Privacy Policy
Last updated 30 October 2026
What you say, and the words it becomes, stay on your Mac. Typealoud has no accounts and no server that receives your dictations. It only counts, anonymously, that it is being used, and you can switch that off.
Who we are
Typealoud is made by Jtobin (“we”, “us”). You can reach us at binjto@gmail.com.
What Typealoud does with your data, on your Mac
Everything below happens on your Mac and is never sent to us.
- Microphone. The microphone is used only while a dictation is running (after you press the shortcut, until it ends). The audio is turned into text by the speech model on your Mac (Cohere Transcribe, run with MLX).
- Live words. The faint words that appear while you talk come from Apple’s speech recognition, which Typealoud forces to run on the device. Nothing is sent to Apple for it.
- Accessibility. Used to listen for your shortcut, to find the text cursor, and to type the words there. Typealoud does not read or store the other text in your windows.
- Clipboard. The words are pasted through the clipboard. Whatever you had copied is put back afterwards, images and styled text included, and the paste is marked so clipboard managers do not keep it.
- History. Typealoud keeps what you dictated (the text, the time, the app it was typed in, the language) so you can copy it again. By default for 30 days; in Settings you can choose off, a day, a month or forever. It also keeps your last 10 recordings (16 kHz mono audio files) so a dictation can be transcribed again in another language. They are stored in
~/Library/Application Support/Typealoud/history/. “Clear” in the history deletes them. - Log. A log file records when something was typed, in which app and how long it was, plus errors. It does not contain your words.
- Settings. Your choices (shortcut, language, replacements and so on) are saved in
config.jsonin the same folder.
To remove everything Typealoud has stored, quit it and delete that folder, then delete the app.
What goes over the internet
Typealoud itself never uploads your voice, your words or your history. It connects to the internet for these reasons only:
| When | What | Who receives it |
|---|---|---|
| First launch | Downloads the speech model (about 3.9 GB) once. | Hugging Face (huggingface.co), which sees your IP address and the request, under its own privacy policy. |
| At launch and every few hours while it runs | Asks for a tiny file (version.json) that says the oldest version still allowed, so a broken version can be retired. The request carries nothing but the usual web request information. | Our website, on Cloudflare (standard server logs). |
| About once a day, and when you click Check for Updates | Asks for the update list (appcast.xml) and, if there is a new version, downloads it. The request carries the app’s name and version, as any download does. Typealoud does not send a system profile. | Our website, which runs on Cloudflare, and the installer storage (Cloudflare R2). Cloudflare keeps standard server logs, such as your IP address and the time. |
| At launch, once a day, and around the model download | The anonymous usage counts above (unless you turned them off). | PostHog, under its own privacy policy. |
| If the download from our site is not available | You may be sent to the release page. | GitHub, under its own privacy policy. |
We do not use these logs to identify you, and we do not sell or share them.
Anonymous usage counts
To know whether Typealoud works for people, the app and its speech service send anonymous counts to PostHog (PostHog Inc., US cloud). They say that and how something happened, never what you said or typed:
- Each dictation: that it started (by the shortcut or from another program), how long you spoke, how long the transcription took, how many words and characters came out, the language, whether you tapped or held the shortcut, whether the words were typed or left on the clipboard, whether the text field was a terminal, and whether it was cancelled, empty or failed. Never the words, and never the name of the app you typed into.
- Your options: once a day, which options are on (language, microphone choice, live words, numbers as digits, the shortcut, how long the history is kept, how many replacement rules you have but not what they say), and when you change one.
- The settings panel: that you opened it, which tab or page you looked at, and which buttons you clicked (Restart, Open Log, Quit, Check for Updates, Licences, the permission buttons).
- The app itself: that it started, once a day that it is running, which permissions are on or off, how long the model took to load, whether the model download started, finished (and how many seconds it took) or failed, when the “update required” notice was shown and whether you chose Update Now, and when a dictation was held back because the version was too old to use.
Each of these also carries the app version and build and your macOS version. Each Mac is told apart only by a random number made on that Mac, which is not linked to your name, your account or your Apple ID. PostHog is set to drop IP addresses, and no profile is built. These counts never contain what you say, type or record, file names, or the names of the apps you use. You can turn them all off, in the app and its speech service together, under Settings › General › About › Share anonymous usage.
