Privacy Policy

Effective 2026-06-24Last updated 2026-06-24

SpellKey ("the App", "we", "us") is a macOS menu-bar dictation app published by WEIBIN LIN, an individual based in Australia. This policy explains what the App does and does not do with your data. Contact: support@spellkey.app.

1Data processed on your device only

The following never leaves your Mac and is never sent to us:

• Voice / audio. Recorded only while a recording is active — you tap the trigger key to start and tap again to stop — and transcribed by speech-recognition models that run locally on your Mac (SenseVoice, and optionally FireRed or Qwen3 if you download them). Audio is held in memory for the duration of a recording and discarded after transcription. It is not stored as files and not transmitted to us.
• Transcribed text produced by fast dictation is pasted into the app you are using and is not retained by SpellKey beyond an in-memory list of your most recent transcripts. That list is memory-only, cleared when you quit SpellKey, and never written to disk.
• Selected text. In "selection" mode the App reads text you have selected in another app so it can act on it locally; this text is processed only as described in Section 2.
• Settings, usage statistics, and logs are stored locally on your Mac (in your Application Support folder and ~/Library/Logs/SpellKey.log).
• Your AI provider API key (if you use the BYOK feature) is stored in the macOS Keychain on your Mac and is never transmitted to us.

2Data you choose to send to a third-party AI provider (BYOK)

SpellKey's optional AI features (AI clean-up, translation, and acting on selected text) can run in two ways:

• Local model (on-device Qwen): the text is processed on your Mac and nothing leaves it.
• BYOK ("bring your own key"): if you configure your own OpenAI-compatible API endpoint, the relevant text (your dictated text and, in selection mode, the text you selected) is sent directly from your Mac to the AI provider you chose in order to produce the result. We are not a party to that request, do not proxy it, and do not receive or store that text. The privacy policy and terms of the AI provider you configure govern that data. You choose the provider and are responsible for reviewing its terms.

3Optional model downloads

If you choose to download an additional speech-recognition or local AI model, the App fetches model files over the network from the model's hosting source. This is a file download only; no personal data about you is sent in the request.

4macOS permissions and why they are needed

To function, SpellKey requests these macOS permissions. They are used only for the stated purpose and grant no data to us:

• Microphone — to record your voice while a recording is active (from when you tap the trigger key to start until you tap to stop), for on-device transcription.
• Accessibility — to paste transcribed text into the focused field and to read text you have selected.
• Input Monitoring — to detect your global trigger keys.

You can review or revoke these at any time in macOS System Settings > Privacy & Security.

5Purchases and payment

SpellKey is sold through Paddle.com, which acts as the Merchant of Record for your purchase. When you buy a license, Paddle collects and processes your payment and billing information under Paddle's Privacy Policy; we never receive or store your full payment card details. Paddle may share with us limited order information (such as your email address, country, and a record of your purchase) so we can deliver your download and provide support. We use that information only to fulfill and support your purchase.

6Analytics, tracking, and error reporting

SpellKey contains no analytics, advertising, or third-party tracking, and does not transmit usage data to us. If a future version offers an opt-in problem-reporting feature, it will be opt-in, will show you exactly what is being sent before sending, and will not include your dictated content. This policy will be updated before any such feature ships.

7Data retention and your rights

Because we hold essentially no personal data about you (only the limited order information from Paddle for purchases and support), there is little to retain. For purchase-related data, you may contact us at support@spellkey.app to ask what we hold, request a copy, or request deletion. Payment records held by Paddle are subject to Paddle's policy and legal retention requirements.

8Children

SpellKey is not directed to children under 16 and we do not knowingly collect data from them.

9International users

The App processes data on your own device. For purchases, Paddle processes data internationally as described in its policy. We handle the limited order information we receive in accordance with the Australian Privacy Principles; where applicable to you, we also honour rights under laws such as the GDPR.

10Changes to this policy

We may update this policy. Material changes will be reflected by the "Last updated" date above and posted at spellkey.app/privacy.

11Contact

WEIBIN LIN — support@spellkey.app

You keep the non-excludable consumer rights of your country of residence, regardless of anything in this document.