Trust
Effective date: .
Your voice stays on your Mac. WhisprDesk runs transcription locally by default, and the only data that ever leaves your device is what you explicitly choose to send.
What WhisprDesk does locally
WhisprDesk transcribes on your Mac, not on a remote server. Two engines run locally on your machine: Whisper for general dictation and file transcription, and NVIDIA Parakeet as an alternative engine. Both are downloaded to your Mac the first time you use them and run entirely on-device after that.
The app supports two primary workflows:
- Hotkey dictation. Press a key, speak, and the transcribed text pastes into whatever text field you are focused on.
- File transcription. Drop an audio file into the app and get a transcript back. Ten formats are supported: mp3, wav, m4a, webm, ogg, flac, aac, mp4, wma, and opus.
Local transcription supports 60+ languages. Language selection and engine selection happen on your Mac and are stored on your Mac.
What does not leave your Mac
By default, none of the following ever leaves your device:
- Audio recordings
- Transcripts
- Custom dictionary entries
- Dictation history
- Hotkey configuration
- Language preferences
- App settings
There is no WhisprDesk server that receives, stores, or processes any of this content. We do not operate a backend that sees your audio or your text.
Optional cloud transcription (opt-in, off by default)
If you prefer to use a cloud transcription provider, WhisprDesk supports bring-your-own-key for OpenAI, Groq, and Mistral. To enable this, you paste your own API key into the app. Your audio then goes directly to the provider you chose, using your own account and your own credentials.
For optional AI cleanup of transcribed text, the same bring-your- own-key model applies to OpenAI, Anthropic, and Google. Those providers receive text only, never your raw audio.
WhisprDesk does not proxy, cache, log, or inspect those requests, and there is no WhisprDesk server in between you and your chosen provider. Each provider has its own privacy terms, which govern that relationship.
A 25 MB upload size cap applies to cloud transcription only. Local transcription has no size cap.
License check
WhisprDesk performs one outbound call related to your license: a periodic check against Lemon Squeezy, our merchant of record. That request includes only:
- Your license key
- A machine fingerprint, which is your hostname plus a truncated SHA-256 hash of hostname, platform, and architecture
It never includes audio, transcripts, file contents, dictionary entries, or usage statistics. The fingerprint exists to enforce the per-license activation limit (three Macs per license).
Zero telemetry
WhisprDesk ships no analytics or telemetry. We have verified this at the code level: no PostHog, Sentry, Mixpanel, Amplitude, or Bugsnag integration is wired into the app. Crash logs are written to your local console output and are not transmitted anywhere.
The marketing website at whisprdesk.com also runs no analytics and sets no analytics or advertising cookies. Cloudflare may set a small number of functional cookies necessary to serve the site securely; those are detailed on the Cookies page.
No accounts, no email, no signup
You can install WhisprDesk, grant the permissions it asks for (microphone, accessibility for paste-back), and start dictating without creating an account. There is no in-app account, password, or profile.
License activation is a single step: paste the license key from your purchase email into the app and click activate. The app never asks for your email address or any other personal identifier beyond the key itself.
Your rights
Because WhisprDesk does not collect or store your audio, transcripts, dictionary, or usage data on any server, there is no cloud copy of your content to export, correct, or delete. Everything generated by the app lives in files on your Mac, under your control. To remove that data, delete those files or uninstall the app.
For rights that apply to the limited information we do receive when you purchase a license (your email address and license key, handled through Lemon Squeezy), see sections 7 and 14 of the Privacy Policy.
Verification
This page describes the actual behavior of WhisprDesk at the version we ship today. The Privacy Policy covers the full picture, including the rights you have under the Texas Data Privacy and Security Act, the CCPA/CPRA, the GDPR and UK GDPR, and similar US state privacy laws.
For security disclosures and our responsible disclosure policy, see /.well-known/security.txt or the parent-company policy at rbjglobal.com/legal/security.
Contact
Questions about this page or about how WhisprDesk handles your data: [email protected].
Security reports: please use [email protected]. Our responsible disclosure policy is published at rbjglobal.com/legal/security.