This website
The website has no cookies. It counts page visits anonymously with the same PostHog project: which page, which site sent you, the width of your screen and whether you clicked a download button. The visit has a random number kept in your tab only (it disappears when you close the tab), the IP address is dropped, and nothing is counted if your browser sends Do Not Track or Global Privacy Control. Recordings: only if you press “Allow” in the small notice at the bottom of the page, the site records your visit with PostHog’s session recording: how the page looked and where you moved, clicked and scrolled. The site has no text fields, and anything you might type would be hidden anyway. Recordings are kept for 30 days and are used only to find where the page confuses people. Your choice (“yes” or “no”) is saved in your browser’s local storage, and you can take it back by clearing the site’s data in your browser. The recorder script is served from this site itself. It saves your language choice (English or 中文) in your browser’s local storage, only on your device. Its fonts are served from the site itself, so visiting loads nothing from Google or any other third party. The site is served by Cloudflare, which keeps standard server logs.
Permissions you can take back
Typealoud asks macOS for Accessibility, Microphone and Speech Recognition. You can turn any of them off at any time in System Settings › Privacy & Security. Without them the matching part stops working.
Children
Typealoud does not collect personal information from anyone, so there is nothing to collect from children either.
Changes
If this policy changes, the new version is posted here with a new date. If a change affects what leaves your Mac, we will say so in the update notes.
Contact
Questions about privacy: binjto@gmail.com.
隐私政策
最后更新：2026 年 10 月 30 日
你说的话，还有它变成的文字，都只留在你的 Mac 上。Typealoud 没有账号，也没有任何服务器会收到你的听写内容。它只会匿名统计“有人在用”这件事，你可以把它关掉。
我们是谁
Typealoud 由 Jtobin（下称“我们”）制作。联系方式：binjto@gmail.com。
Typealoud 在你的 Mac 上怎么处理数据
下面这些都只发生在你的 Mac 上，不会发给我们。
- 麦克风。只在听写进行时才使用（从你按下快捷键，到听写结束）。声音由你 Mac 上的语音模型（Cohere Transcribe，用 MLX 运行）转成文字。
- 实时文字。你说话时出现的浅色文字来自苹果的语音识别，Typealoud 强制它在设备上运行，不会发给苹果。
- 辅助功能。用来监听你的快捷键、找到文字光标的位置、把文字打到那里。Typealoud 不会读取或保存窗口里的其他文字。
- 剪贴板。文字是通过剪贴板粘贴出去的。粘贴完会把你原来复制的东西放回去，图片和带格式的文字也一样；这次粘贴还会被标记，剪贴板管理工具不会记下它。
