← WhisprFree

WhisprFree Privacy Policy

Effective date: 2026-07-29 · Applies to: the WhisprFree desktop app, the WhisprFree

Android preview, and whisprfree.com.

WhisprFree is built so that there is almost nothing to collect. This policy describes what

that means precisely, including the few places where data does leave your device.


The short version

We never receive, store, or transmit your recordings — in any mode, on any setting.

identifiers, no cookies for tracking on our website.

models — ours or anyone else's.

the text, never the audio. You choose whether to use it, and whose service handles it.


1. What stays on your device, always

the on-device speech engine, and discarded. Never written to disk by us, never uploaded.

are encrypted on your machine using Windows DPAPI and are never transmitted to us.

troubleshoot, the text of your dictations. It stays on your computer, rotates as it grows,

and is never sent anywhere. You can delete it at any time.

2. AI cleanup — the one thing that leaves your device

AI cleanup is optional and off by default. When it is on, the text of a dictation (never

the audio) is sent to a language model to fix punctuation, capitalization, and filler words.

What happens next depends entirely on which option you choose:

(a) Your own API key — nothing goes to us, ever

If you enter your own key (Claude, OpenAI, Groq, OpenRouter, or any compatible endpoint), your

text goes directly from your computer to that provider. It does not pass through our

servers. **We receive nothing at all — no text, no identifier, no word count, no record that a

dictation happened.** Your relationship is with that provider, under their privacy policy and

your account with them.

(b) On-device cleanup — nothing leaves at all

If you choose the local cleanup model, everything runs on your computer. Nothing is

transmitted anywhere.

(c) "Use WhisprFree's key" — the only case where we are involved

This is the no-setup default for people who don't want to manage a key. When you use it:

What is sent to us:

WhisprFree. It is not derived from and not linked to your name, email, hardware, IP-based

identity, or any account. Its only purpose is to keep one installation's free usage separate

from another's.

What we do with it:

as a fallback if Groq is unavailable), which returns the cleaned text. Those providers

process it under their own terms.

gone. We cannot read your dictations, produce them later, or analyse them, because we never

keep them.

today, and an estimate of what the service cost us. These exist solely to keep the free tier

fair and to protect the service from abuse. Counters expire automatically (daily counters

after about 2 days, monthly counters after about 40 days).

How to avoid this entirely: use your own API key, use on-device cleanup, or turn cleanup

off. Any of those means we receive nothing whatsoever.

3. Our website

whisprfree.com is a static page. It sets no tracking cookies and runs no analytics or

advertising scripts. It fetches the current version number from our download host, which — like

any web server — sees the standard request information (such as your IP address) needed to

serve a file. We do not use that information to build a profile and do not combine it with

anything else.

4. Children

WhisprFree is not directed at children. We do not knowingly collect personal information from

anyone under 13. Because we require no account and collect no identifying information, we have

no practical way to determine a user's age; if you believe a child has provided us personal

information, contact us and we will delete it.

5. Your rights

Depending on where you live (for example the EU/UK under GDPR, or California under CCPA/CPRA),

you may have rights to access, correct, delete, or port your personal data, and to object to

its processing.

In practice, we hold almost nothing to act on: no account, no name, no email, no dictation

content — only expiring counters tied to a random install ID. If you want those cleared, you

can delete WhisprFree's local settings (which discards the install ID and permanently severs

any link to prior counters), or contact us and we will delete any counters associated with an

install ID you provide. Everything else that matters is already on your own machine, under

your control.

We do not sell personal information, and we do not "share" it for cross-context behavioural

advertising as those terms are defined under California law.

6. Security

API keys you enter are encrypted at rest on your device (Windows DPAPI). Traffic to our

cleanup service and to AI providers uses HTTPS. No system is perfectly secure, but the

strongest protection here is architectural: the sensitive material — your voice — never leaves

your computer in the first place.

7. Changes

If this policy changes materially, we will update the effective date above and note it in the

app's release notes. Because we have no accounts, we cannot email you; the current version

always lives at whisprfree.com.

8. Contact

Questions or requests: privacy@whisprfree.com