Privacy Policy

Last updated: August 1, 2026

Air Wisper is built by Alexis Santos, an independent developer based in Spain. This policy explains what data Air Wisper collects, how it's used, and your rights.

The short version: your audio stays on your Mac in local mode. In cloud mode, audio is sent to OpenAI for transcription. AI polish sends only text, never audio. I collect the minimum data needed to run the service.

1. What data is collected

Account information: When you sign up, I store your email address and authentication credentials via Supabase (Apple Sign In or email/password). A user record is also stored in Cloudflare D1.

Usage data: I track a weekly count of transcriptions per user to enforce plan limits. This is stored in Cloudflare KV. No content of your transcriptions is stored server-side.

Payment information: If you subscribe to the Pro plan, payment is handled entirely by Stripe. I do not store your credit card details. Stripe may store payment information according to their own privacy policy.

Transcription history: Your transcription history is stored locally on your Mac only. It is never uploaded to any server.

2. How your data is processed

Local mode (on-device): Audio is processed entirely on your Mac using Apple's SFSpeechRecognizer. No audio data leaves your device.

Cloud mode: Audio is sent to OpenAI's API for transcription via a Cloudflare Worker proxy. OpenAI processes the audio and returns text. Refer to OpenAI's privacy policy for how they handle data.

AI polish: When you use AI polish, only the transcribed text (never audio) is sent to OpenAI via the Cloudflare Worker proxy. The text is used solely to improve grammar and formatting, then the response is returned to your app.

Authentication tokens: Auth tokens are stored securely in your macOS Keychain.

3. Third-party services

Air Wisper uses the following third-party services:

• OpenAI — Cloud transcription and AI text polish. Privacy policy
• Supabase — User authentication and account storage. Privacy policy
• Stripe — Payment processing for Pro subscriptions. Privacy policy
• Cloudflare — API proxy (Workers), usage tracking (KV), user records (D1), and cookieless website traffic measurement (Web Analytics, see section 4). Privacy policy

4. Cookies and tracking

This website sets no cookies and does not track you across sites. There is no advertising, no profiling, and no data sold or shared with anyone.

It does measure aggregate traffic, using Cloudflare Web Analytics. This is a privacy-first, cookieless measurement tool: it records the page you visited, the site that referred you, your browser and operating system, your country, and how quickly the page loaded. It does not use cookies, does not fingerprint your device, does not store your IP address, and cannot follow you to any other website. Because it stores nothing on your device and identifies no one, it needs no consent banner — which is exactly why it was chosen.

I use it for one purpose: to know whether anyone is finding the site at all. If you would rather not be counted, any content blocker or your browser's "do not track" setting will stop the script loading, and nothing on the site will break.

5. Data retention

Account data is retained while your account is active. Usage counts reset weekly. If you delete your account, your data will be removed from Supabase, Cloudflare D1, and Cloudflare KV.

Local transcription history on your Mac is under your control — you can delete it at any time from within the app or by removing the app's data.

6. Your rights (GDPR)

Since I am based in Spain (EU), the General Data Protection Regulation (GDPR) applies. You have the right to:

• Access — Request a copy of the personal data I hold about you.
• Rectification — Ask me to correct inaccurate data.
• Erasure — Ask me to delete your data ("right to be forgotten").
• Portability — Request your data in a portable format.
• Object — Object to processing of your data.
• Withdraw consent — Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email me at alexis.santos.perez@gmail.com. I will respond within 30 days.

7. Data security

Authentication tokens are stored in macOS Keychain. All communication between the app and servers uses HTTPS. I do not store audio or transcription content on any server.

8. Children's privacy

Air Wisper is not directed at children under 16. I do not knowingly collect data from children.

9. Changes to this policy

If I make material changes to this policy, I will update the "last updated" date at the top. For significant changes, I may notify you via the app or email.

10. Contact

If you have questions about this privacy policy or your data, contact me:

Alexis Santos
alexis.santos.perez@gmail.com