The two-minute privacy policy

• Your voice never leaves your device. Recording, transcription (NVIDIA Parakeet via the Apple Neural Engine), and cleanup (Apple's on-device models) all run locally on your Mac or iPhone.
• Your transcripts never leave your device. Dictation history and scratchpad notes are stored locally and are never uploaded — signed in or not.
• The apps have no analytics, no trackers, no ads. The product ships no third-party analytics, no ad SDKs, and no tracking pixels — nothing about your dictation is ever measured. (This marketing website uses privacy-friendly analytics that set cookies only after you consent — see “Website analytics & cookies” below.)
• An account is optional and exists for exactly one feature: syncing your settings between your own devices.

The following never leaves your Mac or iPhone, whether or not you create an account:

• Microphone audio and any audio files you transcribe
• Dictation transcripts and your transcript history
• Scratchpad notes
• Meeting recordings and their transcripts
• Anything you paste into the Listen player

There is no code path in murmr that uploads any of the above. The apps work fully offline.

If you create an account to enable cross-device sync, we store, in our database (hosted by Supabase):

• Your email address (your sign-in identity)
• Your settings payload: custom dictionary entries, snippets, tone and per-app preferences, and app settings

That settings payload exists so your devices match. It is scoped to your account with row-level security — only your authenticated session can read or write your row. It does not include audio, transcripts, or scratchpad notes.

• Supabase hosts the database for optional settings sync.
• Cloudflare Pages serves this website and keeps standard, short-lived server request logs (IP address, user agent) like any web host.
• Model downloads: on first use the apps download speech models from a model CDN (e.g. Hugging Face). That download is an ordinary file fetch — it carries no audio, no transcripts, and no account data; like any download, the CDN sees your IP address.
• Google Analyticsmeasures aggregate visits to this marketing website only — never inside the product, and only after you consent. See “Website analytics & cookies” below.

The product itself uses no analytics processors of any kind.

This marketing website (murmrvoice.com) uses Google Analytics 4 to understand aggregate traffic — page views, rough location by country, and referrer. It runs in Google's Consent Mode with analytics storage denied by default, so no analytics cookies are set until you choose to accept.

• We detect your country at the edge (via Cloudflare). In the EU, UK, EEA, and Switzerland we ask first: analytics stays off until you tap Accept.
• Elsewhere, analytics is on by default and you can Decline at any time — your choice is remembered in your browser.
• We never collect your name, we use IP anonymization, and we run no advertising or cross-site tracking. The apps stay analytics-free regardless of this setting.

To change your choice later, clear this site's data in your browser and reload, or email support@murmrvoice.com. Google describes its handling of analytics data in its privacy policy.

Everything on your device is yours to delete in the apps or by removing them. For server-side data (your account email and settings payload), email support@murmrvoice.comfrom the relevant address and we'll delete it promptly. An in-app “delete account” button is planned before public launch.

murmr is not directed at children under 13, and we do not knowingly collect personal information from them.

If this policy changes, the new version is posted here with an updated effective date. Material changes — anything that would move data off your device that didn't before — will be called out in the app and the changelog, not buried.

Questions, deletion requests, or anything else: support@murmrvoice.com.