LAST UPDATED: 16 JULY 2026 · RECURSE LTD

Who we are

ShoutFlow is made and sold by Recurse LTD ("we", "us"), a company registered in the United Kingdom. This policy covers the ShoutFlow macOS application and this website. Questions to support@shoutflow.app.

Your voice and your text

ShoutFlow's defining design decision is that dictation does not pass through our servers, in any mode:

Local mode (default on Apple Silicon). Audio is transcribed by WhisperKit and cleaned up by an MLX language model, entirely on your Mac. Your audio and text never leave the device. After the one-time model download, this works offline.
Bring-your-own-key (BYOK) cloud mode. If you choose a cloud provider (OpenAI, OpenRouter, DeepSeek, Gemini, Kimi, xAI, or a custom endpoint), your Mac sends audio and/or text directly to that provider over TLS, authenticated with your API key. We never proxy, log, or store this traffic; it is not technically in our path. The selected provider's own privacy policy applies to those requests, and the app shows you which stage sends what, where, before you enable it.

Your personal dictionary, voice snippets, transcription history, and settings are stored locally on your Mac. Provider API keys are stored in the macOS Keychain, never in plaintext files and never on our servers.

What our servers do see

License activation is the only thing the app talks to us about. When you activate or refresh a license, we process:

a hash of your license key,
a per-installation identity created on your Mac (used to count activation slots), and
basic request metadata (timestamp, IP address as part of ordinary HTTPS handling).

License traffic carries no audio, no transcribed text, no prompts, no provider keys, and no usage analytics. The app has no account system and embeds no analytics or tracking SDK.

Purchases

Payments are processed by Stripe. We never see or store your card details. From a purchase we receive and keep what we need to deliver and support your license: your email address, the license record, and Stripe's payment reference. We use your email to send the license and for essential service messages, not for marketing lists you didn't ask for.

This website

The site is served via Cloudflare, which processes standard server logs (IP address, user agent) to deliver and protect the service. The site sets no advertising cookies and runs no third-party analytics scripts.

Retention and your rights

We keep purchase and license records for as long as your license is active and as required for tax and accounting. Under UK GDPR you can request access to, correction of, or deletion of your personal data, and you can complain to the ICO. Email support@shoutflow.app and we'll act on it. Deleting a license record means the license can no longer be reactivated.

Changes

If we change this policy we'll update this page and the date at the top. Material changes to how the app handles your data will also be called out in release notes.