What the app stores, and what it never sends.

Everything happens on your Mac, so there's nothing for us to see. Here's exactly what the app stores and the only times it goes online.

What stays on your Mac

• Your dictations. The words, when, and which app they went to. Encrypted on disk with AES-GCM; the key lives in the app’s own protected folder.
• Your meetings. Transcripts, the notes you typed, summaries, decisions and actions. Encrypted the same way. The recording itself is kept in the app’s protected folder for 7 days, so a meeting can be transcribed again if the notes came out wrong, then deleted; Settings › Meetings can shorten that to “delete after transcribing” or keep it until the meeting is deleted. It never leaves the Mac.
• Your questions. Conversations in Ask, and their answers, encrypted the same way.
• Backups, if you turn them on. Settings › Your data › Backup writes the whole library as one file, encrypted with a passphrase you choose, into a folder you choose, after each meeting and once a day. If that folder is in iCloud Drive or Dropbox, the file goes wherever that folder goes; the app itself never uploads it. Time Machine already includes the library.

Delete any of it from inside the app, or everything at once from Settings › Your data. You can also have dictation history deleted after a day, a week or a month, and meeting transcripts after 30 or 90 days, with the notes kept. A dictation that fails is kept, encrypted, for five minutes so you can try it again, then deleted. Deleting means deleting; there is no copy anywhere else.

What runs on your Mac

• Speech to text is NVIDIA’s Parakeet model for English (on the Neural Engine) and whisper.cpp for 98 other languages and short replies, both running on the device.
• Notes and answers come from Qwen3.5-4B, an open model running on the device through llama.cpp, with Apple’s on-device model as a further step on macOS 26. No third-party AI service is involved.

The network, in full

• Once, during setup: the models download from Hugging Face, the public host for open models (huggingface.co and its file servers). That's the English dictation model (Parakeet, about 460 MB) and the speech model (whisper small, about 490 MB). If you turn on meeting notes, also the notes model (Qwen3.5-4B, about 2.7 GB) and the speaker model (about 25 MB). On a Mac with 8 GB of memory, a 1.3 GB quick model comes too. Each model is checked by size and checksum before it's used, except the speaker model, which is only checked to be all there.
• Once a day: the app asks this website whether a newer version exists. That request carries the app’s version number and nothing else. This website passes it on to github.com, where the updates are kept, and updates download from there. Setup's “Keep it up to date” switch is on by default, so updates download and install on their own. Turn it off during setup and you'll be asked first; Settings › General › Updates stops the daily check.

That is every request the app makes. It has no analytics inside it, no crash reporter, no identifiers.

What this website counts

This website counts two things. Each click on Download records one anonymous event with the site you came from, then sends you to the file on GitHub. Each daily update check records one anonymous event with the app's version number, then goes on to GitHub. Neither carries anything about which Mac or whose. GitHub also keeps its own public download counts for the release files.

Page views on this site are counted by Vercel Web Analytics, which uses no cookies and doesn't identify visitors.

After you download, the site offers an optional mailing list for new features and tips. Until Buttondown, the service that will send those emails, is set up, each address you give is kept as a private file with Vercel, which hosts this site, and moved to Buttondown then. It's used for nothing else, and every email will have a one-click unsubscribe. If you skip it, nothing about you is kept.

Permissions, and why each is asked for

• Microphone — to hear you.
• Accessibility — to type the words where your cursor is in other apps. It's also used to read a little of what's on screen as spelling hints: the text just before your cursor, names in the window and in email addresses, and a terminal's recent text when you're talking to an AI coding tool like Claude Code. That's read on the Mac, used for that one dictation, then forgotten. Password managers and banking apps are never read.
• Screen Recording — macOS files “computer audio” under this name. It is how the other side of a call is heard. No screen is ever recorded.
• Calendar — optional; names meetings and fills in attendees.
• Contacts — optional, offered at the end of setup. Names are used as spelling hints and never leave the Mac.
• Reminders — optional; asked for the first time you add a meeting's action item to Reminders, and used only for the ones you choose.
• Meeting app window — only while a meeting records: the names of who is speaking in Zoom, Meet or Teams, read through macOS Accessibility, so the transcript names people. Off in Settings › Meetings.
• Input Monitoring — only if you choose a single key such as Fn as your shortcut. It lets the app notice that key while you are in other apps.

AI tools (MCP), if you turn them on

Since 1.9, Settings › Your data can let an AI tool you choose read your meetings over MCP — Claude Desktop, Claude Code, Cursor, or a model running on your own Mac. It is off by default. When it is on, the tool can list and read finished meetings, transcripts and dictations from the last 90 days, read-only; Recently deleted meetings and any you mark “Never share” are never returned, and masked numbers stay masked. This is the one way your words can leave the Mac: when a connected tool reads a meeting, that text goes to that tool and on to its provider, if it has one. Every read is listed in the app with the tool’s name, and any tool can be blocked. Connect a local model and nothing leaves at all.

If you report a problem

“Report a Problem” opens the feedback form on this site in your browser, with the app and macOS versions filled in. It also shows you a diagnostics report you can attach. The report lists app events, counts, and your macOS and app versions. It never contains what you said or typed. You choose whether to attach it, and nothing is sent unless you press Send yourself.

What you send through the feedback form is private: only we read it, and it is never posted anywhere. An email address is optional and used only to reply to you.

Contact

Questions: support@mythral.dev. Security issues: security@mythral.dev. Organizations: see the security review pack.