Privacy Policy

1. Data Controller

The data controller for QuickSay is:
Adrian Beek
Calgary, Alberta, Canada
[email protected]

2. What QuickSay Collects & Stores Locally

QuickSay stores the following data locally on your machine. None of this data is sent to our servers.

Audio recordings

When you dictate, QuickSay records your voice. If the "Save recordings" setting is enabled (on by default), audio files are saved locally in data\audio\. You can disable this in Settings > General, or delete saved recordings at any time.

Dictation history

Your dictation history is stored locally in data\history.json. This includes the transcribed text, timestamps, duration, and the name of the active window at the time of dictation (used to display which application you were using). This data is never transmitted to any server.

Usage statistics

QuickSay stores local usage statistics (word counts, daily streaks, per-application breakdowns) in data\statistics.json. This data stays on your machine and is never transmitted.

Custom dictionary entries

Any custom words or phrases you add to your dictionary are stored locally on your machine. They never leave your computer.

Configuration & API key

Your settings and API key are stored locally in config.json. Your API key is encrypted using Windows DPAPI before storage. We never see or have access to your API key.

Debug & temporary files

QuickSay may create local debug logs and temporary API response files (debug_log.txt, payload.json, response.txt) for troubleshooting. These remain on your machine and are not transmitted.

3. Data Sent to Third Parties

Groq API (transcription & text cleanup)

When you dictate, QuickSay sends your audio recording to Groq's servers for transcription via the Whisper API. The transcribed text is then sent to Groq's API for text cleanup (punctuation, formatting). This means your audio data leaves your machine and is processed by Groq.

Groq's data handling: By default, Groq may retain data for up to 30 days for abuse monitoring and service improvement. Groq offers a Zero Data Retention (ZDR) option that can be enabled on your Groq account. We encourage you to review Groq's privacy policy and Groq's data handling documentation for full details.

If you use your own API key (BYOK), you interact with Groq directly under Groq's terms. See the BYOK section below.

Payment processor

Payments are handled by LemonSqueezy. They process all payment data on our behalf. QuickSay never sees or stores your credit card information. You can review LemonSqueezy's privacy policy for details.

Plausible Analytics (website only)

This website uses Plausible Analytics, a privacy-focused, cookieless analytics tool. It collects no personal data and uses no cookies. The QuickSay desktop app is separate: it can send anonymous usage counts to PostHog and anonymous crash reports to Sentry, and both are off unless you switch them on. Section 4 sets out exactly what each one receives.

4. What Our Own Servers Receive, and What QuickSay Does Not Do

Our own servers

QuickSay contacts two servers we run. Neither of them handles your speech or your text.

• • The licence server, and what it gets. It receives a code that identifies your computer, and, when you activate, your licence key. That code is a one-way scramble of your network adapter’s hardware address and your Windows product ID, so it cannot be turned back into anything about you or your machine.
• • When it is contacted. On first launch, before you have bought anything, to check whether this computer has already used its free trial. When you paste in a licence key. About every two weeks after that, to confirm your licence is still good. Once, when a free trial runs out. And when the purchase screen needs today’s price.
• • Why the first-launch check exists. The free trial is per computer. Without that check, uninstalling and reinstalling would hand out an unlimited supply of free trials.
• • The update server. Once a day QuickSay asks a file on our website whether a newer version exists. It sends nothing about you or your use of the app. As with visiting any website, our host can see that a computer at your internet address asked. You can switch update checks off in Settings.

Things that are off until you switch them on

• • Anonymous usage counts (Settings > Privacy > “Help improve QuickSay”). Switch this on and QuickSay sends counts to PostHog, an analytics company, on their European servers. No message carries your name, your email, your licence key, the code that identifies your computer, or a word of what you said. Each install gets a random ID that is not derived from your hardware and is not linked to your licence. Switching the setting off throws that ID away.
• • Anonymous crash reports (Settings > Privacy). Switch this on and QuickSay sends the error type, the error message, your Windows version and the place in the code it happened, to Sentry, an error-tracking service. It never sends transcripts, audio or personal information. Sentry works out an approximate city and country from the address your connection came from and keeps it with the report; QuickSay does not send it and cannot stop Sentry deriving it. Usage counts do not carry a location.

What QuickSay does not do

• ✕ QuickSay does not capture your screen. No screenshots. No screen content. Ever.
• ✕ QuickSay does not send usage analytics or crash reports unless you switch them on. Both are off when you install it.
• ✕ QuickSay does not store your dictation, your transcripts or your audio on our servers. The licence server holds a licence record and a machine code, and nothing else.
• ✕ QuickSay does not sell or share your data with third parties.
• ✕ QuickSay does not use cookies for tracking. This website uses cookieless analytics.

5. Data Retention

Local data: Dictation history, audio recordings, statistics, and debug files are stored on your machine indefinitely until you choose to delete them. You can clear your history from Settings > History, delete audio files from the data\audio\ folder, or uninstall QuickSay to remove all local data.

Groq (third-party): Groq may retain audio and text data for up to 30 days by default for service monitoring. You can enable Zero Data Retention on your Groq account. See Groq's data handling page for details.

6. Cross-Border Data Transfers

When you use QuickSay, your audio is sent to Groq's API servers located in the United States (hosted on Google Cloud Platform). If you are located outside the United States, this constitutes a cross-border transfer of your data. By using QuickSay, you consent to this transfer. Groq processes data in accordance with their privacy policy.

7. BYOK Users

QuickSay operates on a Bring Your Own Key (BYOK) model. You provide your own Groq API key. Your audio is sent to Groq under your own account and API key. Groq's data handling is governed by your direct agreement with them. QuickSay acts as the interface. Your API key is stored locally on your machine (encrypted with Windows DPAPI) and is never transmitted to us.

8. Your Rights

Because QuickSay does not collect or store personal data on our servers, most privacy rights relate to your local data and to Groq's processing. You have the right to:

• ✓ Access your data. All QuickSay data is stored locally in the app's data folder. You can view, copy, or export it at any time.
• ✓ Delete your data. You can delete your dictation history, saved recordings, statistics, and all other local data at any time through the app or by deleting the files directly.
• ✓ Correct your data. You can edit your custom dictionary and configuration at any time.
• ✓ Control Groq's processing: you can enable Zero Data Retention on your Groq account, or stop using the service at any time.

For questions about your data or to exercise any rights, contact us at [email protected].

9. Children’s Privacy

QuickSay is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has used QuickSay, please contact us at [email protected].

10. Breach Notification

The only data we hold on our own servers is a licence record and a machine code, so the risk of a data breach on our end is small. It is not nil. If we become aware of a security incident that affects QuickSay users, including any breach at a third-party service provider, we will notify affected users through the application and on this website within 72 hours of becoming aware of the incident, as required by applicable law.

11. Contact

If you have questions about this privacy policy or how QuickSay handles your data, reach out at [email protected].