Privacy.

The short version

Everything you say to WrapScribe is processed on your Mac and stays there. Your account on our side holds an email address, a name for each of your Macs, which licence you redeemed, per-day word counts, and your preferences — enough to activate you and keep your streak, and nothing that could reconstruct a single sentence you dictated.

We do not sell data, and there are no ads. Nothing in the app watches you. The website is measured — which pages get read, which buttons get pressed, which visits end in a purchase — and that is set out in full under Analytics, including the three things it is built never to record.

Who we are

WrapScribe is made by Shri Prasanna, an independent developer based in India, and that is who is responsible for the data this page describes. For anything about your data — a question, a copy, a deletion — email support@wrapscribe.com. A person reads it.

What never leaves your Mac

Transcription, cleanup, meeting notes and every AI feature run on your Mac, on Apple’s on-device models or on local models you download. Consequently:

• Audio — dictations, meeting recordings, system audio — is captured, processed and stored locally.
• Transcripts and notes, of dictations and of meetings, live in files on your Mac.
• Your dictionary, snippets, transforms and history live in the app’s local storage.

This is not a policy decision we could quietly reverse — it is how the service is built. Our API has no endpoint that accepts audio or transcript content. There is nowhere for your words to go.

What your account holds, and why

Activating WrapScribe creates an account. It holds:

• Your email address — it is what your licence is bound to, how you sign in, and where your key is sent.
• A name and identifier for each activated Mac — so seats can be counted, and so you can tell your machines apart when one needs freeing.
• Your licence keys and plan — which keys you own and what they unlock.
• Per-day word and dictation counts — bare numbers, one row per day, so your stats and streaks follow you to a second Mac. Never the words themselves.
• Your app preferences — a settings blob, so a fresh install can pick up where you left off.
• The IP address an AppSumo code was redeemed from — recorded when you redeem one, kept for 90 days so a refund dispute can be settled, and then deleted.

That is the complete list. Signing in works by a six-digit code emailed to you; the codes are stored hashed and expire in ten minutes.

When you buy

Checkout is run by Dodo Payments, the merchant of record. Your card number, billing address and tax details go to Dodo and never touch our servers; their privacy policy governs that data. What we receive from them is the fact of the purchase: your email address, a payment reference, the plan you bought, and the amount — what we need to mint your key, email it to you, and honour a refund.

If DataBull, one of our two analytics tools, is running for you (see Analytics), the Buy button adds its two random ids — one for your browser, one for the visit — to the checkout link, and Dodo stores them with the payment. DataBull, which we run on our own Cloudflare account, reads our payments from Dodo into its own database: the product, amount, currency, tax and date, the buyer’s name, email address and Dodo customer id, any subscription id, and that metadata. That is how a sale is counted and tied to the visit that led to it. It is a copy of our own sales records, held by us; nothing about it is sent by your browser.

Email

Sign-in codes and licence keys are sent through a transactional email provider from support.wrapscribe.com addresses. Replies go to support@wrapscribe.com. Those two are part of the product working and will always arrive.

We also occasionally email people who have an account or a licence about WrapScribe itself — a new feature, an offer, a nudge if you paid and never activated your key. Every one of those carries an unsubscribe link that works in one click and needs no sign-in, and your address is never sold, rented or shared with anyone for their own marketing. Unsubscribing stops that mail and nothing else: your sign-in codes and licence keys keep coming, because you would be locked out of what you bought otherwise.

These emails carry no tracking pixel and no rewritten links, so we do not know whether you opened one.

This website, and the plumbing

The site and the activation API run on Cloudflare, and your account data lives in a database there. Like every server on the internet, ours see connection details — IP addresses among them — which appear in short-lived rate-limit counters and infrastructure logs to keep abuse out. They age out on their own; we do not build profiles from them.

The site loads no fonts, no pixels and no third-party assets. Every script it runs is served from wrapscribe.com, including the two analytics ones — see below.

