Your voice stays on your device.

The short version

WhisprNotes turns your voice and your meetings into text on your own Mac or iPhone. Speech recognition and AI run on your device, so your audio never leaves it.

To use WhisprNotes you need a WhisprNotes account. We keep that account, the devices you sign in on and your plan. On Free, that’s all: your notes stay on your devices, and we never see them. With Pro, the notes and meetings you sync are stored on our servers, encrypted at rest, and so is a copy of any note you share with a link.

With Pro, anonymized text you sync may be used to improve WhisprNotes. It’s on by default for new accounts, except in the EU, the EEA, the UK and Switzerland (and wherever we can’t tell where you are), where it’s off. You can turn it off anytime on your account page or in the apps. It’s text only, with personal details removed, and never your audio, voiceprints, clinical notes, notes you mark Private, or anything that stays on your devices. Details

The apps and our websites send usage events that never contain what you said or wrote, and you can turn them off. We don’t sell your data.

Who we are

WhisprNotes, Inc. runs WhisprNotes: whisprnotes.com, the WhisprNotes account site and the apps for Mac and iPhone. We decide how the data described here is used (in GDPR terms, we’re the controller). Write to hello@whisprnotes.com about anything in this policy.

What never leaves your device

Your audio. Dictation and meeting recordings are captured, transcribed and deleted on your Mac or iPhone. On every plan they are never uploaded and never synced.

The speech and AI processing. Transcription, cleanup, meeting notes, Ask and playbooks run on your device, with local speech models and Apple’s on-device model, or on the Mac a WhisprNotes model you download or a local model server (such as Ollama or LM Studio) on that same Mac. No speech or AI request goes to our servers or to anyone else’s.

Clinical notes. Visits, their transcripts and clinical notes stay on the clinician’s Mac and never sync, even with Pro, so they’re never used to improve WhisprNotes either.

Private notes, to other apps. Mark a note Private from its ⋯ menu and it’s kept out of AI apps (the MCP server), Shortcuts, Siri, App Intents and Spotlight on iPhone, and a share link asks you before it’s made. With Pro a private note still syncs to your own devices, but it’s never used to improve WhisprNotes.

Everything, on Free. Free works on each device you sign in on, and that device keeps its notes, meetings and history to itself. Nothing syncs, and nothing you make is stored on our servers.

What we store

Your account: your email address, the name you give, how you sign in, when you joined, your two privacy choices (below), and whether you signed up from the EU, the EEA, the UK or Switzerland, or elsewhere (only that, never your country or location). You sign in with a one-time code we email you. An account exists once you enter your first code; codes asked for and never used are deleted after a day.

Your devices: for each device you sign in on, its name and model, its system and app version, and when it last checked in. That’s how you see your devices on your account page, and how Pro knows which (up to 10) to keep in sync.

Your plan: Free or Pro, monthly or yearly, and whether your subscription is active. When card payments open, your card will be handled by our payment provider (Stripe); we won’t see or store card numbers.

With Pro, your synced data: the text of the notes, folders, meeting notes (without audio), dictionary, snippets and settings you sync, so each of your devices has the same notes and you have a backup if one is lost. Dictation history doesn’t sync.

With Pro, the notes you share: when you make a share link, a copy of that note’s title and text is stored so anyone with the link can read it, along with how many times it was opened. Turn the link off and the copy is deleted at once. Shared pages are never indexed by search engines.

A log of account events: sign-ups, devices added or removed, plan changes and privacy choices, stored by account number with no content, for security and accounting.

If you join the beta list (on whisprnotes.com, or by making an account): your email address (see The beta list).

Improving WhisprNotes

What may be used. Only text that reaches our servers because you sync it with Pro: the notes and meeting notes you sync. Before any of it is used, it’s separated from your account and anonymized, with personal details such as names, email addresses, phone numbers and addresses removed. We use it to make WhisprNotes better (for example, cleanup, meeting notes and Ask). We never sell it, and we never use it for advertising.

What never is. Anything that stays on your devices (everything on Free), audio and voiceprints, clinical notes, notes you mark Private, dictation history, and the shared copies behind your share links (stored only to show them).

The default. On for accounts made from outside the EU, the EEA, the UK and Switzerland. Off for accounts made from the EU, the EEA, the UK or Switzerland, and wherever we can’t tell, so it’s on there only if you turn it on. Off for accounts made before October 10, 2026, and never on by default on a Team plan. Turning on Clinical notes in the Mac app turns it off for your account.

How to turn it off (or on). Settings › Privacy › Help improve WhisprNotes, on your account page, in the Mac app or in the iPhone app. One switch covers your whole account. From then on, your synced text isn’t used. Text already used was anonymized first, so it can’t be traced back to you or picked out later.

Where the law asks for a reason: outside the EU, the EEA, the UK and Switzerland we rely on our legitimate interest in improving the product, with the opt-out above; there, we rely on your consent, which you give by turning the switch on and withdraw by turning it off.

