Your privacy, plainly.

No vague reassurances — here's exactly what happens to your data, and when.

The short version

On the free plan, listening, recognizing your speech, and cleaning up the text all happen entirely on your own computer — Mac or PC — and nothing about your voice or your words is sent anywhere. Plus and Pro add two things that cannot run locally — an AI cleanup pass, and cloud transcription — so on those plans some of your words, and on Pro your audio, do leave your machine. What follows says exactly what leaves, where it goes, and what happens to it.

Three things are true on every plan, paid ones included: Tiune never stores your audio, your words never train an AI model, and no one at Tiune reads your words. Signing in with Google or Apple is required to use Tiune, but it's only for your account identity — it never touches your dictation.

What always stays on your computer

  • Your voice, from the moment you speak to the moment it becomes text. Tiune holds audio in memory and never writes it to disk as a sound file — there is no recording of you on your computer, at any point, on any plan. (Pro streams that audio to a transcription service; what happens to it there is set out below.)
  • Speech recognition itself, using Tiune's on-device engines — on every plan except Pro's cloud transcription, which is described below and is a choice you make in Settings.
  • Cleanup and transformations — punctuation, formatting, and removing filler words. The AI rewriting pass that Plus and Pro add is the exception, and it is described below.
  • Vocabulary learning — noticing and remembering your corrections.
  • Everything you see in the app — your past captures, vocabulary, and settings are stored in one file on your computer. Since 0.2.0 you can turn transcript saving off entirely, or erase what is saved, in Settings → Privacy.
  • Insights — the observations Tiune shares about how you speak, and about where your speaking time goes, are worked out purely from what is already saved on your computer.

Downloading a new speech engine, and Tiune's background check for app updates, also involve normal internet requests — no personal data is included in either.

Your account

Signing in with Google or Apple is required to start using Tiune — it's what lets your vocabulary and corrections follow you across every computer you use. It opens your system browser to Google or Apple directly — Tiune never sees your password. Only your account's email and a session token come back; your session token is stored in the operating system's own credential store — Keychain on macOS, Credential Manager on Windows — never on disk in the clear. No dictation content, audio, or transcript is ever part of this — account sign-in and speech processing are entirely separate systems.

Usage data

Tiune sends a small set of anonymous product-usage events (like "onboarding finished" or "a capture completed") to help us understand what's working — never transcript text, audio, or vocabulary content. If the app crashes, the crash location and a stack trace are sent the same way, to help us fix it; never anything you dictated. Neither is on until you say so: Tiune asks once, in plain words, the moment your first sign-in completes, and takes "Not now" for an answer. You can change your mind either way, any time, in Settings → Privacy → Share usage data.

One thing is sent even with that turned off: a single ping the first time Tiune runs on a machine, so we can count installs. It carries four things and nothing else — a number that stands for your device, the app version, which operating system it is, and whether the copy you are running is a public release or one of our own development builds. That number is worked out on your own machine by scrambling a hardware identifier beyond recovery: it always comes out the same on the same computer, so reinstalling Tiune counts once rather than twice, and neither we nor anyone else can turn it back into a serial number or match it against the separate device number your licence uses. It is never linked to your account or email, no other event is sent when the setting is off, and one device is only ever counted once.

Telling one machine from another

Free trials are one per machine, so there has to be some way to recognise a machine we have seen before. Tiune takes your machine's stable hardware id, adds a fixed salt and hashes it — on your machine, before anything is sent — and sends only the resulting hash. The underlying id never leaves your machine, the hash cannot be turned back into it, and it is used for exactly one thing: deciding whether this machine has already had a free trial. It is not used for analytics, not joined to your dictation, and not shared with anyone.

This website

Separately from the app, tiune.app itself (the site you're reading right now) uses Google Analytics and Microsoft Clarity to understand traffic and how the site is used — standard web analytics, including anonymized session replay of on-page behavior like scrolling and clicks. This is about the marketing site only; it has no connection to the app, your dictation, or your account.

If you join the waitlist for Windows or mobile, we store the email address you type, along with your browser's user-agent string and the date — nothing else, and only because you asked us to tell you when those versions land. We use it for that one announcement and nothing more, we never sell or share it, and you can have it deleted at any time by emailing support@tiune.app.

Plus and Pro: what leaves your computer

Both paid plans are upgrades you choose. Nothing below happens on the free plan, and nothing below happens until you turn the feature on.

  • Plus — the AI cleanup pass. After your own machine has already turned your speech into text, that text is sent to Tiune's server, which passes it to a language-model provider to be rewritten, and hands the result straight back. Your audio never leaves your machine on Plus — transcription is still local. The text is held only for the seconds the request takes; Tiune's server writes none of it to a database, a file, or a log.
  • Pro — cloud transcription. Your audio streams through Tiune's server to our speech provider, which sends the words back as you speak. Every request is sent with zero retention set, asking the provider to keep neither the audio nor the transcript. Tiune's server is a relay in both directions and stores nothing on the way through.

Who we send it to, and what they may do with it

We name our sub-processors rather than describing them, because "a trusted third party" tells you nothing you could check.

  • AI cleanup runs on Groq. Under Groq's services agreement they are not permitted to use inputs or outputs to train or fine-tune any model, and GroqCloud does not retain inference requests by default — inputs and outputs may be logged only temporarily, for up to 30 days, when troubleshooting reliability problems or investigating abuse.
  • Cloud transcription runs on ElevenLabs. We send their zero-retention flag on every request, which asks them to delete the audio and the transcript the moment the request completes.
  • We do not use a provider whose terms permit training on your words. A provider that did was removed from Tiune in August 2026 for precisely that reason. This is enforced in our code rather than in a policy document: the provider is deleted from the source, not merely switched off, so it cannot be re-enabled by changing a setting.

What that adds up to

Tiune never stores your audio. It is processed as it streams and never written down — not on your computer, not on our server, not in a log. There is no recording of you anywhere in our systems to lose, subpoena, or leak.

Nothing you dictate trains an AI model. We have nothing to train on, because we keep nothing, and our cleanup provider is contractually barred from training on what we send them. There is no setting anywhere in Tiune that opts you into contributing your dictation to a dataset — because no such programme exists.

No one at Tiune reads your words. There is no human review queue, no quality-sampling process, and no support tool that can pull up something you dictated. Not because we promise not to look, but because there is nothing stored for anyone to look at.

What stays on your computer either way is your history: every capture Tiune shows you lives in a single file on your machine and is never uploaded. You can stop Tiune saving it at all, or erase what's already there, in Settings → Privacy.

Payment

Subscriptions are billed through Stripe, which collects your card details directly — Tiune never sees, handles, or stores a card number. We keep only the identifiers needed to know which plan you are on and to let you manage or cancel it.

What "Accessibility access" actually means

Accessibility sounds like a broad permission, so it's worth being precise: Tiune uses it for exactly two things — typing your dictated text into whatever app you're using, and briefly checking the text field you just typed into, only to notice if you corrected a word. It does not read your screen generally, and it doesn't see anything in apps you're not actively dictating into.

Questions

Reach us any time at support@tiune.app.

Last updated 2026-08-20.