Privacy Policy

Version 2026-10-07

1. The short version

OnVoice turns your speech into text on your Mac and on your iPhone. We built it so that we never receive your voice, your text, or anything about what you dictate. Speech recognition runs on your device. There is no advertising, and no analytics or telemetry of any kind.

Everything stays with you. By default, everything stays on your device. You choose two exceptions. iCloud sync copies your data to your own iCloud account, encrypted. On the Mac, your own AI key sends text to the provider you pick. Private mode turns the second one off.

On a Mac, OnVoice needs a free account; on iPhone, an account is optional and only links your Mac and turns on sync. If you have an account, we hold a small amount of account information (section 2). Everything else OnVoice stores stays on your devices and, only if you turn on iCloud sync, in your own iCloud account, which we cannot access (section 6A). On a Mac, your words leave it only if you turn off Private mode and connect a cloud AI model with your own API key; they then go to the provider you chose, not to us (section 6). The iPhone app never sends your words anywhere except to your own iCloud if you turn on sync, and the keyboard never sends them anywhere.

This Privacy Policy explains what OnVoice does with information, what we do and do not collect, and the choices and rights you have. It applies to the OnVoice app for macOS, the OnVoice app for iPhone, and the OnVoice keyboard for iPhone (together, the "App"). "We", "us" and "our" mean 50K SaaS Ventures Pvt Ltd (trading as OnSuite), Cabin 5A, 5th Floor, Plot No. 7, Sy. No. 66 & 67, Jubilee Enclave, Madhapur, Serilingampally, Telangana 500032, India ("OnVoice"). "You" means the person using the App.

2. What we collect: your account

OnVoice accounts are part of OnSuite. When you sign in with Apple, Google or WhatsApp, we receive:

• Who you are: your name and email address, or your phone number if you use WhatsApp, as the sign-in provider gives them to us, and an account identifier.
• Your workspace: its name, which the App creates from your name or the part of your email address before the "@".
• A label for the device: "OnVoice · iPhone" on iPhone, or "OnVoice · " followed by your Mac's computer name on a Mac, so you can recognise your devices.
• Account checks: while your device is online, the App asks our servers whether your account is still active, so that it stays signed in (on a Mac, at launch, about once an hour and when it wakes, plus a licence check about every 12 hours; on iPhone, when the app opens or comes back to the screen). These requests carry your sign-in token and your workspace, not anything you dictated. On a Mac, when Private mode is on, the App skips these background checks.

Like any online service, our servers and the providers that host them see your IP address and the time of each request. We use this only to run and secure the service. We keep these logs for a limited time, unless we need them longer to investigate abuse or a security incident.

We use your account information only to provide your account and keep the App working for you. Our account and sign-in systems are hosted by Supabase (database and sign-in), DigitalOcean (our servers) and Vercel (our websites), who process it on our behalf and under our instructions. Apple, Google and Meta (for WhatsApp) handle the sign-in step under their own privacy policies.

What we do not collect. We do not receive, store, sell, share, or have access to your audio, transcripts, dictation history, meeting notes, diary, to-dos, snippets, dictionary, settings, contacts, calendar, API keys, or location. We do not embed advertising, tracking, or analytics software, and the App does not contact any server of ours while you dictate. Because we do not receive this information, we cannot read it, recover it, disclose it, or delete it for you remotely.

If you contact us, we receive what you choose to send and use it only to reply and to improve the App. We keep it only as long as needed for that.

The early-access waitlist. If you join the waitlist on our website, we receive the email address you enter. We use it only to tell you when OnVoice is ready for you. Our website passes it to the place where we keep the list, which is stored with the providers that run our service. We keep it until you ask us to remove it or we no longer run the waitlist. To be removed, write to privacy@onsuite.in from that address, and we will delete it.

Our website. When you visit our website, Vercel, which hosts it, sees your IP address and the pages you request, as with any website. Our website uses no advertising, tracking or analytics software.

3. What the Mac app does on your Mac

The Mac app needs permissions from macOS. It uses each one only for the purpose below, and you can revoke any of them in System Settings.

