Privacy Policy
Last updated: February 2026
1. Introduction
Whisper by Remskill ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
2. Information We Collect
2.1 Information You Provide
- Account Information: Email address, name, and password when you create an account, or profile information when you sign in via Google OAuth
- Payment Information: Processed securely through Stripe (we do not store payment details)
- Support Communications: Information you provide when contacting customer support
2.2 Automatically Collected Information
- Device Information: Device identifier (fingerprint) and device name for license validation (up to 3 devices per individual license)
- Subscription Validation: Authentication tokens and subscription status checks to verify your access
- Server Logs: IP address, browser user agent, and request metadata are temporarily logged for security and troubleshooting purposes
- Referral Data: If you participate in our referral program, we collect IP address and browser information for fraud prevention
2.3 Information We DO NOT Collect
Your Audio Recordings: Never uploaded or stored on our servers
Transcription Content: All transcriptions remain local on your device
Voice Data: We have no access to what you dictate or transcribe
Personal Documents: All processing is done locally
3. How We Use Your Information
We use collected information for:
- Service Provision: Validate licenses, process payments, and deliver the Service
- Account Management: Create and maintain your account
- Security & Fraud Prevention: Detect and prevent fraudulent activity, including referral abuse
- Customer Support: Respond to inquiries and provide technical assistance
- Communications: Send updates, security alerts, and service notifications
- Legal Compliance: Comply with legal obligations and prevent fraud
4. Data Processing and Storage
4.1 Local Processing: All speech-to-text transcription is performed locally on your device using downloaded speech recognition models. No audio data is sent to our servers.
4.2 Cloud Storage: We store account information, subscription data, and device registrations on secure cloud servers (Supabase/PostgreSQL).
4.3 Data Location: Data is stored on servers located in the United States. By using the Service, you consent to this transfer and processing.
4.4 Retention: We retain account data while your account is active and for a reasonable period afterward as required by law or for legitimate business purposes.
5. Data Sharing and Disclosure
We do not sell your personal information. We may share data with:
- Service Providers: Stripe (payments), Supabase (database), hosting providers
- Legal Requirements: When required by law, court order, or government request
- Business Transfers: In connection with merger, sale, or asset transfer
- With Your Consent: When you explicitly authorize sharing
6. Security Measures
We implement industry-standard security measures to protect your data:
- Encrypted data transmission (HTTPS/TLS 1.3)
- Secure password hashing
- Ongoing security monitoring and timely updates
- Access controls and monitoring
- Secure payment processing through Stripe (PCI DSS compliant)
However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
7. Your Rights and Choices
7.1 Access and Correction: You can view and update your account information anytime.
7.2 Data Deletion: Request deletion of your account and associated data by contacting support. We will delete your data within 30 days, except where required by law.
7.3 Marketing Communications: Opt out of promotional emails via the unsubscribe link. You will still receive transactional emails (receipts, security alerts).
7.4 License Deactivation: Remove your license from a device anytime through the app.
7.5 GDPR Rights (EU/EEA Users): If you are in the EU/EEA, you have additional rights including data portability, objection to processing, and the right to lodge a complaint with a supervisory authority.
7.6 CCPA Rights (California Users): If you are a California resident, you have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.
7.7 APPI Rights (Japan Users): If you are in Japan, you have rights under the Act on Protection of Personal Information (APPI), including the right to request disclosure, correction, and cessation of use of your personal data. See our Japan-Specific Privacy Policy for details.
8. Children's Privacy
Our Service is not intended for children under 13 years of age (or under 16 in the EU/EEA). We do not knowingly collect personal information from children. If you believe we have collected such information, contact us immediately.
9. Cookies and Tracking
9.1 Website Cookies: Our website uses cookies for authentication and session management.
9.2 Desktop App: The desktop application does not use cookies but may store local preferences.
10. Third-Party Services
We use the following third-party services:
- Stripe: Payment processing (Stripe's Privacy Policy)
- Supabase: Database and authentication (Supabase's Privacy Policy)
- GitHub: Software distribution and updates
- Hugging Face: Speech model hosting and downloads
- Cloudflare: CDN and DDoS protection for our website
- Google: OAuth authentication (when you choose to sign in with Google)
- Resend: Transactional email delivery (Resend's Privacy Policy)
These providers have their own privacy policies. We are not responsible for their practices.
11. International Users
If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States. By using the Service, you consent to such transfer.
For users in the EU/EEA, Japan, and other regions with data protection laws, we process your data based on your consent, contractual necessity, and our legitimate interests. Audio and transcription data is never transferred as it remains entirely on your device.
12. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or in-app notification. Continued use after changes constitutes acceptance.
13. Contact Us
If you have questions or concerns about this Privacy Policy:
Email: whisper@remskill.com
Privacy-First Commitment
Your privacy is paramount. All transcription happens locally on your device. We never see, store, or have access to your audio recordings or transcribed text. Your data stays yours.