TapTalk does not upload audio or transcripts for transcription. This notice explains the few cases where network services are used: downloads, updates, billing, support, and privacy-preserving aggregate analytics.
Audio buffer, live waveform, transcribed text, history, dictionary, saved snippets, preferences.
There is no cloud transcription pipeline. TapTalk never uploads audio, transcripts, history, saved snippets, or dictionary words.
Since no audio or text data is processed on our servers, TapTalk is not a Data Processor under Art. 28 GDPR. No data processing agreements needed.
The data controller for TapTalk is Oliver Lieven, Alfred-Delp-Weg 3, 73765 Neuhausen auf den Fildern, Germany. Day-to-day operations are handled on the controller's behalf by Maximilian David Lieven. For privacy-related questions, GDPR requests (access, erasure, rectification, portability, restriction, or objection), or to revoke consent, email support@taptlk.com. Full provider details are in the Impressum.
Since TapTalk processes 100% of your voice recording data locally on your Mac, we do not act as a Data Processor under Article 28 GDPR. No audio or transcript text ever reaches our servers, meaning there is no data processing relationship established, and corporate users do not need to sign a complex Data Processing Agreement (AVV).
Furthermore, because there is no server-side audio transmission, there is zero risk of third-country transfers (such as exporting personal data across EU borders to servers in the USA). This removes all legal hurdles associated with the EU-US Data Privacy Framework. TapTalk is fully compliant with professional confidentiality standards (such as Section 203 of the German Criminal Code / StGB) for medical doctors, lawyers, tax advisors, and HR departments.
While you hold the hotkey, your microphone feeds a rolling buffer in RAM. That buffer is passed to TapTalk's local speech model, which runs locally on your Mac. As soon as the transcription returns, the audio is discarded. It is never written to disk and never sent over a network for transcription.
Transcribed text is written to a local SQLite database inside
~/Library/Application Support/TapTalk.
You can see everything in the Home view, delete individual entries,
or enable auto-delete after 24 hours. There's no sync service.
TapTalk uses first-party aggregate analytics to understand whether the app is working and which features need attention. The app may send low-cardinality events such as one daily active signal, dictionary feature used, dictionary size bucket, model download started/completed, Refine invoked/completed/failed with coarse trigger/provider/bucket labels, upgrade clicked, or dictation completed with a coarse word-count bucket. These events never include audio, transcripts, history, saved snippets, dictionary words, active app names, clipboard content, names, email addresses, or payment data. Daily active counts use a server-side rotating hash derived from the local install ID, so the server can count active installations per day without storing the stable install ID in analytics rows. Website analytics are aggregate only: page bucket and download click bucket, with no cookies, visitor IDs, IP address storage, raw user-agent storage, or full referrer URLs. Raw analytics rows are deleted on a rolling basis; aggregate counts may be kept longer. You can turn analytics off in TapTalk Settings at any time. Legal basis: Art. 6(1)(f) GDPR, legitimate interest in operating and improving TapTalk with strict data minimisation and an opt-out.
If you join the Windows waitlist, we store the email address you submit, the page/source label, and timestamps for signup/update. We use this only to tell you when a Windows version is ready or to handle your deletion request. Legal basis: Art. 6(1)(a) GDPR, consent. You can withdraw consent at any time by emailing support@taptlk.com.
Subscriptions are handled by Paddle.com Market Limited as our merchant of record and an independent controller for the payment relationship. Paddle processes your email and payment method, invoices, taxes, renewals, and cancellation requests. They do not receive your audio or transcripts. Legal basis: Art. 6(1)(b) GDPR (performance of the subscription contract) and Art. 6(1)(c) GDPR for invoicing and tax obligations.
The local speech model is downloaded once during setup. Refine uses Apple Intelligence by default where it is available in macOS; optional local fallback setup may download an editing model. App updates are fetched from our release endpoint on launch. These requests necessarily expose standard connection data such as IP address, timestamp, requested file, and user agent to the hosting provider. Server logs are used for security and reliability, then deleted on a rolling basis.
If you email us, we process your email address and the content of your message so we can respond. Please do not send sensitive transcripts unless they are necessary for the support request.
If GDPR applies to you, you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object (Art. 21). You can also withdraw consent at any time where processing is based on consent (Art. 7(3)). You may lodge a complaint with your local data protection authority. To exercise these rights, email support@taptlk.com.
If your Mac is air-gapped after installation and model download, local dictation still works. Turning analytics off also leaves dictation unchanged.
Last updated: May 2026. Questions? support@taptlk.com.
Install TapTalk and never wonder where your voice went again.