Privacy here isn't a setting you find or a promise you trust. It's the architecture.
Speech becomes text on the Apple Neural Engine. No server, no round-trip, nothing in flight to intercept. Turn off Wi-Fi and it works exactly the same.
Captured, transcribed, and sealed without ever leaving your Mac.
Speech runs on your Mac's Neural Engine. No cloud, no server, no round-trip.
Every note sealed with XChaCha20-Poly1305, keyed with Argon2id. The only plaintext is a random id.
Keys born on your device, released only by your Touch ID. We never receive them.
Audio is overwritten in RAM the instant it's text, and the app blocks its own crash dumps.
Delivered as synthesized keystrokes, straight where you're focused. Never touches the clipboard.
Deleting destroys the key. The ciphertext is mathematically gone, not marked deleted.
Turn on Pro backup and your notes are sealed on your Mac before they ever reach us. Our servers hold only ciphertext. Your passphrase never leaves your device, so we can't reset it, read it, or be made to hand it over.
Optional Pro backup, built so we hold nothing we could read, lose, or be forced to hand over.
Notes are encrypted on your Mac before they ever reach us - our servers store only sealed blobs. Your passphrase never leaves your device; we can't reset it, because we never have it.
A keyring we can't open. No email, no password on our side - just an 8-character ID. Nothing to phish, nothing to leak in a breach.
Lock the app and it goes write-only. A meeting that ends while you're away still lands, sealed to a key only your next Touch ID can release.
Two word-pairs, from any browser, destroy every key we hold and wipe each device the next time it's online. No confirmation, no undo - we can't stop it either.
Two word-pairs wipe every key we hold and erase each device the next time it comes online. No confirmation, no undo. We can't stop it either.
Every download is signed with our Developer ID and notarized by Apple. Check it yourself, locally.