Privacy is a product boundary, not a setting.

Dictation data

Microphone audio is processed by the containing app on the Apple device and is not saved or uploaded by SpeechBee. Transcript and correction content is never sent to SpeechBee's licensing service or written to SpeechBee logs.

On iPhone and iPad, recent transcript history is stored locally when enabled. The keyboard exchanges short-lived commands and insertion results with the containing app through Apple's protected App Group storage.

Optional Apple cleanup

On supported iPhone and iPad devices, you may explicitly enable optional cleanup using Apple's on-device Foundation Models. It is off by default, availability depends on Apple Intelligence and Apple-managed model readiness, and SpeechBee never falls back from it to a cloud cleanup service.

The feature receives only the current deterministically cleaned transcript and a bounded selected-profile instruction. It does not receive audio, history, account data, host-app context, or the correction collection. Corrected words that occur in the current transcript can naturally appear in that input.

Raw, deterministic, and accepted output variants are retained for the current result. Keyboard variants may be stored briefly in protected App Group files for insertion and exact-context revert, then removed after consumption or expiry. Accepted output follows your normal local-history and optional iCloud-history settings. Explicit or lifecycle cancellation inserts and stores nothing.

Keyboard and Full Access

The iPhone and iPad keyboard requests Full Access only so it can exchange protected, short-lived voice commands and insertion results with the containing SpeechBee app through Apple's App Group storage. The keyboard extension does not access the microphone, make network requests, process purchases, or transmit what you type.

Without Full Access, the keyboard remains available for ordinary local typing, but its voice bridge to the containing app is unavailable.

Optional iCloud sync

You may independently enable sync for history, corrections, and preferences. Apple's iCloud key-value service transfers the selected categories. SpeechBee does not operate a sync server. Apple cleanup consent stays device-local and is not enabled through preferences sync. Disabling a category removes its app-owned cloud value; local data remains unless you separately erase it.

Network requests

Speech models download from Hugging Face when you choose an approved local model. Account and purchase verification may communicate with Apple and SpeechBee's licensing service. Direct web or Mac purchases may use Stripe.

The licensing service is limited to Sign in with Apple enrollment material, opaque account and device identifiers, purchase identifiers and state, entitlement timing, and replay-protection records. It does not receive audio, transcripts, corrections, selected languages, or dictation activity.

Retention and deletion

Signed service sessions are designed to expire after 30 days. Deletion-recovery records are retained for seven days so a lost successful response can be retried. Bounded security and idempotency records are removed on scheduled retention windows.

Account deletion removes SpeechBee server identity links, device registrations, entitlement links, and app-owned cloud sync records while preserving local app data. Erase Local Data is a separate on-device action that removes local history, corrections, settings, model files, and transient keyboard artifacts without deleting the server account or purchase records.

Your choices

You can disable history, disable any iCloud category, export local app data, delete your account, or erase local data. Apple and Stripe process commerce under their own privacy policies and legally required financial-retention rules.

Privacy and data requests can be sent to support@speechbee.app.