Whisper-M — Privacy Policy

This policy covers Whisper-M for macOS, published by Ludofax AB, Sweden. Whisper-M is a dictation app, which means it handles the most sensitive thing a computer can handle: what you say. This policy is therefore longer than we would like, because the honest answer is not simply “nothing ever leaves”.

The short version: by default, everything happens on your Mac and we receive nothing. There are exactly two ways data can leave your machine, both listed below, and both require you to choose them.

What we collect

Nothing. Whisper-M has no account system, no analytics, no crash reporting, no telemetry and no licence check. Ludofax receives no information about you, your recordings, your transcripts, or your use of the app — including whether you ever installed it. We do not operate a server that Whisper-M talks to, so there is no place for such data to arrive.

What the app records, and when

Whisper-M captures audio only between an explicit start action — your shortcut, mouse button, or a control in the app — and the matching finish, cancel, or the recording limit you set. There is no always-on listening, no wake word, and no background or meeting capture in this version.

The recording is written to a protected temporary file on your Mac and deleted after the dictation succeeds, fails, or is cancelled. Any temporary file left behind by a crash is cleaned up on the next launch.

The live waveform you see while recording is drawn from a throttled loudness number, not from the audio itself, and is neither stored nor logged. A separate count of how long your voice rose above a silence threshold is used to discard accidental taps before they reach any transcription step. Both are discarded when recording stops.

What is stored on your Mac

• Dictation history — the raw and final text of your dictations, kept for 30 days by default. The retention period is yours to change, and history can be turned off or cleared at any time.
• Your dictionary and voice snippets — kept until you delete them.
• Settings, modes and per-app rules — including any instructions you have rewritten.
• Downloaded speech models — kept in the app's support folder until you remove them.
• API keys, if you have configured a remote provider — stored in the macOS Keychain, never in the app's own files, and never included in an export.

All of this lives in Whisper-M's own folder in your Library, on your Mac. It is not encrypted beyond the protection macOS gives your user account and disk, so a person with access to your unlocked Mac could read your dictation history. If that matters for your situation, shorten the retention period or turn history off.

What leaves your Mac

Two things, and only if you choose them.

1. Downloading a speech model

Choosing to download a Whisper model fetches model files from Argmax's public repository on Hugging Face. This is a download only: no audio, transcript, dictionary entry, snippet or setting is uploaded, and no identifier of yours is attached. Those providers will see the network request in the ordinary way any file download is seen. Once a model is installed, transcription with it requires no network connection at all.

2. Configuring a remote provider

Whisper-M can optionally send work to an OpenAI-compatible endpoint that you configure — a model server running on this same Mac, a machine on your own network, or an internet service you have chosen. This is off unless you set it up. If you do:

• transcription requests carry your recorded audio and the model settings;
• text-cleanup requests carry the raw transcript, the mode instructions, and only the bounded context that mode has been permitted;
• the operator of that endpoint decides what is logged and how long it is kept. Their terms govern that data, not ours, and no setting inside Whisper-M can change their behaviour.

Whisper-M refuses plain, unencrypted HTTP for any endpoint that is not on your own machine. An endpoint on this Mac is not the internet, but it is still another program with its own logs and retention that we cannot vouch for.

What is deliberately never captured

Whisper-M does not take screenshots, record system audio, capture meetings, read your browser history, or read whole documents. Text fields that macOS marks as secure — the password boxes — are a hard boundary: their contents are never read as context, never stored in history, and Whisper-M will not type into them.

Transcript text, selected text, prompt contents, audio and credentials are never written to diagnostic logs. Error messages name the stage and the provider, not the content.

Clipboard

When Whisper-M cannot type into your chosen destination — most often because Accessibility permission has not been granted — it places the text on the macOS clipboard so that your dictation is not lost. Anything on the clipboard is readable by other apps on your Mac. That is how the clipboard works on every operating system, and it is the reason the fallback is a fallback.

Children

Whisper-M is a productivity tool for general audiences and is not directed at children. It collects no data from anyone, and therefore none from children.

Your rights under the GDPR

Ludofax AB would be the data controller for any personal data it held about you in connection with Whisper-M. It holds none: the app sends us nothing, and we run no service it could send anything to. There is accordingly nothing for us to give you access to, correct, export or erase, and no lawful basis to record because no processing takes place on our side.

The data on your own Mac is entirely under your control. History can be cleared inside the app, and deleting Whisper-M together with its folder in your Library removes everything it has stored. If you have written to our support address, that email sits in our mailbox like any other correspondence; ask and we will delete it.

Changes to this policy

If the app changes in a way that affects this policy, the policy will be updated here before that version is published, and the date below will change. We will not quietly widen what the app collects; a version that collected anything would be a different product and would say so plainly.

Contact

Questions about this policy, or about anything in it you think is inaccurate: info@ludofax.com.

Ludofax AB, Sweden.

Last updated 8 August 2026 · Applies to Whisper-M 0.2.2 · Ludofax AB