Privacy Policy

Last updated: 22 September 2026

The short version

Typist Cloud sends voice and text to processing providers to produce your writing. We also store account, subscription, usage and supported synced content. Provider retention depends on their terms and configuration.

What is processed

• Audio — dictation audio is sent over TLS through our speech proxy to the configured speech provider. Temporary audio buffers are used to complete the request.
• Dictated text — the transcript is sent to our AI provider (Groq) for the writing pass you chose, and the result is returned to your device. Provider handling depends on their service terms and account configuration. Local recovery content may remain on your device.
• Screenshots — only when you explicitly ask for on-screen help (e.g. “solve this”), a screenshot is sent to the AI model to answer that request. Screenshots may contain content visible on your display.

What we store

• Account — email address and authentication tokens (managed by Supabase Auth).
• Subscription state — plan, status, renewal dates, and your Dodo Payments customer id. We never see or store card/UPI details; those live only with Dodo Payments (merchant of record).
• Your content, at your request — memories you ask Typist to save, your custom dictionary, custom voice commands, writing-style samples, and supported preferences. Availability and direction of sync depend on your app version. You can manage local content in the app and supported cloud records from the privacy & data page.
• Usage counters — monthly totals (audio seconds, AI request count) used to enforce plan quotas. Counters are numbers, not content.
• Product statistics — metadata-only events (e.g. “a dictation completed, 42 words, mode: natural”) that power your personal dashboard. The event schema is intended for counts and timing rather than dictated content.

Third-party processors

• Sarvam — speech-to-text transcription.
• Groq — AI writing and screen-help requests.
• Dodo Payments — checkout, billing, and invoices (merchant of record). Their own privacy policy applies to payment data.
• Supabase — database, authentication, and edge functions hosting.

Your controls

• View and delete memories, dictionary entries, and commands in the app.
• Export supported cloud records or erase synced content and activity from the privacy & data page.
• Cancel your subscription anytime from the billing page — see the refund policy.
• To delete your account entirely, email rpavun57@gmail.com.

Data security

Service requests use TLS. Database row-level security scopes ordinary account access; authorized administrative services also access records. Cloud content deletion retains account, subscription, quota, billing and audit records and does not cancel your subscription. Desktop credentials use operating-system encryption when available; otherwise the app uses a session-only sign-in.

Changes

If this policy changes materially, we will note it on this page with a new “last updated” date. Questions: rpavun57@gmail.com.