• Microphone. Open only while you dictate or take meeting notes, and closed when you stop. Audio is turned into text on your Mac and is not saved (except for the developer debug option in section 5).
• Accessibility. Lets OnVoice see the dictation key, identify the app and text field you are dictating into, read a limited amount of nearby text (section 6), and insert text. It may briefly use the clipboard to insert text, then restores what was there.
• System audio recording (Meetings, optional). While you take meeting notes, OnVoice records the sound of the call so it can transcribe the other people too. It is transcribed on your Mac and never saved or uploaded.
• Calendars and Reminders (optional). Used only when you say "OnVoice, add … to my calendar" or "OnVoice, remind me to …". OnVoice adds that one item, and removes it if you undo. It does not read or change your other events or reminders.
• Contacts (optional, off by default). OnVoice reads your contacts' names on your Mac so it can spell them correctly. Contacts stay on your Mac. They are not synced and are never sent to a cloud model.
• Automation (browser address). OnVoice may read the address of the current browser page to choose how to insert text and which tone to use. The address stays on your Mac, except that the website's name (for example docs.google.com) is included when you use a cloud model (section 6).
• Notifications (optional). Used for the evening diary reminder, if you turn it on.

4. What the iPhone app and keyboard do

• Microphone and Speech Recognition. iOS does not let keyboards use the microphone, so while a dictation session is ready (up to 1 hour by default, which you can change in Settings) the OnVoice app keeps the microphone open and iPhone shows it in use. Until you tap the mic, OnVoice keeps only the last half-second of sound in memory, constantly overwritten, and does not turn it into text, save it, or send it. English is recognised by a speech model built into the app. Other languages use Apple's speech recognition, and OnVoice only offers languages your iPhone can recognise on the device, so audio is not sent to Apple or anyone else. Audio is not saved.
• The OnVoice keyboard and Full Access. iOS keeps keyboards isolated from their own app unless you allow Full Access. OnVoice asks for it so the keyboard can start dictation in the OnVoice app, receive the text back, and use your dictionary, snippets, and settings. Apple's standard message says a keyboard with Full Access could send what you type elsewhere. The OnVoice keyboard does not connect to the internet: what you type and dictate in it is not sent anywhere by the keyboard. It exchanges data only with the OnVoice app on the same iPhone. Basic typing works without Full Access.
• Live Activity and notifications. A Live Activity shows that a dictation session is ready and how long it has left. Notifications are used for the diary reminder if you turn it on. Both are shown only on your device.
• Things you type in the keyboard are used by iOS's own spell checker and your text replacements on your iPhone. Recently used emoji are remembered by the keyboard on your iPhone.
• Diagnostics screen. The iPhone app's Diagnostics screen shows which app was in front when you started a session, to help fix problems. This record stays on your iPhone.

5. What the App stores on your devices

On a Mac, in ~/Library/Application Support/OnVoice/ and in the macOS Keychain:

• Dictation history (what you said, the final text, the app it went into, the time, and the mode).
• Meeting notes (titles, your notes, transcripts, speaker labels, and summaries), diary entries and to-dos, snippets, and the writing samples "My Voice" learns from.
• Personal dictionary, learned word corrections, per-app styles and profiles, settings, and usage statistics such as your speaking pace and the estimated value of your time. These statistics are computed on your Mac and are not sent to us. The time figure is an estimate: your words at a typing speed of about 40 words per minute, minus the time you spent speaking, priced at an hourly rate you can change (USD 25 by default). It is the value of your time, not money you saved or earned. Section 9A of the Terms has the details.
• Cost ledger: numbers only (model, token counts, latency, estimated cost). It never contains your words.
• Team files you import or export (.onvoiceteam). They are shared only by you, as files.
• In the Keychain: your sign-in session, your API keys, and the encryption key described below.
• Downloaded models (speech, speaker-labelling, and the offline AI model) and Apple language assets.
• Debug audio (off by default). Only if the App is started with an explicit developer debug option are short audio clips written to the debug folder inside that folder. Normal use never does this.

The text of your history, meetings, diary, to-dos, snippets, and My Voice samples is encrypted (AES-256) with a random key that the App creates on your Mac and keeps only in your Keychain. If that key is deleted, that text cannot be recovered. Encryption does not protect against software or people running as you on your unlocked Mac. Your other data relies on the protection macOS gives your account and disk, such as FileVault.

On iPhone, in the storage the OnVoice app shares with its keyboard, on your iPhone (and, if you turn on iCloud sync, in your own iCloud account; section 6A): dictation history, diary entries and to-dos, snippets, your dictionary, settings, and the last dictation passed to the keyboard. Your sign-in session is kept in the iPhone's Keychain and does not leave that iPhone. This data relies on the protection iOS gives app data, including your passcode.

How long it is kept. Dictation history is kept for 7 days by default on new installs. In Settings you can choose Never, 1 day, 7 days, 30 days, or Forever, and older dictations are deleted automatically. Meeting notes, diary entries, to-dos, snippets, and your dictionary are kept until you delete them. You can delete single items or everything from within the App. Uninstalling the Mac app does not remove its folder; you can delete it yourself. Deleting the iPhone app deletes its data from that iPhone. Anything already synced to your iCloud account stays there until you delete it (section 6A).

