growth, Pipit automatically prunes old transcription entries, keeping the most recent ones.

You can delete individual entries or clear all data through the app's settings at any time.