Privacy is a product boundary, not a setting.

Who is responsible

Fat Pitch Ltd is the controller for personal data it processes through SpeechBee, its website, support, and licensing service. Fat Pitch Ltd is a Cyprus limited company registered as HE 453319, VAT ID CY60036094H, with registered address Mesopotamias 8, Filippou Apartments, Flat/Office 19, Oroklini 7041, Larnaca, Cyprus.

Privacy questions and rights requests can be sent to support@speechbee.app.

The short version

SpeechBee does not sell personal data or use dictation to train AI models.

Audio stays in memory for local transcription and is not saved as a recording or sent to SpeechBee. Transcript text leaves the device only when you deliberately use a feature that says it will send that text to a provider you configured. Commerce, account, model-download, support, website-delivery, and optional iCloud services still require the limited processing described below.

SpeechBee may use service providers, including subscription-management, analytics, and advertising-attribution providers, to administer purchases and measure the effectiveness of marketing. Depending on platform permissions and applicable law, data may include app and device identifiers, advertising identifiers, IP address and network metadata, app activation, campaign and advertisement identifiers, and trial, subscription, purchase, renewal, cancellation, and refund events, together with product, price, currency, country, and timestamps. SpeechBee does not disclose audio, transcripts, dictated or selected text, keyboard or clipboard content, corrections, snippets, filenames, or provider keys for analytics or advertising.

Dictation and local data

Microphone audio is processed by the containing app on your Apple device. It is not saved or uploaded by SpeechBee. Transcripts, recent history, corrections, snippets, preferences, downloaded models, and Read Aloud content remain local unless you choose a disclosed sync, export, share, or provider feature.

On Mac, recent transcript history is held in memory and clears on quit. On iPhone and iPad, recent history is stored locally only when enabled and according to the retention choice in the app. SpeechBee never writes transcript content to its logs or licensing service.

Keyboard and Full Access

The iPhone and iPad keyboard requests Full Access only to exchange protected, short-lived voice commands and insertion results with the containing SpeechBee app through Apple's App Group storage. The keyboard extension does not access the microphone, make network requests, process purchases, or transmit what you type.

Without Full Access, the keyboard remains available for ordinary local typing, but its voice bridge to the containing app is unavailable. Temporary bridge data is removed after use, expiry, or local erasure.

Optional cleanup and Read Aloud

Optional Apple Foundation Models cleanup is off by default and runs on-device when Apple reports the model and language available. It receives the current locally cleaned transcript and a bounded instruction, not audio, history, account data, or your full correction collection. It never falls back to a cloud provider.

On Mac, optional Bring Your Own Key cleanup sends only the transcript you explicitly choose and a narrow instruction directly to the AI provider or compatible endpoint you configure. SpeechBee does not operate a proxy. Provider credentials are stored in Keychain; audio, history, correction collections, and account credentials are not sent as request content.

Read Aloud processes selected text and generated audio locally after a voice download. Selected text and generated audio remain in memory, are bounded, are not added to transcript history, and clear on terminal events such as stop, error, sleep, or quit.

Optional iCloud and file sync

You may enable private Apple iCloud sync for Dictionary corrections and Snippets. It is off by default. Apple's iCloud key-value service transfers only those bounded rules; audio, transcripts, recents, credentials, account tokens, and unrelated preferences are not included. SpeechBee does not operate an iCloud sync server.

You may also export, share, import, or choose a local correction file. If you place that file in iCloud Drive, Dropbox, Syncthing, or another synced folder, that provider transfers it under your arrangement with that provider.

Information processed off your device

• Account and authentication: Sign in with Apple enrollment material, opaque account identifiers, service-session information, and the information Apple makes available according to your Apple choice.
• Device and entitlement: an app-created device identifier, device platform, purchase identifiers and status, entitlement timing, and bounded security, rate-limit, and replay-protection records.
• Purchases: Apple or Stripe processes payment information. SpeechBee receives purchase identifiers, status, dates, and entitlement information needed to provide and restore access; Fat Pitch Ltd does not receive full card details.
• Model and voice downloads: the hosting provider receives ordinary request information, such as IP address, time, requested file, and network headers, when your device downloads a model or voice.
• Support: if you contact us, we process your email address, message, attachments, and related correspondence. Please do not include audio or transcript content unless it is necessary and you choose to share it.
• Website and licensing delivery: hosting and security providers process ordinary request metadata such as IP address, time, URL, user agent, and security signals to deliver and protect the services. SpeechBee's website may use cookies, pixels, and similar technologies for security, analytics, and advertising measurement, subject to consent where required by law.

