v2.3.1

Privacy Policy

Last updated: February 11, 2026

1. Introduction

This Privacy Policy explains how CosmoWhisper ("the App") handles your data. We are committed to protecting your privacy and ensuring you have a transparent understanding of how the App functions.

2. Data we collect and store

Personal Information

We collect and store only the minimal information necessary to provide the service:

  • Account Data: Your email address and a hashed version of your password (for secure login).
  • Subscription Status: Your current tier (Free, Pro, or Ultimate) and any associated PayPal Subscription IDs.
  • Usage Statistics: We log the duration (in milliseconds) of each transcription to track your monthly usage against plan limits. We do NOT log or store the transcribed text itself.

Audio Data (Ephemeral)

The App requires access to your microphone to capture voice audio for transcription.

  • Secure Transmission: Audio data is transmitted securely (HTTPS) to our AI processing partners.
  • No Storage: We do NOT store or record your audio files on our servers. Processing is ephemeral and data is discarded immediately after transcription.
  • Zero Training: Your voice data is never used to train our AI models or third-party models.

Local App Data

To provide "Push-to-Talk" and "Dictate Anywhere" features, the Windows application monitors specific hotkeys locally.

  • Local Only: This input monitoring occurs exclusively on your local machine.
  • Privacy: Hotkey usage and simulated keyboard input are never transmitted or stored on any server.

3. Third-Party Services (Sub-processors)

CosmoWhisper utilizes industry-leading third-party AI providers for transcription and intelligence. These providers act as sub-processors:

  • Groq & OpenAI: We use these APIs to provide high-accuracy transcription. Voice data is encrypted in transit.
  • Zero Data Retention (ZDR): We use Enterprise-grade API endpoints that guarantee Zero Data Retention. Your audio and text data are processed ephemerally and are NOT used for model training or stored longer than 24 hours (only for debugging if enabled).

4. GDPR Readiness (European Users)

Under the General Data Protection Regulation (GDPR), users in the European Economic Area (EEA) have the following rights:

  • Right to Erase: You can request that we delete all your account data.
  • Right to Access/Portability: You can request a copy of the data we hold about you (primarily your email and usage logs).
  • Right to Rectify: You can request corrections to any inaccurate data.

5. CCPA/CPRA Disclosure (California Users)

In accordance with the California Consumer Privacy Act (CCPA):

  • No Sale of Data: CosmoWhisper does NOT sell, rent, or trade your personal information to third parties.
  • Right to Know: You have the right to know what personal information is collected and how it is used.
  • Right to Delete: You have the right to request deletion of your personal information.

6. Data Deletion Requests

If you wish to delete your account and all associated data, please send an email to louisdesouza@gmail.com with the subject "DATA DELETION REQUEST" from your registered email address. We will process your request within 30 days.

7. Permissions

The App requires "Full Trust" permissions on Windows to function as an assistive utility:

  1. Global Hotkeys: To listen for your "Push-to-Talk" trigger (e.g., Caps Lock) even when other applications are in focus.
  2. Input Simulation: To insert transcribed text into your active application via simulated keyboard events.
  3. Process Management: To launch applications based on your specific voice commands.

8. Changes to This Policy

We may update our Privacy Policy from time to time. Significant changes will be announced on this page.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: louisdesouza@gmail.com