Privacy policy

Plain-language draft — last updated November 10, 2026

Justsaid Pro is coming soon and isn't on sale yet. Anything here about Pro applies once it launches.

This policy covers Justsaid and justsaid.app, run by Just Page, LLC. The short version: we don't store dictation audio or text, there is no analytics on this site and no third-party analytics in the app, and we keep only what an account needs. App versions with sign-in also send usage counts, never content (see "Signing in from the app").

The app

Local models. Dictation runs on your device and the audio stays there.
Your own API key. Audio and text go straight from the app to the provider you picked, under that provider's terms. Your words never touch our server. Your keys stay in a config file on your computer.
Writing tools. Polish, Grammar, Translate, Explain, Pronounce and meeting summaries have no on-device model yet, so the text goes to your writing provider, even when dictation is on-device. If a writing request fails, the app can re-send it to a fallback provider, automatically by default, and you can turn that off. Speak is the exception: it uses your system voice and sends nothing.
Meeting notes. Meeting audio is always transcribed on your Mac. Only the transcript text goes out, for the summary.

Your dictation history stays on your computer, and you can clear it. Versions of the app without sign-in have no telemetry, no analytics and no account of their own; versions with sign-in also send what "Signing in from the app" below describes.

The app also makes two contacts that carry none of your words. It checks downloads.justsaid.app for updates shortly after launch and every 6 hours, and on-device models download from Hugging Face when you ask for one or on first use. Those services see ordinary request details such as your IP address.

Pro

Pro isn't live yet. This describes how it will work when it launches.

On Pro, your words pass through our server and stop there. When you dictate, the audio goes to our server, which forwards it to the speech provider (Groq) and the text to the writing provider (Anthropic). Nothing is saved: audio and text exist only in memory for the length of the request. We keep counts, not content: minutes dictated and number of requests per day, which we need to run your plan and the fair-use limit. On the free options nothing touches our server at all.

That covers our server. The providers set their own rules for requests that reach them. Groq says it doesn't keep inference requests by default, but it may log inputs and outputs, speech included, for up to 30 days, or longer if the law requires it, to fix reliability problems or investigate abuse. Anthropic says it deletes API inputs and outputs within 30 days, with exceptions such as legal requirements, and it may keep content flagged as breaking its usage policy for up to 2 years. On the free options, your words never reach our server, though the app does check it for updates.

This website

There is no analytics of any kind, and the home page loads nothing from third parties. Our only cookies are the ones that sign you in and keep you signed in, and Paddle's checkout on the account page may set its own. The demo on the home page uses your browser's own speech recognition where the browser has it, and your browser's maker may run that on its servers. In other browsers, or if listening fails, it plays a prewritten sample and uses no audio. Either way, what you say in the demo doesn't reach us.

What we keep for an account

Your email address and how you sign in
Your plan, and subscription and payment records from Paddle: amounts, tax, fees, dates and status
Trial minutes and, once Pro launches, usage counts: minutes dictated and requests per day
If you sign in from the app: your signed-in devices and the app's usage counts, described in the next section
Records of anything we do to your account, such as extending a trial, in our admin log

We never see your card number. Paddle handles it.

This section applies to versions of the app that have sign-in. Versions without sign-in send none of it. You sign in through your web browser on this site, and the app then gets its own sign-in for your account.

Your signed-in devices. For each computer you sign in on, we keep:

a random id the app creates for that installation
the platform (Mac or Windows), the operating system version, the app version and build number, and the processor type (ARM or x64)
whether the app came from our website or the App Store
a device name, "Mac" or "Windows PC" unless you rename it. The app never sends your computer's own name.
when the device first signed in, when you last signed in for it in the browser, when it was last seen, and the country it was last seen from, as a two-letter code from our host's location lookup. We don't store your IP address with your devices or usage counts.
if it was signed out: when, and why (from the app or your account page, by us, by another account signing in on that computer, or because an old sign-in token was used again)
the app's sign-in tokens, stored only in a scrambled (hashed) form that can't be turned back into a token

While you sign in, the website also keeps a one-time code for the app, stored hashed, with the device's random id, the app's return address and when you signed in. It works for 5 minutes and is deleted one to two days after it expires.

Usage counts. Per device and per day (UTC), the app sends how many times you used dictation, each writing tool and selection action (by name, such as Polish or Translate) and meeting notes; which provider and model each one used (such as Groq and a model name, or "local" for on-device); and the numbers that go with them: words dictated, words into and out of the writing tools and selection actions, seconds of dictation audio, and minutes of meetings. Words are counted on your device, and the text itself is never sent.

Never sent: dictation audio, transcripts, prompts, the text you select, meeting audio or notes, your clipboard, window titles, the names of other apps, and file names. Our server accepts only the fields listed above, plus a random id on each batch of counts, kept for 30 days, so a batch sent twice isn't counted twice.

Why we keep it. Your account and devices are needed to provide the service: to sign the app in, give it your plan, and let you see and sign out your devices. We keep usage counts on the basis of our legitimate interest in running Justsaid and pricing Pro: they hold no content, and they show us which features, providers and app versions are used.

Your choices. The app explains usage counts when you first sign in. You can turn them off in the app's Settings, under Usage counts, on each device; while they are off, that device sends none. Your account page lists your signed-in devices, and you can sign any of them out there. We see the same devices and counts in our admin pages.

How long we keep it. A daily job deletes usage counts once they are 25 months old, and a device's record 12 months after that device was signed out. A device that is never signed out but stops being used is deleted 12 months after its sign-in lapses. The sign-in lasts 90 days from the last time the app renewed it, which it does whenever it runs online, so that is about 15 months after the app last connected to us. Deleting your account deletes all of this at once: your devices and usage counts go with it.

Who processes data for us

Paddle runs checkout and billing as our merchant of record.
Supabase hosts our database and sign-in.
Vercel hosts this site.
Resend sends our sign-in email.

Like any web service, they handle technical data such as IP addresses to do this. If you sign in with Google, Apple, Facebook, Microsoft or GitHub, that company handles that sign-in. We don't sell your data.

Deleting your account

You can delete your account from your account page, or ask us to at support@justsaid.app. That cancels any active subscription immediately and deletes your sign-in, profile, subscription records, grants, the stored billing events tied to you, and your signed-in devices and usage counts from the app.

Some records remain. We keep payment rows for our revenue history, with the link to you removed. Paddle keeps its own invoice records as the merchant. Our admin log keeps its past entries, and if we delete an account for you, it keeps the deleted user's id and email as a record of the deletion.

Questions and changes

To ask what we hold about you, or to correct it, email support@justsaid.app. If this policy changes, we'll update the date at the top of the page.