How synced data is protected

Synced data is encrypted in transit and encrypted at rest on our servers, with keys we manage. It is not end-to-end encrypted: we hold the keys so we can restore your notes when you lose a device or can’t sign in. That also means we can access it. We do so to run the service, when you ask us for help, when the law requires it, and, unless you turn it off, to improve WhisprNotes as described above, only after the text is anonymized.

Cancel Pro and your notes stay on your devices; sync stops and your share links pause. You can delete your account and everything we store about you from your account page, or write to us and we’ll do it.

Usage analytics

The apps send usage events: for example that you dictated or recorded a meeting, how long it was, which feature you used, your app version and your plan. Our servers also record a few account events (a sign-up, a device added, a plan change) and send them on. These are tied to your account, so we can count active users and find what breaks.

They are content-free: never your audio, your words, transcripts, notes, meeting titles, attendees or anything you typed.

Turn them off with Share usage analytics, in Settings › Privacy in either app or on your account page; then neither the apps nor our servers send any for your account. If your browser sends Global Privacy Control or Do Not Track when you sign up, they start off.

Dictation

While you hold your dictation key on the Mac, or tap the mic on the iPhone or its keyboard, WhisprNotes records from your microphone and transcribes the audio on your device (the Parakeet speech model on the Neural Engine, or Apple’s on-device speech model). Transcribing dictation makes no network calls.

Dictation audio is discarded once it’s transcribed, unless you turn on “Keep audio for 14 days” in Settings. Then each recording is kept on your device for 14 days so you can play it back, and deleted after that.

Cleanup, modes and Command mode use Apple’s on-device model (Apple Intelligence), or on the Mac a WhisprNotes model you download or a local model server on that same Mac. That text stays on your device too.

Meetings

When you record a meeting on the Mac, WhisprNotes captures your microphone and the call’s audio. Nothing joins the call. On the iPhone it records the room through the microphone. Either way the audio is transcribed on your device, speakers are told apart on your device, and the recording is deleted once your note is written.

With Pro, the finished meeting note and its transcript sync to your other devices as text. The recording never does.

For clinical notes you can choose to keep a visit’s recording until you sign the note off, so you can check the note against it. It is deleted at sign-off, or after a fixed number of days if the note is never signed.

Recording laws differ by place. Tell the people you meet with that you’re taking notes, and ask for consent where it’s required.

On iPhone

The WhisprNotes keyboard. iOS asks you to give the keyboard Full Access. It needs it for one thing: to hand dictation to the WhisprNotes app (a keyboard can’t use the microphone itself) and get the text back, through storage the two share on your iPhone. The keyboard makes no network requests, never records or sends what you type, and keeps no log of your keystrokes. Without Full Access it still types; only dictation needs it.

The Share extension. When you share an audio file to WhisprNotes, it copies that file into the app to transcribe it on your iPhone. It reads nothing else.

Widgets, the Live Activity and Control Center. They show what the app gives them on your iPhone (today’s meetings, recent note titles, a recording’s title and timer) and start a recording or a note. A Live Activity can appear on your Lock Screen while you record.

Notifications. If you allow them, the iPhone app reminds you a minute before a meeting (with Record) and tells you when your note is ready. They’re scheduled on your iPhone; nothing about them is sent to us.

Spotlight and Siri. If you leave “Show notes in Spotlight” on, your notes (except private ones) are indexed on your iPhone so you can search them there. Siri and Shortcuts can start a recording or find a note that isn’t private. Neither sends your notes to us.

Your calendar

If you allow it, WhisprNotes reads the calendars already on your Mac or iPhone (through the system) to show your upcoming meetings, to give you a meeting reminder before each one on the Mac and the iPhone, and to add the title and attendees to your notes. It never signs in to your calendar provider and never changes your events.

What is stored on your device

Your dictation history, notes, meeting notes, Ask threads, playbooks, dictionary and snippets are stored on the device, in a local database (on the Mac, in your user Library). With Pro, the text you sync is also stored on our servers, as above.

You choose how long dictation history is kept: Forever, 30 days, 7 days, or Don’t save. Deleting a note or history item removes it from search indexes too. Deleting the app and its data removes everything on that device; to delete what’s synced, delete your account (or the notes, which syncs their deletion).

Exports (Markdown, plain text, PDF, or the Dictionary as CSV) are written only where you save them.

Other apps on your Mac

Playbooks only act after you approve them: they can create a Mail draft, add action items to Reminders, copy text or run a shortcut you name. Nothing is sent without you.

The built-in MCP server lets AI tools you install (such as Claude Code or Cursor) read notes and meetings in the folders you allow, and never a private or clinical note. It is read-only and off for every folder until you allow it. What those tools do with what they read is governed by their own policies.

What the apps send over the network

Four things: signing in and checking your plan, with our servers; downloading their speech models (and, on the Mac, the WhisprNotes AI models if you choose them) once from Hugging Face, where they are hosted, and on iPhone Apple’s speech languages from Apple, which sends nothing about you beyond what any web request does (such as your IP address); the content-free usage events above, unless you turn them off; and, with Pro, syncing your notes between your devices and the notes you choose to share.

