§ Privacy
Privacy posture
Dictation and meeting capture run locally on Apple Silicon. Hosted providers (OpenAI, Anthropic, OpenAI-compatible) are opt-in, BYOK, and credentialed in Keychain. No telemetry. No bot joins meetings. You control retention.
Who this is for
Lawyers, therapists, clinicians, journalists, security-conscious individuals, anyone who needs to know exactly which bytes leave the Mac. Also anyone replacing a tool that uses a third-party processor by default.
What stays local
Dictation audio + STT
Whisper (via WhisperKit) and Parakeet (via FluidAudio) on Apple Silicon. Audio never leaves your Mac in the default config.
Meeting audio + transcription
Captured on-device. Local STT by default.
Calendar reads
EventKit, local-only. Events never leave your Mac.
Speaker diarization
On-device. The diarization model runs locally after meetings end.
What is opt-in
Hosted STT / polish / analysis
OpenAI, Anthropic, or OpenAI-compatible endpoints. BYOK in Keychain. Off by default.
Window screenshot context
Per-app-class toggle. Single frame per Enhanced run. Off by default.
Recap email automation
Draft-only by default. Provider send is opt-in. Credentials in Keychain.
Correction inference
Review-first. Dettivo never silently changes risky terms.
Macros (especially shell)
Deny by default. Explicit allowlist required.
Retention is yours
Per-item delete on every transcript and meeting. Audio retention is a toggle. Auto-delete by age (configurable retention window). Hard "Delete All History" and "Delete All Meetings" buttons exist; they do exactly what they say.
Just launched
Just launched on your Mac.
One-time license, three active Macs, lifetime updates. $45 once, forever yours.