Privacy Policy

Effective date: July 9, 2026 · Last updated: July 9, 2026 · Operated by QuantSummit AI

1. Who we are

This Privacy Policy describes how QuantSummit AI (referred to as "we", "us", or "QuantSummit AI") collects, uses, and shares information when you use the SpeakDash desktop application (the "App"), the website at SpeakDash.app (the "Site"), and any related services (collectively, the "Service").

QuantSummit AI is registered at: [INSERT REGISTERED ADDRESS]. For privacy questions, contact our Grievance Officer at privacy@quantsummit.ai.

2. Information we collect

2.1 Information you provide

• Account information. If you purchase a paid plan, Razorpay or Stripe collects your name, email, billing address, and payment details. We receive payment status, your email, country where available, purchase amount, and license-delivery metadata — never your full payment details.
• Support communications. When you email us, we retain the message and our response.
• API keys (Personal & Lifetime tiers). If you use bring-your-own-key mode, the App stores your provider API key (e.g., Google Gemini key) in your macOS Keychain on your local device. Your key is not transmitted to us.

2.2 Information collected automatically

• App telemetry (limited). The App reports anonymous, aggregated usage events to our analytics provider: app launched, dictation session started, dictation session completed, settings opened, upgrade flow initiated. We do not log the contents of your dictation, the names of apps you dictate into, or any text you type.
• Crash reports. If the App crashes, a crash report containing device model, macOS version, app version, and a stack trace may be sent to our crash reporting provider. Crash reports do not contain audio or transcript content.
• Site analytics. The Site uses privacy-respecting analytics (e.g., Plausible) that does not set cookies or track individuals. We see aggregate page views and referrers only.
• License validation. The App verifies paid license keys locally using a public cryptographic key. Payment webhooks may create and email your license key after a successful purchase.

2.3 What we expressly do not collect

• We do not capture screenshots of your screen, ever.
• We do not log keystrokes outside of the dictation hotkey detection.
• We do not store the contents of your dictation on our servers.
• We do not store the audio of your dictation on our servers.
• We do not record what apps you dictate into.
• We do not use your dictation data to train models.

3. How dictation data is processed

3.1 On-device mode

When on-device mode is enabled (Personal & Lifetime tiers), your audio is processed locally on your Mac using an on-device Whisper model. Your audio does not leave your device. No transcript is sent anywhere. No metadata about the dictation is sent to us.

3.2 Cloud mode (SpeakDash Cloud)

When SpeakDash Cloud is enabled (the default for Free and Pro tiers), your audio is encrypted in transit and routed through QuantSummit AI's servers to our transcription provider (currently Google Gemini, via the generateContent audio endpoint). Our servers act as a pass-through relay: we do not log, store, or inspect your audio or transcripts — they are forwarded to the provider and the result is returned to your Mac. Per Google's API terms, audio submitted to this endpoint is not used for model training and is retained only for the duration of processing.

To enforce the free-tier daily limit, the App sends a random anonymous device identifier (a UUID generated on your Mac, not derived from your hardware or identity) with each request. We store only a per-day usage counter against this identifier — never the content of your dictations. Paid users' license keys are verified with the same request; we do not build usage profiles.

3.3 BYO key mode

If you use bring-your-own-key mode, your audio is sent directly from the App on your Mac to the provider whose key you configured (e.g., Google or OpenAI). It does not pass through QuantSummit AI's infrastructure. The provider's privacy policy applies to that data.

3.4 Hands-free wake word (optional)

Hands-free mode is off by default and requires an explicit opt-in inside the App. When enabled, your microphone stays on and Apple's speech recognition continuously listens for your chosen wake word. On Apple Silicon Macs this recognition runs fully on-device — the listening audio never leaves your Mac. Nothing is stored and nothing is transcribed until the wake word is heard; only then does a normal dictation begin under the mode you've chosen above. The macOS microphone indicator remains visible whenever listening is active, and you can turn hands-free off at any time from the menu bar or Settings.

4. Legal bases (for users in the EU/UK/EEA)

Under GDPR, we rely on the following legal bases for processing:

• Contract — for processing necessary to deliver the Service to you (license validation, payment).
• Legitimate interest — for limited telemetry, crash reporting, and security.
• Consent — for any optional processing such as marketing emails. You may withdraw consent at any time.

5. Subprocessors

We use the following third-party services to operate the Service. The current authoritative list lives at /subprocessors.html.

6. Data retention

• Account / billing records: 7 years (tax compliance).
• Anonymized telemetry events: 13 months, then aggregated.
• Crash reports: 90 days.
• Audio & transcripts: not retained — discarded after processing.
• Support emails: 24 months after last reply.

7. Your rights

7.1 If you are in the EU/UK/EEA (GDPR)

You have the right to: access your data, rectify inaccurate data, delete your data, restrict processing, data portability, object to processing, and lodge a complaint with your local supervisory authority. To exercise any right, email privacy@quantsummit.ai. We respond within 30 days.

7.2 If you are in California (CCPA/CPRA)

You have the right to know what personal information we collect, delete it, correct it, opt out of any sale or sharing (we do not sell or share for cross-context behavioral advertising), and not face discrimination for exercising rights. We do not "sell" personal information as defined by CCPA.

7.3 If you are in India (DPDP Act 2023)

Under the Digital Personal Data Protection Act, 2023, you have rights to access, correction, erasure, and grievance redressal. Our designated Grievance Officer is reachable at privacy@quantsummit.ai. We respond within 30 days.

8. International data transfers

Because the Service is operated globally, your data may be transferred to, stored in, and processed in countries other than your country of residence, including the United States and the European Union. Where required, we rely on Standard Contractual Clauses (SCCs) and equivalent safeguards.

9. Security

We implement administrative, technical, and physical safeguards designed to protect your information, including TLS 1.2+ for all transit, encryption at rest for billing data, restricted access controls, and quarterly security reviews. No method of transmission or storage is 100% secure; if a breach occurs, we will notify affected users within 72 hours where required by applicable law.

10. Children

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we learn we have collected such information, we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. If changes are material, we will notify you by email or in-app banner. The "Last updated" date at the top reflects the most recent revision.

12. Contact

QuantSummit AI
[INSERT REGISTERED ADDRESS]
Email: privacy@quantsummit.ai
Grievance Officer (DPDP): privacy@quantsummit.ai