Nothing else. Once you’re signed in and the models are downloaded, dictation, meetings, Ask and playbooks all work offline, and Pro catches up when you’re back online.

The beta list

WhisprNotes, Inc. runs the beta list. If you leave your email on whisprnotes.com to hear when the beta opens, we keep that address, which form you used (Mac or iPhone), and when, in our database at Supabase. Once accounts open, making a free account puts its address on the list too (for both betas), since there’s nothing to install until they open. We use the list only to email you about the WhisprNotes beta and its launch, through our email provider, and we don’t share it with anyone else. Leaving the list doesn’t touch your account, if you have one.

The list rests on your consent, which you give by submitting the form. To leave it, email hello@whisprnotes.com or use the unsubscribe link in any email we send, and we’ll delete your address. Otherwise we delete it 18 months after you last signed up. To stop the list being misused, the form also keeps, for two days, a scrambled (hashed) form of the address and of your IP address, never the IP address itself.

This website

whisprnotes.com sets no cookies and uses no third-party scripts, and its fonts are served from this site. It counts visits and clicks with content-free analytics: each page sends a few events (that the page was viewed, which button was clicked, that the beta form was used) to PostHog through this site’s own address, with a random number that lasts only as long as the page is open. Nothing is stored in your browser, no profile is built, and no email address or anything you type is ever sent. PostHog is set to discard IP addresses. If your browser sends Global Privacy Control or Do Not Track, no events are sent at all.

Like any website, our hosting provider keeps standard server logs (such as IP address and the page requested) for a few days, for security and reliability. We don’t use them to identify or track you.

The WhisprNotes account site sets one cookie, and only once you sign in, to keep you signed in. Its name starts with “sb-” and ends with “-auth-token” (a long one is split into numbered parts ending “.0”, “.1”). It holds your session and nothing else, is read only by that site, expires at most 400 days after it was last renewed (it renews as you use the site), and is deleted when you sign out or delete your account. The account site sends the same kind of content-free events about its own pages, honors Global Privacy Control and Do Not Track the same way, and sends none at all while you’re signed in to an account with Share usage analytics off. Shared notes on it set no cookies.

Who helps us run it

Supabase hosts our database, sign-in and storage (in the United States), including the beta list. Vercel hosts our websites, whisprnotes.com included. PostHog receives the usage events, including this website’s cookieless analytics. Resend delivers our emails (sign-in codes and the beta list). Cloudflare runs our domain’s DNS. Hugging Face hosts the speech and AI models the apps download. When card payments open, Stripe will process payments. Each acts only on our instructions, under a data processing agreement, for the purpose described here.

We don’t sell your personal information, and we don’t share it for cross-context behavioral advertising.

Where your data goes

Our servers are in the United States. If you use WhisprNotes from elsewhere, including the EU, the EEA, the UK and Switzerland, the account data and synced text described here are transferred to the United States. We rely on our providers’ Standard Contractual Clauses (and the UK addendum) for those transfers.

How long we keep it

Your account, devices, plan and privacy choices: until you delete your account. With Pro, your synced data: until you delete it or your account; if Pro lapses, the synced copy stays so you can pick up where you left off, until you delete it or your account. A share link’s copy: until you turn the link off or delete your account.

When you delete your account, everything above is removed from our live database at once and from backups within 30 days. The log of account events keeps the account number and events (never content or your email) for up to 7 years, for security and accounting.

Codes asked for and never used: a day. The beta list: as above. Website server logs: a few days.

Your rights

You can see, export, correct and delete what we hold about you. Most of it is on your account page: your devices, plan, shared links and privacy choices, and Delete account. The apps export your notes as Markdown, text or PDF. For anything else (a copy of your account data, a correction, or a question), write to us and we’ll answer within 30 days.

Wherever you live, you can object to and opt out of the uses above (the two switches), and withdraw consent you gave. In the EU, the EEA, the UK and Switzerland you can also ask us to restrict processing, and complain to your data protection authority. In California and other US states with privacy laws, you have the right to know, delete and correct, and to opt out of the sale or sharing of personal information (we do neither); we treat Global Privacy Control as that opt-out, and we won’t treat you differently for using any of these rights.

Children

WhisprNotes isn’t for children under 13 (under 16 in the EU and UK), and we don’t knowingly collect their data. If you think a child has made an account, write to us and we’ll delete it.

Permissions

On the Mac. Microphone: to hear you, only while you dictate or record. Accessibility: to paste text where your cursor is, and to spot password fields so it never types into them. System audio recording: to hear the other side of a call. Calendars: only if you use meeting reminders. Reminders: only if a playbook adds action items there. You can revoke any of them in System Settings.

On the iPhone. Microphone: only while you dictate or record. Calendars: to show today’s meetings on Home, only if you allow it. Notifications: meeting reminders and “Your note is ready”, only if you allow them. Full Access for the keyboard: as above. You can change each in the Settings app.

Changes and contact

If this policy changes, we’ll update this page and the date below, and for a change that matters (such as a new use of your data) we’ll tell you in the apps or by email before it takes effect.

Questions? Email hello@whisprnotes.com. See also our Terms of Service.