Your words, handled with care.

This notice describes the application’s implementation. The deployment operator must add their identity, contact details, and applicable retention policy before a public launch.

Audio processing

Audio is captured only after you grant browser permissions. PCM audio is processed in a local worker using Whisper. Audio is never uploaded. Before a transcription starts, you explicitly enable temporary on-device buffering. Pending windows are stored as PCM in this browser’s IndexedDB so recognition can fall behind without pausing capture. Successfully processed audio is deleted after its text is checkpointed locally. Failed or unprocessed windows remain until retried, discarded, deleted, or signed out. This is not a downloadable meeting recording. Screen video is never stored, rendered or transmitted. The audio test keeps only short-lived memory buffers and does not store audio.

What is stored

Google supplies your profile name, email, picture URL, and provider identifier. The server stores account records, OAuth tokens as required by the authentication adapter, session records, preferences, transcript text, original recognition text, approximate timestamps, meeting titles, and metadata. Transcript text is sent to this deployment over your connection when saved. Deploy over HTTPS.

Finishing or skipping the guided tour is saved as an account preference so it does not keep appearing. A copy of that choice is kept in local storage for this account, and an active-tour marker may be kept in session storage while opening the setup page. These contain no audio or transcript text. Sign-out clears this browser’s tour preferences; account deletion removes the server preference.

Administration and usage

The application owner can view registered names, email addresses, join dates, and saved usage totals in a restricted administrator dashboard. It uses existing account and transcript metadata. The dashboard does not display transcript content, meeting titles, audio, OAuth tokens, or session tokens. It does not collect visits, IP addresses, device fingerprints, or new tracking identifiers. Hosting and database administrators retain their separate infrastructure access.

Deleting an account or transcript removes it from these usage figures. Service checks make server-side requests to this deployment and the bundled model URLs; they do not upload user content or measure historical uptime.

Other network requests

Your browser contacts Google to sign in. The default Fast speech model, speech filter and runtime are served from the application’s own domain. Fast files download in the background after sign-in; this does not access audio or request recording permissions. Public model files may stay in the browser’s cache after sign-out or account deletion. They contain no account or conversation data, and browser storage eviction or clearing site data can remove them. Choosing the optional Detailed model downloads its public files from this application’s domain too. Neither production speech model needs a third-party model host. There is no analytics integration or paid speech API.

Temporary recovery and deletion

Completed text that needs saving is kept in browser local storage under your account and transcript identifiers. Saving successfully removes the draft. Buffered sessions also checkpoint recognized text in IndexedDB; those checkpoints are removed after a final successful server save. Recover local sessions from New transcription in the same browser and account. Recovery never restarts audio capture. Local data is not encrypted by this app and is accessible to someone with access to your browser profile. Browser eviction, private-mode closure, device failure, or clearing site data can remove it. The last incomplete window may not survive an abrupt close. Sign-out clears this browser’s audio buffers and recovery drafts. Deleting your account deletes its transcripts and authentication records from the active database. Drafts on other devices and provider backups cannot be remotely erased by this application; clear browser site data and consult the deployment operator’s backup policy.

Limits and consent

Local processing does not guarantee perfect confidentiality or accuracy. Device access, hosting administration, extensions, and backups are outside this application’s control. Obtain participant consent and follow applicable rules before capturing a conversation.