Privacy

The app

With default settings, Superflow transcribes your speech on your own computer. The audio is not sent anywhere. The app has no account and sends no telemetry. The only thing it asks of this website is the daily version file described below.

You can choose to use a cloud speech engine, or a cleanup language model that runs elsewhere. If you do, the audio (for a cloud engine) or the transcript text (for cleanup) is sent to the provider you picked, and their terms apply. For the learned-words feature, when cleanup is on, only the word pairs being checked are sent to that cleanup model. Nothing is sent to any provider while those options are off. API keys you enter are stored in Windows Credential Manager on your PC.

This website

The website never receives your audio or your dictated text. Once a day the app downloads one small file from this website, the number of the latest version and a line of text, so it can tell you when a new version is out. That request carries nothing about you or your PC; like any web request, it shows your IP address to the server, which may keep it in the ordinary access log below. The app sends nothing else to the website.

If you create an account, the site stores your email address, a salted hash of your password (never the password itself), the time you registered, and your login sessions. It uses the email for mail about your account: confirming your address, password-reset links you ask for, and an occasional note about your account or a new version of Superflow. To stop the update notes, write to [email protected] with the word "stop"; confirmation and reset mail still arrive, because the account needs them. Deleting your account from the account page removes this data.

Like any web server, the server software that delivers these pages may keep ordinary access logs (your IP address, the page asked for and the time).

Buying a key

You do not need an account to buy. The key service receives the email address the key is sent to. With PayPal that is the address on your PayPal account, and PayPal handles the payment: we never see your card or PayPal login. With UPI you give us your email, the 12-digit UTR and an order code from the QR note, and the seller's bank credit alert (amount and transaction reference) is read to match your payment. The key service keeps a record of issued keys by email so it can resend a key and handle refunds, for as long as needed for that and for the seller's accounts. The audio and text you dictate are never part of this.

Cookies

Two cookies, both needed for the site to work and neither used for tracking: one keeps you logged in, one protects the forms from forgery. There are no advertising or analytics cookies and no analytics scripts. The only outside content is on the buy page: when PayPal is switched on, that page loads PayPal's checkout script, which PayPal sets its own cookies for, under PayPal's privacy statement. No other page loads fonts, scripts or images from other sites.

Sharing

Account and purchase data is not sold. It is shared only with the services needed to do what you asked: PayPal for a PayPal payment, and Acumbamail, the mail service that sends our emails.

Seller and contact

Khush Technologies, Samarpan, Vadodara, India - 390012. Privacy questions: [email protected].

Draft. This page has not been reviewed yet. The owner and their accountant must check it before it goes live.