Privacy Policy

Last updated 2026-10-26

This policy describes how SayIt ("SayIt", "we") collects, uses and stores your data when you use the SayIt app and the https://sayit.run website.

1. What we collect

Account. When you sign in with Google or Apple we receive your email, display name and an identifier from that provider (Apple may give a private relay email). We never receive your password.

Content you create. Dictation history (clean text and raw transcript), Agent turns (request and reply), Agent memory (your writing preferences per app), your custom dictionary, the name of the app you were using, and usage figures (words, duration, number of actions).

Audio. Your voice is recorded while you hold the hotkey and sent to the speech-recognition service to be turned into text.

Context for the Agent. When you call the Agent, the app sends the content of the focused text field, the window title, the list of running apps and, only if you granted Screen Recording, a capture of the current window. Passwords, API keys, tokens and private keys are masked on your computer before anything leaves it; password fields are never read; password managers are never captured.

Payments. Card numbers are handled by the payment gateway; we receive only the order status, plan, transaction id and billing email. For bank transfers we receive the amount, transfer memo and transaction id from the reconciliation service.

Technical. A random device id generated by the app, app version, operating system, and server error logs (which never contain what you dictated).

Cookies on the website. https://sayit.run uses cookies that are necessary for the site to work and may use third-party cookies or measurement tags to count visits and measure advertising. Non-essential cookies are set only after you agree in the cookie notice; you can change your choice at any time through the "Cookies" link in the footer or by clearing cookies in your browser. The SayIt desktop app uses no advertising cookies.

2. Why

• To provide the service: recognition, cleanup, running the Agent, syncing history and memory across your computers.
• To count actions per plan, process payments and prevent abuse.
• Support, security and troubleshooting.

We do not sell your data.

2a. Data used to improve the models

• On the Free and Premium plans, the audio and text of your dictations (raw transcript and cleaned text) may be kept to train and evaluate SayIt's speech-recognition and text-cleanup models.
• Before anything is kept, passwords, API keys, tokens and other secrets are masked automatically; if a recording contains a spoken secret, its audio is not kept at all.
• The data is tied to an anonymous id, not to your email or name, and is used only inside SayIt for this purpose.
• You can turn this off at any time in the app: Settings → Training data. Nothing further is kept after that; to delete what was already kept, email [email protected].
• On the Business plan (teams), data from team members is never kept for this purpose.

3. Processors acting for us

To run SayIt we rely on a number of technology service providers (speech and language processing, sign-in, payments, infrastructure). They receive only the data needed for the work they do on our behalf, are bound by data-processing agreements and may not use your data for their own purposes.

4. Retention and deletion

• Dictation history keeps the latest 500 items, Agent turns the latest 60; memory and dictionary stay until you delete them in the app.
• Action counters expire with their period.
• Training data (section 2a) is kept for at most 24 months, or until you ask for deletion.
• Transaction records are kept as required by accounting and tax law.
• You can delete individual items in the app. To delete your whole account and data, email [email protected] from your registered address; we complete it within 30 days.

5. Security

Data in transit is encrypted (TLS). Servers run in a private network, databases are not exposed to the Internet and access keys are managed separately. The sign-in session on your computer is stored in the operating system keychain. No system is perfectly secure; if an incident affects you we will tell you.

6. Your rights

You can access, correct, export and delete your data, withdraw consent and complain to a supervisory authority. Most of this is available directly in the app (History, Agent, Dictionary, Account); for the rest, email [email protected].

7. Children

SayIt is not intended for people under 13. If you believe we hold data about a child, tell us and we will delete it.

8. International transfers

Our servers and storage are in Singapore; the processors in section 3 may process data in the United States or the European Union under their data-protection commitments.

9. Changes and contact

We may update this policy and show the date at the top; material changes are announced in the app. Questions: [email protected].