Privacy policy

1. Who is responsible

Whisperall is responsible for the data described here. For anything about privacy, write to hello@whisperall.com.

2. What data we handle

• Your account: your email and your password, of which we only keep a one-way encrypted version. If you add them, your name and profile photo.
• Your notebook: notes, tasks, flows, folders, tags, assistant conversations, attached files and images, and your preferences, such as your personal dictionary and shortcuts. If you save other people’s contact details in your flows, we store them for you too.
• What you capture: the audio of your dictations, meetings, files and links, and the documents you import.
• Your history: the text of your dictations, translations and read-aloud sessions, and the start of your transcriptions, so you can come back to them.
• Usage and billing: the credits you spend and on which feature, your plan, your payment status and the country of your billing address. We never see or store your card details. We do not work out your country from your IP.
• Technical logs: our servers log requests to run the service and find failures. They can include your IP address, account and job identifiers, and the names of the files and links you send.
• Usage statistics, when they are on: the operating system, the app version, whether you use desktop or Android, and counts of the features you use, such as notes created or tasks completed, never their content. To count each install once, the app creates a random identifier when it is installed that is not derived from your machine. We do not collect identifiers of your device, such as its name, its network address or its hardware numbers.

3. Your audio, what is kept and where

• Dictation: your computer keeps a copy of the audio while you speak, so nothing is lost if something fails. It is then sent to the cloud to be transcribed. Our servers do not keep that audio, only the resulting text.
• Meetings: the audio streams to the cloud to be transcribed and is not kept on our servers. Your computer keeps a copy.
• Files and links you transcribe: we keep the audio on our servers, next to the transcript, so you can play it back from your note. It is kept while your account exists. If you want us to delete it sooner, write to us.
• Copies on your computer: by default the app keeps your recordings for one week. You can change this in Settings, Voice, Keep local recordings.
• Android: recordings stay in the app’s private storage until you delete them.

4. What we use it for

• To provide the service: transcription, dictation, translation, reading aloud, recognizing text in scanned documents, the assistant and autocomplete.
• To sync your notebook across your devices.
• To track your credits, charge your plan and prevent abuse.
• To support you and send the emails your account needs, such as verifying your email or resetting your password.
• To measure our campaigns and improve the website (section 9).
• To analyze in aggregate how the service is used, improve it and decide prices and plans, with your usage statistics and your billing country. This is a secondary purpose: you can turn usage statistics off and the service works the same.
• We do not sell your data and we do not use your content to train AI models.

5. What is sent to the cloud and when

• Dictation, meetings, files and links: the audio, to transcribe it.
• Translation and reading aloud: the text you translate or listen to.
• Assistant: your message and the context it needs, such as the open note or the notes it searches in your notebook.
• Autocomplete, on by default: after a few seconds without typing it sends the text around the cursor. You can turn it off in Settings, Writing and AI.
• Automatic tags: when you link a note to a task or a card, its title and the start of its text are sent.
• Documents you import or that get scanned: the file, to extract its text.
• Improving, correcting or translating selected text with AI, and grammar checking if you turn it on: that text.
• Screen translator: in one of its modes the image of the area you pick is sent to recognize its text. In the other it is read on your computer.
• Live captions, on Pro and PowerUser if you turn them on: your computer’s audio while they run.
• Clipboard history, on by default, stays on your computer and is not synced.
• On Android, the floating dictation button uses the accessibility service to know where you type, insert the text and read what you select. Only the audio you dictate and the text you choose to listen to leave your phone.

6. Who we share data with

Only with those we need to provide the service, and only what is needed:

• Infrastructure: hosting for our servers, database, website hosting and update delivery.
• AI and voice: speech and speaker recognition, language models, translation, synthetic voices and text recognition in images. They process your content to return the result and handle it under their own terms.
• Email: the service that sends your account emails.
• Payments: a payment processor, or an authorized reseller that charges, invoices and handles taxes on our behalf.
• Website advertising and analytics: Meta and our hosting provider’s analytics (section 9).
• AI tools you connect with your own account: your content goes straight from your device to that provider, under your terms with them.
• Connection tokens (MCP) you create: the external tool can read and change your content within the permissions you grant and spend your credits. You can revoke them at any time from your dashboard.
• Authorities, only when the law requires it.

7. Where it is stored

Our servers are in the United States. Some providers process data in other countries. By using Whisperall, your data is transferred to the United States and to the countries where those providers operate. If you ask, we will send you the current list of providers.

8. How long we keep it

• Your account, notebook, history and the audio of your files and links are kept while your account exists.
• What you delete goes to the Trash and stays there until you delete it permanently.
• Usage records, without your content, are kept to calculate credits and billing.
• The daily detail of your account usage statistics is kept for 25 months. Aggregate totals, which identify no one, are kept without limit.
• If you ask us to close your account, we delete your account and content within 30 days, except what the law requires us to keep, such as billing records.

9. The website, cookies and analytics

• Your theme and session are kept in your browser’s storage.
• If you arrive through an invitation link, we set two cookies for 30 days to credit the invitation.
• We measure visits in aggregate with our hosting provider’s analytics.
• On the home page we may use the Meta pixel to measure our campaigns. It records your visit and whether you start a download or send yourself the link, and stores a cookie on this site called _fbp that lasts up to 90 days. Meta may connect that information to your Meta account under its own policy.
• Measuring campaigns is a secondary purpose: the service works the same if you say no. To say no, block cookies for whisperall.com in your browser, write to us, or limit ads in your Meta settings.

10. Your rights

You can ask us to access, correct or delete your data, or object to a specific use. Write to hello@whisperall.com from your account email and we will reply within 20 business days. If you are not satisfied with the answer, you can go to the data protection authority in your country.

Some things you can do yourself: you change your name in your dashboard, and the desktop app creates a full copy of your notebook in Settings, Backup & restore. To close your account, write to us.

Usage statistics are on by default. To turn them off, go to Settings, General, Share usage statistics in the desktop app, and to Account, Privacy on Android. While they are off, that device sends nothing.

11. Security

Connections are encrypted. We only keep one-way encrypted versions of your password, tokens and keys. Your content is not end-to-end encrypted: it is stored on our servers so it can be searched and synced. Backups you create on your computer can be password protected.

12. Children

Whisperall is not meant for children under 16. If you are under 18, use it with the permission of a parent or guardian.

13. Changes

If we change this policy in a meaningful way, we will tell you by email or inside the app before the change applies.

14. Contact

Write to hello@whisperall.com.