1. Introduction
Safeclip is operated by Safeclip, LLC. Safeclip is a signed-in desktop application for macOS, Windows, and Linux that records, transcribes and writes notes on your computer. Your recordings, transcripts and notes belong to you and are stored on your computer. This policy explains what we do collect (account, license and billing data) and how we handle it.
2. What We Collect
We collect only the minimum information necessary for the application to function:
2.1 Account Information
No account is needed to use Safeclip. You only sign in to buy Founding, or to use it in the app. If you create an account, we store:
- Email address
- Display name (optional)
- Avatar image (optional, if you upload one; stored in our database with your account)
2.2 Your Notes and Projects
Recordings, transcripts, notes, and project data are stored on your computer. The app does not send your audio, transcripts or note content to our servers, and we do not store them. If you turn on cloud Ask with your own API key (Section 4), the question and library excerpts you send go directly to the provider you chose, not to us.
2.3 Session Information
Only while you are signed in, for authentication and licensing. Without an account the app sends no license check.
- Session tokens (used only for authentication)
- License status (to verify your plan on the desktop app)
- From the license check (when the app opens and about every 24 hours; for 30 minutes after you open the upgrade prompt, pricing or account page from the app, or open the app from a safeclip:// link, also when you switch back to it, at most every 2 minutes): a random installation ID created on your computer, the app version, your operating system, and the update channel
- IP address (temporarily logged for session management, not stored long-term)
2.4 Payments
If you buy the Founding License, Stripe processes the payment. We receive a record of the purchase (amount, date, and your plan). We do not see or store your card number.
2.5 Feedback
If you send feedback from the app, we receive your message, the app version and your operating system, linked to your account if you are signed in (without an account, it arrives without your name or email). Nothing is sent unless you press send.
2.6 Website Analytics
The safeclip.io marketing website measures visits in two ways. Neither runs in the desktop app.
Google Analytics 4 records:
- Page views on safeclip.io
- Download button clicks (by platform)
- Account signup completions
We turn on Google's IP anonymization setting and turn off ad-personalization signals, so this data is not used for ad targeting. Google processes it under its own policy.
Our own page-view log records, on our servers, for each page you load:
- The page, with tokens and IDs in the address removed, and the site's host name
- The referring page, without its query string
- Your browser's user agent
- Any utm_source, utm_medium or utm_campaign tags in the link
- A visitor ID: a keyed hash of your IP address and user agent that changes every day. It lets us count distinct visitors within a day. Your IP address itself is not stored.
These rows are kept for up to 365 days (bot traffic for 30 days). The desktop app has no analytics, and it does not send data to either of these.
3. What We Do NOT Collect
We do NOT collect or use:
- Your audio recordings, transcripts, or note content
- Precise location data
- Data for advertising, targeting, or remarketing
The desktop app has no analytics, telemetry or crash-reporting SDK. The marketing website uses Google Analytics 4, with advertising signals off, and our own page-view log. See Section 2.6.
4. Local Processing
Local AI processing by default: Transcription and AI summaries run on your computer. The app downloads its models the first time you open it, from Hugging Face (the Whisper speech model and the local AI model) and GitHub (app updates, speaker-detection models and helper tools). Those downloads do not include anything about you or your library. After that, audio, transcripts and the questions you ask the local model are not sent to our servers.
Cloud Ask (optional): Founding users can turn on cloud Ask with their own API key. It is off by default. When it is on and you choose Send to Cloud for a message, the question, the passages Ask found for it (short transcript excerpts and image text, labeled with recording title, timestamp, speaker and client name if filed), and up to the last four messages of that conversation go directly from your computer to the OpenAI-compatible endpoint you set, under that provider's terms. Your name and email are not included, and no audio or files are sent.
Link imports: If you paste a link to import, the app fetches that media and its thumbnail from the site that hosts it. The thumbnail is saved on your computer with the media, so showing the item or exporting an audiogram doesn't contact the site again. YouTube imports play in YouTube's privacy-enhanced embedded player (youtube-nocookie.com).