Why we process it

Where the GDPR or similar law applies, we rely on the following legal bases:

• Contract: to provide account access, verify purchases and entitlements, manage devices, respond to service requests, and deliver features you request.
• Legitimate interests: to secure accounts and services, prevent fraud and repeated trial abuse, diagnose service failures without collecting dictation activity, and protect legal rights. We balance these interests against your rights and minimise the data used.
• Legal obligation: to keep records or respond where tax, accounting, consumer, sanctions, law-enforcement, or other law requires it.
• Consent or your explicit choice: for optional features where law requires consent, such as enabling private iCloud rule sync or deliberately sending a transcript to a provider you configure. You may withdraw that choice for future processing in the app.

Providers and disclosures

We disclose only what is needed to providers that help operate the requested service: Apple for Sign in with Apple, StoreKit, and optional iCloud; RevenueCat for purchase and subscription administration; Meta for advertising attribution and measurement; Cloudflare for website and licensing-service delivery and security; Stripe for direct billing; Hugging Face for model and voice downloads; the AI endpoint you configure for optional BYOK cleanup; and email or professional advisers where needed for support, accounting, compliance, or legal claims.

We may also disclose information if required by law, to protect rights or safety, or in a corporate transaction subject to appropriate confidentiality and data-protection obligations. We do not provide personal data to data brokers.

International transfers

Fat Pitch Ltd is established in Cyprus. Some providers may process information in the European Economic Area, the United States, or other countries where they operate. Where required, transfers outside the EEA rely on an adequacy decision, approved standard contractual clauses, or another lawful safeguard. You can ask us for information about the safeguard relevant to your data.

Retention

We retain personal data only for the purpose and period described here or as required by law. Local data remains until you erase it, its configured limit expires, or the app clears it as described above. Support correspondence is kept only as long as reasonably needed to resolve the request, maintain an appropriate support record, or meet legal obligations. Commerce and accounting records are kept for the period required by applicable law.

Licensing-service sessions are designed to expire after 30 days. Deletion-recovery records are retained for seven days so a lost successful response can be retried. Security, idempotency, and rate-limit records are removed on bounded scheduled windows.

If an account has prior subscription history, SpeechBee retains a permanent, domain-separated SHA-256 fingerprint of its Apple identity solely to prevent repeated introductory-trial eligibility after deletion and reinstallation. It contains no raw Apple identifier, SpeechBee account ID, email address, timestamp, transcript, or activity record and cannot restore the deleted account.

Deletion and your controls

You can disable recent history, disable private rule sync, request removal of its current iCloud copy, export supported local data, erase local data, sign out, and delete a SpeechBee service account where available.

Account deletion cancels an active direct Stripe trial or subscription before removing SpeechBee server identity links, device registrations, and entitlement links. It does not erase local app data or cancel an Apple subscription. Apple subscriptions must be cancelled through Apple. Because private rule sync is enabled per device, disable it on other devices that should not republish their local copy.

Your privacy rights

Depending on your location and the processing involved, you may have the right to be informed; access, correct, or erase personal data; restrict or object to processing; receive portable data; withdraw consent for future processing; and complain to a supervisory authority. These rights can have lawful exceptions.

Send a request to support@speechbee.app. We may ask for information reasonably necessary to verify the request. If you are in Cyprus or believe Fat Pitch Ltd's processing infringes the GDPR, you may also lodge a complaint with the Cyprus Commissioner for Personal Data Protection.

Security

SpeechBee uses measures designed to limit access and reduce risk, including local processing, data minimisation, Keychain storage for secrets, signed and device-bound entitlements, bounded records, transport encryption, and integrity verification for supported downloads. No system is perfectly secure, so we cannot guarantee absolute security.

Children

SpeechBee is a general-audience productivity tool and is not directed to children. We do not knowingly collect personal data from a child who cannot lawfully consent without the required parent or guardian authorisation. Contact us if you believe a child provided account data unlawfully.

Changes and contact

We may update this policy when SpeechBee, our providers, or the law changes. We will change the effective date and provide additional notice where required. Materially different processing will not be justified merely by editing this page.

Questions, complaints, and rights requests can be sent to support@speechbee.app.