Privacy Policy

The short version

TalkFlow is a voice-first writing app for iPhone. We collect the minimum required to operate the product. We do not sell your data, we don't use it to train models, and we never track you across other apps or websites.

What we collect

• Account. When you sign in with Apple we store your user identifier and (if Apple shares them on first sign-in) your name and email. Used to authenticate API calls and email receipts/support replies.
• Audio. When you record a dictation, the audio file is uploaded over TLS to TalkFlow Cloud (a Cloudflare Worker) and forwarded to our transcription provider. We do not retain the audio after the response returns - it lives only in memory during the request.
• Transcripts and cleaned text. Held in memory for the duration of one request, then discarded. Not logged, not persisted server-side.
• Subscription state. Apple sends us a signed receipt when you purchase; we store the original transaction ID, product ID, tier, and expiry. Required to enforce paid features.
• Usage counters. Per-day counts of dictations and text-cleanup calls. Used for fair-use limits and to operate your plan. No content is stored alongside.
• Free-tier abuse prevention.So that deleting an account and signing up again cannot reset the free allowance, we keep a minimal record keyed to your sign-in identity (the opaque subject identifier Apple gives us - not your name or email) with cumulative free-tier usage counts. On iPhone we also use Apple's DeviceCheck: the app sends Apple a device token and we store only a one-way hash of it plus a flag that the device has used its free tier. This identifies the device, never you, and contains no content.

What we don't collect

• Your audio files. They are never stored.
• The text of your dictations. Held in memory only during cleanup.
• Advertising IDs, or IP addresses beyond what Cloudflare uses for routing. The only device signal we hold is the hashed DeviceCheck token described above, which cannot be reversed into a device ID.
• Ad-tech, attribution, or any tracking of you across other apps and websites.

Sub-processors

The following services process data as part of operating TalkFlow. Each is bound by a data-processing agreement that prohibits using your data to train models or for other purposes:

• Cloudflare - hosts TalkFlow Cloud (the Worker), the database holding your account, subscription, and usage records, the co-located speech-to-text fallback, and edge transport. Region: global edge.
• Speech & language-model providers - your audio is transcribed with Whisper (via Groq), and the transcript is cleaned or translated by a Llama 3.3 70B model hosted on SambaNova or DeepInfra. Each is contractually barred from retaining your data or training on it.
• Apple- Apple Sign In, StoreKit subscriptions, App Store delivery. Bound by Apple's standard privacy terms.
• Sentry - crash + error reporting. We send error types, HTTP status codes, and your opaque TalkFlow user ID. We do not send your audio, transcripts, cleaned text, email, name, or anything you dictate.
• PostHog - privacy-respecting product analytics (which screens are opened, anonymous feature counts) so we can improve the app. No content you dictate, no advertising IDs, no cross-app tracking.

Account deletion

Settings → Account → Delete account tombstones your user record and cascades deletion of subscription receipts and usage counters. One thing survives deletion: the free-tier abuse-prevention record described above (cumulative free-allowance counts keyed to the opaque sign-in identifier, and the hashed device flag). It exists precisely so deletion cannot be used to reset the free tier; it contains no content, name, or email. Apple holds the subscription itself; cancellation happens in iOS Settings → Apple ID → Subscriptions.

Data retention

• Audio, transcripts, cleaned text - not retained.
• Account record - until you request deletion.
• Subscription receipts - until the entitlement expires + 90 days for billing-dispute purposes.
• Usage counters - rolling 12 months.
• Free-tier abuse-prevention records (identity-keyed allowance counts, hashed device flag) - retained while the free tier exists, including after account deletion.

Security

All traffic is HTTPS. The JWT used by the iOS client to authenticate with TalkFlow Cloud is stored in Keychain, scoped to the keychain-access-group of the main app + keyboard extension. Apple receipt validation pins Apple's Root CA G3 SHA-256.

Children

TalkFlow is not directed to children under 13 and we do not knowingly collect data from anyone under 13.

Contact

Questions or requests? privacy@talkflow.me.