Privacy policy

Your data belongs to you. We never touch it.

Updated 15 October 2026. Applies to the Talk2me app and to this website, talk-2.dev.

The short version. Talk2me has no account, no ads and no tracking. With a voice model on your computer (the default), your voice never leaves your machine. We never receive your audio, your words, your files or your keys, so we can't train on them, sell them or lose them. We never will.

1. What we keep, and why

#WhatWhyHow long
1Your email and platform, only if you join the waitlistTo send you an inviteUntil you remove it (one click on the home page) or ask us to
2Invite codes, and each time one is used: when, approximate location (city and country, from the network), device type, operating system, browser, screen size, processor cores, memory and graphics chip. No IP address.To run the private beta and learn which machines to supportFor the beta. Linked to a person only if we sent that person the code
3One cookie, after you unlock the downloadTo keep the download open in that browser30 days, or until you press "Lock this browser"
4Visit totals: day, page, referring site, country, desktop or mobileTo know which pages help peopleKept as totals. No cookie, no IP address, nothing that identifies you
5Step totals: how many times the invite panel was opened, the waitlist form was sent or failed, a code worked or failed, and Download was pressed or finished. Counts per day, nothing else.To find where people get stuckKept as totals. No email, no code, no identifier
6A rough count of visitors per day, from a one-way hash of address and browser. The hash changes every day and is deleted the next day; only the number stays.To know how many people visitThe hash: at most 2 days. The number: kept
7Download totals per day: system, version, chip and country, and whether the file finishedTo know which builds people getKept as totals. No identifier
8Emails you send usTo answer youAs long as needed to help you
9Feedback you send from the app: your text, your email only if you type it, and the app and system versionsTo read it and answer youUntil you ask us to delete it

That is the whole list. No voice, no words, no files, no keys, no IP addresses, no device IDs, no advertising profiles.

2. The app

  1. On your machine. With a local voice model (the default choice at setup), Talk2me turns your audio into text on your computer. The audio never leaves it.
  2. In the cloud, only if you pick it. With a cloud voice model or cloud text cleanup, Talk2me sends the audio or text straight from your computer to the provider you chose, with your own API key. It never passes through us. That provider's policy applies. Words in your personal dictionary go along, so the provider spells them your way.
  3. Tags on every route. Settings tags each route: 100% private runs on your machine; Private · ZDR is a cloud provider that keeps nothing (Zero Data Retention); Not private is a cloud provider that may keep data for a while.
  4. Strict privacy. One switch in Settings keeps every step on your machine.
  5. Never used for training. We never receive your voice or your words, so we can't train AI on them. Not with your consent, not anonymized, not later.
  6. What stays on your machine: API keys (in your system keychain), settings, your results (you choose how long; by default until you quit), and an optional local diagnostics log that is off by default and never holds what you said.
  7. Usage counts, only if you say yes. From version 2.21.12, Talk2me asks you once whether it may send anonymous usage counts. Until you say yes, it sends nothing, and older versions send nothing at all. If you say yes, it sends event names and ranges (for example "a dictation of 5 to 15 seconds"), with the app version, system version, chip and language. It uses a random install number that you can reset in Settings. Never your audio, your words, your files or your name. Saying no, or resetting the number, deletes what we hold under the old number. The full list is in section 2a. Settings shows what was sent.
  8. Crash reports, same choice. If you said yes to usage counts, a crash sends the error type, the names of the functions involved and a message with file paths and names removed. Never what you dictated.
  9. Feedback, only when you press Send. The Send feedback box sends your text, your email if you typed one, and the app and system versions. Logs are not included unless you tick the box.
  10. Model downloads. The voice model picked at setup downloads during the tour. Any other model (other voices such as Granite, or the cleanup models BudgieScribe and Qwen3.5) downloads only when you ask for it, from Hugging Face or GitHub. Each file is checked against a fixed SHA-256. The request carries nothing about you, and these models run on your computer.
  11. Update checks. At launch, at login and once a day, Talk2me asks for one small signed file. The request carries nothing about you. An update downloads only when you press Update now, and Talk2me checks its signature and checksum first.

2a. Everything the app may send (only after you say yes)

Show the full list of event names
#EventWhat it carries
1app_installed, app_launched, app_active_dayNothing more. One app_active_day per day at most, to count how many installs are in use.
2onboarding_step, onboarding_completedWhich setup step.
3permission_granted, permission_deniedMicrophone or Accessibility.
4provider_selected, model_downloadedLocal or cloud, the provider or model name, a size range. Never a key.
5dictation_first, dictation_completed, dictation_failedRanges for length, word count and speed, the provider, a short error code. Never the words.
6update_available, update_installedThe two versions.
7upgrade_viewed, checkout_started, license_activated, license_failedThe plan, when there is one.
8hotkey_changed, settings_changedThe name of the setting, never its value.
9feedback_sent, telemetry_opt_in, telemetry_opt_out, app_crashedThe error type, for a crash.

Every event also carries the random install number, the app version, the system and its version, the chip and the app language. No IP address is stored. Never audio. Never what you say or write.

3. Cookies

No tracking cookies. No advertising cookies. No third-party cookies. We believe in privacy, and that privacy should be convenient too. That's why there is no consent pop-up: there is nothing to consent to.

  1. One strictly necessary cookie, __Host-t2s, set only after you enter a valid invite code. It holds a code number and a signature, so the download stays open in that browser for 30 days.

4. This website

  1. No third parties. Every script and font is served from talk-2.dev. Nothing from Google, nothing from ad networks, no pixels, no session replays, no fingerprinting.
  2. Visits counted, people not. We count page views, and the steps of the signup, as totals per day. We don't set a cookie for it and we never store your IP address or browser details. To estimate how many different people visit in a day, we make a one-way hash of the address and browser. The key changes every day, the hash is deleted the next day, and only the count stays. Visits from search crawlers, AI agents and scanners are counted apart.
  3. The steps we count. site_invite_open, site_waitlist_submit, site_waitlist_error, site_redeem_ok, site_redeem_fail, site_download_click and site_download_complete. Each one is a number for the day. No email and no invite code is part of it.
  4. Abuse protection. To stop brute-force attempts on invite codes, the site counts attempts per address for one minute, in memory, and never writes it down.
  5. Hosting. This site and its database run on Cloudflare, in North America. Like any web host, Cloudflare handles each request to deliver it and protect it; see Cloudflare's privacy policy. We have turned off request logging in our own code and Cloudflare's analytics script on our pages.

5. Your rights

Talk2me is built in Canada and follows Canadian privacy law (PIPEDA, and Quebec's Law 25). Wherever you live, you can ask us what we hold about you, correct it, or delete it. For the waitlist, you don't even need to ask: "Remove my email" on the home page (under "What happens to my email?") deletes it at once. For anything else, write to privacy@talk-2.dev. We answer within 30 days, usually much sooner.

6. Changes

If our practice changes, we update this page first, and the date at the top changes with it. We will never quietly start collecting more.