Privacy Policy
At Spit, your privacy is fundamental to how we build the product. This policy explains what data we collect, how we use it, and your rights as a user.
1. What We Collect
Spit collects minimal data to operate the service:
- Voice audio: When you use dictation, your audio is sent through our secure proxy (hosted on Cloudflare) to an AI transcription service (Groq Whisper or OpenAI Whisper) to convert speech to text. Audio is not stored after transcription is complete.
- Text content for reading: When you use text-to-speech, the selected text is sent through our proxy to generate audio. The text is not stored beyond the time needed to produce the audio response.
- Usage metrics: We record per-user monthly usage counters (seconds of dictation transcribed, characters of text processed for reading) to operate the service and detect abuse. These counters are associated with your device identifier and, if you have an active subscription, with your Apple App Store account.
- Device and app telemetry: We collect anonymous technical information (macOS version, device model, app version, locale) to improve compatibility and performance. This data cannot be used to identify you personally.
- Subscription status: If you subscribe via the Apple App Store, we receive and store a transaction identifier and expiry date from Apple to verify your subscription. We do not receive or store your payment details — these are handled entirely by Apple.
- Crash reports: If the app crashes, an anonymised report including the type of failure and recent log lines is sent to our servers to help us fix bugs. No personal content (voice, text) is included in crash reports.
2. What We Do Not Collect
- We do not record, store, or transmit your voice audio beyond what is needed for real-time transcription.
- We do not read, store, or transmit the content of your screen or clipboard.
- We do not track which applications you use Spit with.
- We do not build user profiles for advertising or sell your data to third parties.
- We do not store your payment details — all billing is managed by Apple.
3. Third-Party Services
- Groq / OpenAI Whisper API: Used for speech-to-text transcription. Audio is processed under Groq's Privacy Policy and OpenAI's Privacy Policy. Neither provider uses API input data to train models by default.
- OpenAI TTS API: Used to generate text-to-speech audio. Text is processed under OpenAI's Privacy Policy.
- Cloudflare Workers: Our backend proxy runs on Cloudflare's infrastructure. Audio and text transit Cloudflare's network but are not stored. See Cloudflare's Privacy Policy.
- Apple App Store: Subscriptions are managed entirely by Apple. Apple's privacy practices govern any data collected during the purchase and billing process. See Apple's Privacy Policy.
4. Data Storage and Security
Your preferences and settings are stored locally on your device using macOS standard storage mechanisms. Usage counters and subscription status are stored on our backend servers (hosted on Cloudflare's infrastructure in the European Union) over encrypted HTTPS connections.
We apply industry-standard security practices to protect data in transit and at rest. No user audio or transcribed text is persisted on our servers.
5. Data Retention
Usage counters are retained for a maximum of 13 months to support service operations and abuse prevention, after which they are deleted. Crash reports are retained for 90 days. Anonymous device telemetry is retained for 12 months.
6. Your Rights (GDPR)
If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation:
- Right to access the personal data we hold about you
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to data portability
- Right to object to processing
- Right to restrict processing
To exercise any of these rights, contact us at privacy@getspit.app. We will respond within 30 days.
7. Children's Privacy
Spit is not directed at children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
8. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify users of significant changes by posting a notice on our website and updating the date at the top of this page. Continued use of Spit after changes constitutes acceptance of the updated policy.
9. Contact
Questions about this policy? Email us at privacy@getspit.app.