Deleting your account deletes the account information we hold (section 2). It does not delete what is stored on your devices or synced to your iCloud account; delete that in the App, or remove the App (section 6A explains how to remove synced data).

6. When information leaves your device

Private mode (Mac). Private mode is shown in the App as "No cloud AI". It is on by default. When it is on, dictation, meetings, diary, and translation make no network requests: speech recognition and text processing run only on your Mac, and cloud models are never contacted. Voice web actions and background account checks are also switched off. Private mode does not turn off iCloud sync, which is a separate switch and sends data only to your own iCloud (section 6A).

Cloud models (Mac only, your choice, your key). If you turn Private mode off and connect a provider such as Anthropic or any OpenAI-compatible service with your own API key, then, only for the features that use it, the App sends that provider directly from your Mac:

• Dictation modes and selection commands (for example Polish, Concise, Expand, Custom, "make this shorter", or Clean when no on-device cleanup is available): the transcript of what you said; the name of the app and, in a browser, the website's name; your style notes, tone setting and custom instruction; up to a few short samples of your own past writing if you use "My Voice"; and, when the mode needs it, the text you selected (at most 2,000 characters) and the text around your cursor (at most 600 characters).
• Meeting summaries and questions about your meetings: the meeting transcript and notes, or the relevant excerpts.
• Translation: the text to translate, only when neither Apple's on-device translation nor the built-in offline model can translate that language pair.

We never send whole documents, your contacts, your dictionary, or your audio. The App shows a cloud symbol whenever a request may leave your Mac. The provider handles this data under its own terms and privacy policy, under your account. We are not a party to that relationship, do not receive a copy, and are not responsible for how the provider handles it. A local server you configure (such as Ollama) is treated as cloud, because we cannot know whether it forwards your text.

Voice web actions (Mac). If you say "OnVoice, search for …" or ask it to open a website, OnVoice opens your browser at that search or site, and the website receives it as if you had typed it.

Downloads and updates. When the App downloads a model, it fetches it from its public host (Hugging Face), which sees your IP address and which file was requested. Apple may download speech or translation assets through macOS or iOS. The Mac app downloaded from our website checks GitHub, where we publish updates, about once a day; you can turn automatic checking off in its settings, and a check reveals your IP address and the App version. Update checks are separate from Private mode. Copies from Apple's App Store are updated by Apple.

The iPhone app and keyboard send nothing about your dictation or typing to us or to anyone else, except that the iPhone app syncs with your own iCloud account if you turn on iCloud sync (section 6A). Otherwise their only network use is signing in and account checks (section 2).

Legal requests. If the law compels us to disclose information we hold (your account, or email you sent us), we will disclose only what is required and, where lawful, tell you first. We cannot disclose your dictation, because we do not have it.

6A. iCloud sync (optional)

OnVoice can keep your Mac and iPhone in step through your own iCloud account. Sync is off until you turn it on, either when the App offers it during setup or with the "Sync with iCloud" switch in Settings. It is set separately on each device, and it runs only on the devices where you turn it on.

Where your data goes. Sync uses Apple's CloudKit to store your data in the private database of your own iCloud account. It travels between your devices and Apple only. It does not pass through our servers, we do not run any server for it, and we cannot access it. Apple stores it under Apple's own terms and privacy policy, and it counts toward your iCloud storage.

What syncs: dictation history, your personal dictionary, learned word corrections, snippets, to-dos, diary entries, and a few shared settings (your default mode, custom instruction, whether and for how long history is kept, and dictation preferences such as removing filler sounds and formatting lists). The first time you turn sync on, what is already on that device is uploaded too.

What never syncs: audio (which is not saved), meeting notes and transcripts, My Voice writing samples, per-app styles and profiles, the cost ledger, your contacts, API keys, your sign-in session, the encryption key on your Mac, downloaded models, and settings that belong to one device, such as Private mode, your speech model, and your cloud AI provider.

Encryption. The content of what syncs is stored in CloudKit's encrypted fields: your device encrypts it before upload and decrypts it only after download, and we can never read it. If you turn on Apple's Advanced Data Protection for iCloud, the keys are available only to you, so only your own devices can read it; otherwise the keys are protected under Apple's standard iCloud data protection. This covers what you said and the final text of each dictation, the app it went into, your dictionary and learned words, snippets, to-dos, diary entries and notes, and the values of your shared settings. The details needed to sort and merge items are stored as ordinary iCloud data under Apple's standard iCloud protection, not in those encrypted fields. They contain no words you said or wrote: dates and times, the mode and processing level used, how long a dictation or diary recording lasted, which of your devices it came from, whether a to-do is done, when it is due and what kind of source created it, a diary entry's day, time zone and status, whether a dictionary entry is case-sensitive, how often and when a learned word was seen and how it was learned, and the names of shared settings.

