Privacy Policy

Last updated: July 15, 2026

What We Don't Collect

We want to be explicit about this:

• Voice recordings or audio of any kind
• Transcribed text — unless you explicitly enable the optional Cloud AI feature described below
• Which applications you use Spill It! with
• Keystrokes or clipboard contents
• Any personally identifiable information beyond what's described below

What We Do Collect

License validation (Paddle or Apple)
For the direct-download build, Paddle processes the transaction and returns a license key that is stored locally on your Mac. For the Mac App Store build, Apple processes the purchase and StoreKit supplies verified entitlement information; that build does not accept Paddle or website license keys. We never receive your payment-card details. See Paddle's privacy policy and Apple's privacy policy.

Contact name recognition — optional, explicit opt-in
If you enable Contact name recognition and grant the macOS Contacts permission, Spill It! reads only given names, family names, and their phonetic spellings to improve on-device name transcription. It does not request phone numbers, email addresses, postal addresses, notes, or other contact fields. Contact records are not stored or transmitted.

Crash reports (Sentry) — on by default, can be disabled
If the app crashes, a report is sent to Sentry that includes the crash stack trace, your macOS version, and the app version. Crash reports never include audio, transcription text, or any content you've dictated. You can disable this in Settings.

Analytics (PostHog) — off by default, opt-in only
If you choose to enable analytics, we collect session counts and which features you use (e.g., "user opened settings", "user used keyboard shortcut"). This helps us understand what's working. Analytics never include transcription content, audio, or anything you've said or typed. You can enable or disable this at any time in Settings.

Model downloads
When you download a speech model, our CDN (content delivery network) receives your IP address as part of the normal HTTP request. No account is required. We don't log or store IP addresses beyond standard server access logs, which are retained briefly for operational purposes.

Cloud AI — off by default, explicit opt-in only
If you enable Cloud AI and provide your own API key, Spill It! sends the raw and processed transcript, the active app name and content category, and up to 30 context-derived names, filenames, or identifiers directly to the AI provider you select. This information is used only to refine that dictation. Audio is never sent, and the request does not pass through Spill It! servers. Your selected provider's privacy and retention terms apply; disable Cloud AI at any time to keep all transcription processing on your Mac.

Data Storage

Transcriptions, preferences, and model files are stored locally on your Mac. There is no Spill It! cloud sync or account database. If you opt into Cloud AI, the limited data described above is sent directly to the provider you configure.

Third-Party Services

• Paddle — payment processing and license management. Their privacy policy.
• Apple — Mac App Store payment processing and StoreKit entitlements. Their privacy policy.
• Sentry — crash reporting (if enabled). Their privacy policy.
• PostHog — product analytics (if opted in). Their privacy policy.

Your Rights

Delete the app and all local data goes with it. Because we don't store your content on any server, there's nothing to request deletion of on our end.

If you'd like to request deletion of any crash reports or analytics events associated with your install, email us at [email protected] and we'll handle it.

Children

Spill It! is not directed at children under 13. We don't knowingly collect information from children.

Changes to This Policy

If we make meaningful changes to what data we collect or how we use it, we'll note it in the app's release notes. Continued use of the app means you accept any updated policy.

Contact

Privacy questions? Email us at [email protected].