- 历史记录。Typealoud 会保存你说过的内容（文字、时间、打在哪个 App、语言），方便你再复制。默认保存 30 天，可以在设置里改成关闭、一天、一个月或永久。它还会保存最近 10 段录音（16 kHz 单声道音频），让你可以换一种语言重新转写。这些都存放在
~/Library/Application Support/Typealoud/history/。在历史记录里点“清除”就会删掉。 - 日志。日志文件会记录某次文字打在哪个 App、有多长，以及出错信息，不包含你说的内容。
- 设置。你的选择（快捷键、语言、替换词等）保存在同一个文件夹的
config.json里。
想清除 Typealoud 存下的所有东西：退出它，删掉那个文件夹，再删掉这个 App。
哪些内容会走网络
Typealoud 自己不会上传你的声音、文字和历史记录。它只在下面这些情况联网：
| 什么时候 | 做什么 | 谁会收到 |
|---|---|---|
| 第一次打开 | 下载一次语音模型（约 3.9 GB）。 | Hugging Face（huggingface.co），它会看到你的 IP 地址和这次请求，适用它自己的隐私政策。 |
| 打开时，以及运行期间每隔几个小时 | 请求一个很小的文件（version.json），里面写着现在还允许使用的最旧版本，这样出了严重问题的版本可以停用。请求里只有普通网页请求都有的信息。 | 我们的网站（运行在 Cloudflare 上），保留常规服务器日志。 |
| 大约每天一次，以及你点“检查更新”时 | 请求更新列表（appcast.xml），有新版本就下载。请求里带有 App 的名称和版本，任何下载都是这样。Typealoud 不会发送你的系统信息。 | 我们的网站（运行在 Cloudflare 上）和安装包存储（Cloudflare R2）。Cloudflare 会保留常规的服务器日志，比如你的 IP 地址和时间。 |
| 打开时、每天一次，以及模型下载前后 | 上面说的匿名使用统计（除非你把它关了）。 | PostHog，适用它自己的隐私政策。 |
| 我们网站的下载用不了时 | 你可能会被带到发布页面。 | GitHub，适用它自己的隐私政策。 |
我们不会用这些日志来识别你，也不会出售或分享它们。
匿名使用统计
为了知道 Typealoud 对大家好不好用，app 和它的识别服务会把一些匿名的次数发给 PostHog（PostHog Inc.，美国云）。它们只说明“发生过什么、有多长”，从不包含“你说了什么、打了什么”：
- 每次听写：开始了（用快捷键，还是别的程序触发的）、你说了多久、转写用了多久、出来多少个词和多少个字符、语言、你是点按还是按住快捷键、文字是被打出来还是留在了剪贴板、输入的地方是不是终端，以及它是被取消、是空的还是出错了。绝不包含文字内容，也不包含你打字所在 App 的名字。
- 你的选项：每天一次，哪些选项是开着的（语言、麦克风选择、实时文字、数字写成阿拉伯数字、快捷键、历史保留多久、你有几条替换规则，但不包含规则的内容），以及你改动某一项的时候。
- 设置面板：你打开过它、看了哪个标签页或子页面、点了哪些按钮（重启、打开日志、退出、检查更新、开源许可、各个权限按钮）。
- app 本身：它启动了、每天一次它在运行、各项权限开着还是关着、模型加载用了多久、模型下载是否开始、完成（以及用了多少秒）或失败，弹出“需要更新”提示的时候、你有没有点“现在更新”，以及某次听写因为版本太旧而被暂停的时候。
每一条还带有 app 的版本号、构建号和你的 macOS 版本。每台 Mac 只靠它自己生成的一个随机数来区分，这个数和你的姓名、账号、Apple ID 都没有关系。PostHog 已设置为丢弃 IP 地址，也不建立个人档案。这些统计从不包含你说的话、打的字、录音、文件名，也不包含你用了哪些 App。你可以在 app 里一起关掉（app 和识别服务都会停止发送）：设置 › 通用 › 关于 › 分享匿名使用情况。
这个网站
网站没有 Cookie。它用同一个 PostHog 项目匿名统计页面访问：哪个页面、从哪个网站来的、你的屏幕宽度，以及你有没有点下载按钮。每次访问有一个只保存在你这个标签页里的随机数（关掉标签页就没了），IP 地址会被丢弃，如果你的浏览器发送了“请勿跟踪”或 Global Privacy Control，就完全不统计。录屏：只有你在页面底部的小提示里点了“Allow”，网站才会用 PostHog 的会话录制记录你这次访问：页面当时的样子，以及你在哪里移动、点击和滚动。网站没有文字输入框，你要是输入了什么也会被遮住。录制保存 30 天，只用来找出页面哪里让人看不明白。你的选择（“是”或“否”）保存在浏览器的本地存储里，想收回的话清除这个网站的数据就行。录制用的脚本由这个网站自己提供。它会把你选的语言（English 或 中文）保存在浏览器的本地存储里，只在你自己的设备上。页面的字体就放在网站自己这里，访问时不会向 Google 或任何第三方请求内容。网站由 Cloudflare 提供，它会保留常规的服务器日志。
你可以收回的权限
Typealoud 会向 macOS 申请辅助功能、麦克风和语音识别。你随时可以在“系统设置 › 隐私与安全性”里关掉任何一项，对应的功能就会停止工作。
儿童
Typealoud 不会收集任何人的个人信息，所以也不会收集儿童的。
变更
如果这份政策有变化，新版本会连同新的日期发布在这里。如果变化会影响离开你 Mac 的内容，我们会在更新说明里讲明。
联系我们
关于隐私的问题：binjto@gmail.com。