Privacy Policy

What stays on your device

Everything that matters. Recorded audio is processed in memory on your machine and discarded; it is never saved. Transcripts are inserted into whatever application you are typing in, or copied to your clipboard if no text field is selected, and kept as text in your history on your machine. Neither is transmitted to us, and neither is written to any server we operate.

We do not collect telemetry about what you dictate: not the words, not their length, not how often you speak.

What we collect

• If you request a download or access. Your email address, name, optional note about what you plan to dictate, and whether you agreed to marketing email.
• If you create an account. Your email address, and what Google or Apple share if you sign in with them, used to sign you in, unlock your plan and identify your seat.
• If you download the app. The platform, the time, the email address you gave, your IP address and your browser's user agent, so we can tell how many people got the app.
• If you pay us. Stripe processes the payment and holds your card details. We never see or store a card number. We keep the subscription status Stripe reports back.
• If your organisation enables managed cleanup (part of Tulpa Teams, which is not available yet). Your organisation's identifier, your user identifier, the model used, the number of tokens processed and the time. Never the text.

The one case where text leaves your machine

Tulpa has an optional cleanup pass that rewrites your dictation. It is off unless you switch it on. With Apple Intelligence it runs on your Mac and sends nothing. With a cloud model it sends text only, never audio.

On an individual seat, no text leaves your Mac unless you connect a cloud model with your own API key, confirm a warning that the provider handles the text under its own terms, and turn cleanup on with it. The text then goes directly from your machine to that provider under their terms, and we never receive it.

Tulpa Teams is not available yet. Once it is, if an administrator enables managed cleanup for an organisation, the transcript text is relayed through our server. Every signed-in seat also receives a copy of the organisation's API key, stored in its macOS Keychain. The relayed text is held in memory, forwarded to the model the administrator chose, and discarded. It is not written to disk or to a database. We record who ran it, the model, the token counts and the time, but never the text. The model provider's own terms then apply to the text they receive.

Under the local-only posture this cannot be switched on at all.

Who else is involved

• Supabase. Hosts our database, authentication and file storage.
• Stripe. Processes payments.
• Resend. Sends transactional and marketing email.
• Hugging Face. Hosts the speech models. When you download a model, your IP address reaches Hugging Face, as it would with any file download. No audio or text is involved.
• Apple. If you choose Apple Speech, macOS downloads each language from Apple the first time you use it. Apple Intelligence cleanup runs on your Mac.
• Google and Apple sign-in. If you sign in with them, they confirm who you are.
• A cloud model provider you connect. If you connect one for cleanup, it receives the text sent to it, under its own terms.
• Hostinger and Cloudflare. Serve this website.

We do not sell your personal information, and we do not share it for advertising.

Fonts and analytics

This site loads no third-party analytics and no third-party fonts. The typeface is served from our own domain specifically so that reading this page does not hand your IP address to a font CDN.

How long we keep things

Access requests and account records are kept while your account is open, and for up to a year afterwards so we can answer billing questions. Cleanup usage metadata is kept for a year. Marketing contacts are removed when you unsubscribe.

Your choices

Write to hello@tulpatalk.com and we will give you a copy of what we hold, correct it, or delete it. If you are in the EEA, the UK, or California you have rights to access, correction, deletion, portability, and to object to processing; we honour those requests wherever you live rather than only where we must.

Every marketing email has an unsubscribe link. Service email about your account is not marketing and does not carry one.

Children

Tulpa is not for use by anyone under 16, and we do not knowingly collect their information.

Changes

If we change what we collect or where it goes, we will update this page and change the date at the top. Material changes will be emailed to account holders rather than quietly published.