Analytics

The website is measured with PostHog: which pages are read, which buttons are pressed, and a recording of how the page was used with every input field masked before it leaves your browser. It exists to show us which parts of the site are worth writing and which are being skipped. The app itself carries none of this.

PostHog is served from wrapscribe.com rather than from PostHog's own domain, so your browser opens no connection to anyone but us. The data still reaches PostHog, who process it on our instructions and for nobody else.

The website is also measured with DataBull, which counts visits and where they came from so that a purchase can be tied to the visit that led to it. DataBull is software we run ourselves, on our own Cloudflare account, and it is served from wrapscribe.com as well, so for it too your browser opens no connection to anyone but us. What reaches it is the address of the page, the address you came from, your screen and window size, your language and time zone, two random ids it makes up itself, when it first saw your browser and how many visits it has made, plus a short signal about once a minute while the page is open and in view, so a visit’s length can be measured, and, as you leave a page, how far down it you scrolled and how long you actively read it. Our server adds your browser’s user agent and the coarse location Cloudflare reads from your connection — country, region, city and network, never coordinates. Your IP address is passed on only to limit how often one connection may send, and DataBull does not store it.

DataBull keeps its ids in cookies on wrapscribe.com. datacheap_visitor_id, the random id for your browser, and datacheap_visitor_first_seen_at and datacheap_visitor_session_count, when it first saw that browser and how many visits it has made, last a year. datacheap_session_id, the id for the current visit, and datacheap_session_source, the campaign tags, ad-click id or referring site the visit arrived with, last 30 minutes, renewed while you browse; what is in that last one stays in the cookie and is passed to neither tool. It also keeps the last page it counted, and when, in your browser’s session storage, which goes when the tab closes, so that a reload is not counted twice. It does not run at all on the pages that show a licence key, or on the page you return to after checkout.

Three things are never recorded from your browser, by construction rather than by promise. Anything you dictated, which never leaves your Mac at all. Your licence key — the pages that display one have recording and click-capture switched off entirely, and DataBull does not run on them. And the payment reference from your receipt: every address is stripped of its query string, campaign tags apart, before an event is written — for DataBull, on our server before anything is passed on — so the page you land on after checkout is recorded as plain /thanks and nothing more. In its place, the checkout link carries DataBull’s two random ids, as When you buy describes.

In the EEA, the UK and Switzerland, nothing is stored in your browser until you answer the banner, and DataBull is not even loaded. Accept it and both tools run. Reject it and the only thing kept is the fact that you said no, so we do not ask again. PostHog still counts your visit, by a hash computed on the server from a value that changes daily and is then discarded, which identifies nobody and follows you nowhere; DataBull does not run at all, so it neither stores nor counts anything, and any DataBull cookies an earlier visit left behind are deleted. Everywhere else, both tools set their cookies when you arrive; clearing them makes you a new visitor.

How long we keep things

• Your account and everything in it — for as long as you keep it. Ask and we delete it.
• Purchase and licence records — for as long as refunds, fraud prevention and the tax man require. Dodo keeps the actual payment records under their own rules.
• Sign-in codes — ten minutes, or until used.
• Webhook delivery logs — about thirty days.
• Deleted data — falls out of infrastructure backups within thirty days of deletion.

Your rights

Email support@wrapscribe.com and we will show you what we hold about you, correct it, hand you a copy, or delete the lot — whichever you ask. Deleting your account removes your email, your devices, your counts and your settings; your Macs stay exactly as they are, because everything that matters was on them all along.

We answer these requests for everyone, not only where a law says we must. If you are somewhere with a data-protection authority and think we have fallen short, you can complain to it — but write to us first; it will be faster.

Children

WrapScribe is not directed at children, and we do not knowingly hold an account for anyone under 16. If one exists, tell us and it goes.

Changes

If what we store ever changes, this page changes with it, and the date at the top says when. A change that touched your words would not be a policy update — it would be a different product, and we are not building that one.

Talk to us

Anything about your data — support@wrapscribe.com.