Privacy
Last updated 26 August 2026 · v2
The short version. Your voice and your transcripts stay on your device. Tirona has no account system and no server that receives your dictation. Nothing at all is sent unless you switch something on — and even then, only counts, never anything you said.
This page describes what Tirona does with data on macOS and Android. It is written to be checkable: everything below can be verified by watching the app’s network traffic.
What stays on your device
All of it, unless you deliberately turn on one of the optional features described further down. Each of those is off until you switch it on.
| Data | What happens to it |
|---|---|
| Audio you dictate | Held in memory while you speak, transcribed by a model running on your own hardware, then discarded. It is never written to disk and never uploaded. |
| Transcripts | Stored on the device so you can see your recent dictations. You can clear them at any time from the app. |
| The field you dictate into | Read only to place the text and confirm it arrived. Password fields are excluded and never dictated into. |
| Calendar (optional) | If you enable it, Tirona reads meeting titles, times and attendee names, to spell names correctly. Descriptions and locations are never read. Nothing is written to your calendar and nothing is uploaded. |
| Notes folder (optional) | If you choose a folder, Tirona reads it to learn how you spell names. The notes themselves are never uploaded. |
When Tirona uses the network
Four times, three of which are not about your data at all.
- Downloading the speech model, once, on first run. This fetches model files from Hugging Face. It sends no information about you beyond what any file download requires.
- Checking for updates (macOS only). Tirona asks
downloads.tirona.appwhether a newer version exists. It is not switched on by default — Tirona asks you the first time, and you can decline and check manually instead. - Sending audio to your own Mac (iPhone only, optional). If you pair the iOS app with a Mac, audio travels over your own local network to that Mac and nowhere else.
- Cleaning up text with a language model (optional, off by default). If — and only if — you add your own API key for a provider such as OpenAI, Anthropic or a local Ollama server, the transcript is sent to that provider so it can be tidied.
Be aware of the last one. When you supply your own API key and turn cleanup on, your transcript leaves your device and goes to the provider you chose, under their privacy policy and not this one. We never see it, and we never receive your key — it is stored in your system keychain. If you would rather nothing ever left, leave this feature off; it is off until you configure it.
What we do not collect
- No account, sign-up, or email address is required or requested.
- No advertising, and no data shared or sold to anyone.
- No licence check that phones home. Licence keys are verified on your device using cryptography, not a server.
- No hardware or device identifiers, ever — including hashed ones.
Usage statistics, only if you turn them on
There is a setting called Help improve Tirona. It is off, and off means nothing is counted, stored or sent — not “collected quietly and held back”.
If you switch it on, once a day Tirona sends a short summary of totals:
- how many dictations you made, and roughly how many words (rounded to the nearest hundred)
- how many failed
- which speech model you use
- which optional features you used at all — cleanup, modes, batch, vocabulary, meetings
- app version, operating system version, and language
Counts, never content. No transcript or any part of one. No app names, window titles, file names, meeting titles or attendee names. Nothing you dictated and nothing you dictated it into. The whole report is a few hundred bytes — there is not room in it for anything else, and there is an automated test that fails the build if a future change tries.
It is tied to a random identifier generated when you install, so two reports from the same copy can be recognised as such. It is not derived from your hardware, it is not shared with anything else, and deleting the app’s preferences ends it permanently.
You can turn it off at any time and it stops immediately.
Feedback you choose to send
If you use Send feedback, we receive what you typed, the category you picked, your email address if you chose to give one, and the same version and system details listed above. Nothing is sent unless you press the button.
The website
tirona.app uses Cloudflare Web Analytics, which counts page views without cookies and without building a profile of you. It records aggregate figures — pages, countries, referrers, browsers — and does not identify individual visitors. That is why this site has no cookie banner: there are no cookies to consent to.
Accessibility permission
Tirona asks for Accessibility permission on macOS, and to run an accessibility service on Android. This is what allows it to place text into whatever field you are typing in, which is the entire function of the app.
It is used only to read which field currently has focus, to insert your transcribed text there, and to confirm the text arrived. It does not read, record or transmit the contents of your screen, and it does not run while you are not dictating. Password fields are detected and refused — Tirona will not type a transcript into one.
Children
Tirona is not directed at children and collects no personal information from anyone, including children.
Changes
If this policy changes in a way that affects what leaves your device, the change will be described in the release notes for the version that introduces it, not only here.
Contact
Questions about this policy: [email protected].