Deleting. When you delete something on one device, it is deleted from your iCloud account and from your other devices that have sync on. Deleting all history clears it on every synced device. How long history is kept is a shared setting, so it applies to all of them.

Turning sync off on a device stops it sending and receiving. What is on that device stays there, and what was already synced stays in your iCloud account and on your other devices; turning sync off does not delete it. To remove OnVoice's data from iCloud, delete it in the App while sync is on, or turn sync off on every device and then delete OnVoice's data in your iCloud storage settings. If sync is still on somewhere, that device uploads its data again.

Changes to your iCloud account. If you sign out of iCloud, sync pauses and your data stays on the device. If the device signs in to a different iCloud account, OnVoice pauses and asks you before uploading anything to that account. If your iCloud storage is full, uploading pauses, nothing is lost from your device, and OnVoice tries again later.

Private mode (Mac) does not turn off or block iCloud sync. Sync is its own switch, and it sends your data only to your own iCloud account, never to an AI provider.

7. Legal bases, and how we use what we have

We process your account information because it is necessary to provide the App under our agreement with you, and your IP address and request records under our legitimate interest in running and securing the service. For correspondence you send us, we rely on our legitimate interest in answering you, and your consent when you choose to write to us. We do not sell or share personal information, do not carry out targeted advertising, and do not make automated decisions about you.

8. Your rights

In plain words. You can ask us for a copy of the personal data we hold about you (access). You can ask us to fix it if it is wrong (correction). You can ask us to delete it (deletion). You can ask for it in a form you can take elsewhere (portability). Where we rely on your consent, you can withdraw it at any time. You can complain to a data protection regulator. To use any of these rights, write to privacy@onsuite.in.

Depending on where you live (including under the GDPR and UK GDPR, the California Consumer Privacy Act, the Indian Digital Personal Data Protection Act, and similar laws), you may have rights to access, correct, delete, restrict, or port your personal data, to object to its processing, and to withdraw consent. You can delete your account from the App (Settings) or from your account page on our website. If you own a team workspace that other people still use, you must first transfer it or remove them; the App tells you if this applies. We then delete the account information we hold and sign you out on that device. Your other devices are signed out the next time they check your account. We keep something only where the law requires it. For everything stored on your devices, you already have full control in the App. For anything else, write to privacy@onsuite.in and we will respond within the time your law requires. You may also complain to your local data protection authority. For grievances, including under the Indian Digital Personal Data Protection Act, write to our Grievance Officer at privacy@onsuite.in, or at the address in section 14. If you are in India and we do not resolve your grievance, you may complain to the Data Protection Board of India.

9. Age

You must be 18 or older to create an account. OnVoice is not directed to children, and we do not knowingly collect information from anyone under 18. If you believe someone under 18 has created an account, write to privacy@onsuite.in and we will delete it.

10. Security

We keep data on your devices (and, only if you turn on sync, in your own iCloud account, with your text in encrypted fields), keep keys and sign-in sessions in the Keychain, encrypt stored text on the Mac, never log audio, transcripts or keys, cap the context sent to cloud models, and use encrypted connections (HTTPS) for every request. No software is perfectly secure. You are responsible for protecting your devices, your sign-in accounts, and your API keys.

11. Other people's voices and words

Meeting notes transcribe everyone on a call, and you can dictate what other people say. Laws about recording and consent may apply where you or they are located, and some require everyone's consent. You alone are responsible for telling people and obtaining any consent those laws require, and for how you use the result. See the Terms of Service.

12. International use

Your account information is stored with us and the providers named in section 2, and may be processed in other countries where they operate (for example, Vercel serves our websites globally). Where the law requires it, we protect transfers of personal data across borders with appropriate safeguards. If you connect a cloud AI provider, your text may be processed wherever that provider operates. Everything else stays on your devices or, if you turn on iCloud sync, in your own iCloud account, which Apple stores and processes under its own terms.

13. Changes to this policy

We may update this Privacy Policy. When we make a material change, we will tell you in the App or by email before it takes effect, and on Mac the App will ask you to accept it again. The version and date are at the top. If you do not agree to a change, stop using the App and delete your account and the App.

14. Contact

50K SaaS Ventures Pvt Ltd (trading as OnSuite) Cabin 5A, 5th Floor, Plot No. 7, Sy. No. 66 & 67, Jubilee Enclave, Madhapur, Serilingampally, Telangana 500032, India privacy@onsuite.in