Local API (optional): If you turn on the local API, a script or MCP client on your computer that has its token can use Safeclip. If you also allow library access, it can read your recording titles, summaries, dates and transcripts. That client may send what it reads to its own provider; Safeclip does not control that. Both switches are off by default.
Once the models are downloaded, recording and transcription work offline. We cannot read your notes, because they are not transmitted to our servers.
5. Data Storage
Notes, recordings, and project data are stored on your computer. We do not store your content on our servers.
You own your data. You can delete your account and all associated account information at any time. Your note content lives only on your computer, so you delete it there. In the app, Delete removes an item together with its recordings, transcripts and the working copies Safeclip made of them, and Clear all local data (Settings, Data) removes your whole library, Safeclip's working files and its logs. Files you export to a folder you choose are yours to keep or delete.
6. Data Sharing
We do not sell or rent your data. We share account and billing data only with the service providers listed in Section 10, who process it for us.
Beyond those providers, we might access or disclose account data only:
- If required by law or court order
- To protect our rights or prevent illegal activity
The marketing website uses Google Analytics 4 for traffic measurement with ad personalization disabled. We do not use advertising networks or data brokers.
7. Cookies
We use session cookies for authentication, which are essential for the app to function. The marketing website also uses Google Analytics 4 cookies to measure site traffic. They are not used for advertising targeting. Our own page-view log sets no cookies. We do not use advertising cookies.
8. Your Rights
You have complete control over your data:
- Access: View your account information at any time
- Delete: Delete your account and associated account data at any time
- Export: Export your notes, transcripts, and projects from the desktop app
- Control: Your notes and recordings are stored on your computer, where you can delete them
9. Security
We implement standard security measures to protect your account information. Because Safeclip stores your recordings and notes on your computer, their security depends mostly on the security of your own computer. Use FileVault and a strong login password.
10. Service Providers
We use a small number of service providers that process data for us:
- Stripe: payment processing for the Founding License. Stripe receives your payment card data; we do not store it. Stripe's privacy policy governs their handling of payment data.
- Google Analytics 4: website traffic measurement on safeclip.io only. IP anonymization is on; ad-personalization signals are off. Google's privacy policy governs their handling of this data.
- Resend: sends account emails such as verification and password reset. It receives your email address.
- Linear: our issue tracker. Feedback you send from the app may be filed there.
- Our hosting and database: session tokens, account and license records are stored in our database for sign-in and licensing.
The desktop app also connects directly to a few third parties. They are not our processors; they see an ordinary request from your computer, under their own policies:
- Hugging Face: model downloads on first run (the speech model and the local AI model).
- GitHub: app update files, speaker-detection models and helper tools (on Windows, also the Whisper transcription engine).
- ffmpeg hosts: only if the ffmpeg copy bundled with the app is missing: ffmpeg.martin-riedl.de on a Mac, johnvansickle.com on Linux (GitHub on Windows).
- Microsoft: on Windows, the installer may download the WebView2 runtime if your PC doesn't have it.
- The cloud AI provider you choose: only if you turn on cloud Ask with your own API key.
- Sites you import from: only for links you paste, to fetch that media and its thumbnail once, at import, and for YouTube's embedded player.
- Clients you connect to the local API: only if you turn it on, and they may pass what they read to their own provider.
We use Google Analytics 4 for website traffic measurement only. We do not use advertising networks or data brokers. No personal information is sold or shared for cross-context behavioral advertising.
11. California Privacy Rights (CCPA / CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
- Right to Delete: Request deletion of personal information we have collected, subject to certain exceptions.
- Right to Correct: Request correction of inaccurate personal information.
- Right to Opt-Out of Sale or Sharing: We do not sell or share personal information for cross-context behavioral advertising. No opt-out is required.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise your rights, contact us at z@safeclip.io. We will respond within 45 days. We do not charge a fee for reasonable requests.
12. Children's Privacy
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last Updated” date.
14. Contact Us
If you have questions about this Privacy Policy, please contact us at:
Email: z@safeclip.io