Privacy Policy

This Privacy Policy explains how the WhisperDirect app (hereinafter "the App") handles user data.

1. Data We Collect

The App may collect the following information:

• Audio files recorded or uploaded by the user
• Text generated through transcription and summarization
• OpenAI API keys (if provided by the user)
• Basic usage statistics (e.g. number of transcriptions)

2. How We Use Your Data

The collected data may be used for:

• Performing speech-to-text transcription
• Generating summaries or transcripts
• Improving the functionality and stability of the App

3. Third-Party Services

The App may use third-party services such as OpenAI API or cloud storage (e.g. iCloud, Google Drive) to provide its features. These services are subject to their own privacy policies.

• OpenAI APIs (e.g., Whisper, optional LLM for summaries)
• Apple iCloud / iCloud Drive
• Google Drive (Google Drive API)

Limited Use: We do not use third-party user data for advertising, nor do we sell such data. Transfers occur only when you choose to use those features.

Google Drive Integration (OAuth & Scope)

If you connect Google Drive, the App uses Google OAuth 2.0 and requests the minimal scope https://www.googleapis.com/auth/drive.file (access limited to files the App creates or opens with your action). OAuth tokens are stored securely on your device (e.g., Keychain) and are not sent to our servers. You can disconnect anytime in the App or from your Google Account settings (“Security > Third-party access”). The App uploads only the items you choose (e.g., transcript TXT/PDF, optional original audio) and does not read or index your existing Drive content beyond this scope.

4. User Consent

Audio and text data will only be transmitted to servers or external services when explicitly requested by the user (e.g. uploading for transcription).

5. Data Retention

Uploaded or generated data is stored locally on the user's device unless the user opts in to upload data to a remote server or cloud service.

Data Access & Deletion

You may delete transcripts/audio within the App at any time. You may also revoke Google Drive access in the App or from your Google Account settings. For additional requests (e.g., data export or account-related inquiries), contact whisperdirect@gmail.com.

6. Security

We take reasonable steps to protect user data. However, we cannot guarantee complete security of information transmitted over the internet.

API keys and OAuth tokens provided by the user are stored locally on the device (e.g., Keychain) and are not stored on our servers.

7. Changes to This Policy

This Privacy Policy may be updated from time to time. We recommend reviewing it periodically.

8. Contact

If you have any questions about this Privacy Policy, please contact us at: whisperdirect@gmail.com