This Privacy Policy explains how Motu Dev LLC ("we," "us") handles information in connection with the DictateHub app for iPhone and iPad ("the App"). It is written to reflect how the App actually works.
The short version
DictateHub is built to keep your data yours. We do not operate servers that collect, store, or receive your recordings, transcripts, or their metadata. Your recordings and transcripts stay on your device unless you choose to transcribe, export, or share them. If you use transcription, your audio goes directly to the speech-to-text provider you choose, under your account with that provider. Exports go to destinations you configure. With DictateHub Enterprise, lookups and export logs go to your organization's own server. Your credentials are stored in the device's secure Keychain. Payments are handled by Apple. We do not use third-party advertising or analytics-tracking SDKs.
Information the App handles
Recordings, transcripts, and metadata (stored on your device)
The App records audio, lets you attach metadata ("index fields"), and can store a transcript of each recording with word-by-word timing. These files are stored locally on your device, in the App's documents folder. We do not receive them. That folder is visible to you in the Files app and is included in your device's normal iCloud or computer backups, which are governed by Apple's privacy terms. Recordings and transcripts leave your device only when you transcribe them (see "Transcription" below), export them (see "Exports" below), or share them (for example, a transcript video or the share sheet).
Microphone and camera
- Microphone access is used solely to record audio when you record (and, if you use live transcription, to stream that audio to your transcription provider).
- Camera access is used solely to scan barcodes to populate index fields. Camera frames are processed on-device to read a barcode and are not stored or transmitted by us.
Transcription (your speech-to-text provider)
If you add a key for a speech-to-text provider and transcribe a recording (live or in a batch), the App sends that audio directly from your device to the provider you selected — Deepgram, AssemblyAI, ElevenLabs, or Microsoft Azure (in the Azure region you configure) — using your account and key. The provider returns the transcript, which the App stores on your device. We are not a party to that connection and do not receive your audio or transcripts. The provider's handling of your audio is governed by your agreement with that provider and its privacy terms; you are responsible for choosing a provider, and any terms with it, appropriate for your work.
DictateHub Enterprise (your organization's server)
If your organization uses DictateHub Enterprise, the App connects over HTTPS to a server your organization runs — the DictateHub Connector or your organization's own REST API — for database lookups, the work queue, and export logging. Barcodes and other lookup values, the field values and job lists returned, and export-log entries (such as filenames and barcodes; transcripts are not part of the export log) flow between your device and your organization's systems. The App does not connect to databases directly or send database queries from the device, and database passwords stay on your organization's server rather than on the device. We are not a party to that connection and do not receive that data. The Connector is software your organization installs and operates on its own infrastructure; the data it handles is under your organization's control, and your organization is responsible for the privacy and security of the systems it connects.
Exports and sharing (your destinations)
When you export a recording, it is sent to the destination you choose — the Files app, a local folder, iCloud Drive, an S3-compatible bucket (e.g. AWS, MinIO, R2, B2, Wasabi, Spaces), your own REST API (which may include the recording's index fields and, if you choose, its transcript), or another app via a URL scheme. Shared transcript videos and items you send through the share sheet go wherever you send them. These transfers go directly from your device to your destination. We do not receive or store exported or shared files.
Credentials
Speech-to-text provider keys, storage access keys, and app keys for your organization's Connector or API are stored in the iOS Keychain on your device, set to remain on that device only (they are not synced through iCloud Keychain or restored onto a different device). They are not transmitted to us and are used only to connect to the services you configure.
Settings
Your preferences (index field definitions, filename templates, destination configs without secrets, and similar settings) are stored locally on your device using standard iOS storage.
Purchases / subscriptions
Subscriptions are processed by Apple through the App Store. We never receive your payment card details. We may receive non-identifying transaction/entitlement information from Apple necessary to provide and verify your subscription. Apple's handling of your purchase is governed by Apple's privacy policy.
Website and support communications
If you email us for support or privacy questions, we receive the address, message, attachments, and other information you choose to include. Please do not send recordings, credentials, private keys, protected health information, or other sensitive material unless we have agreed on an appropriate channel.
Website infrastructure and security data
Cloudflare hosts and protects the website and acts as a website sub-processor for limited technical request data. Like other web infrastructure providers, Cloudflare may process IP address, requested URL, browser and device information, timestamps, network and security signals, and aggregate performance measurements to deliver the site, prevent abuse, and maintain reliability. Cloudflare publishes a Data Processing Addendum (DPA). We do not place advertising cookies or add third-party behavioral-tracking scripts to the website.
Website analytics
The website uses Cloudflare Web Analytics to count visits and measure page performance. When you load a page, a small Cloudflare script reports information such as the page visited, the referring page, browser and device type, approximate country, and page-load timing. According to Cloudflare, Web Analytics does not use cookies or local storage and does not fingerprint visitors. We use these aggregate statistics only to understand how the website is used and to improve it. This applies to the website only; the App contains no analytics.
Support-message retention
We keep support and privacy correspondence only as long as reasonably necessary to answer the request, maintain relevant business records, prevent abuse, or comply with legal obligations. You may ask us to delete a support conversation unless we must retain it for a legitimate legal, security, or recordkeeping purpose.
What we do not do
- We do not collect, store, or transmit your recordings, transcripts, or index-field metadata to our servers (we operate no such collection service).
- We do not sell or share your personal information.
- We do not use third-party advertising SDKs or cross-app tracking.
- We do not track you across other companies' apps or websites.
Required-reason API disclosures (Apple)
The App uses certain iOS APIs that Apple requires apps to declare a reason for, solely to function on-device: reading/writing user defaults (app settings), accessing file timestamps, checking available disk space, and reading system uptime. These are used for app functionality, not for tracking.
Children
The App is not directed to children under 13 and we do not knowingly collect personal information from them.
Data retention and your control
Because your content lives on your device (and on destinations you control), you control retention. You can delete recordings and transcripts in the App and remove the App to delete its on-device data; copies in your device backups follow your backup settings. Data you have already exported to your own destinations, sent to your transcription provider, or logged to your organization's systems is governed by those systems and providers and is outside our control.
Your rights
Depending on where you live (e.g. EEA/UK under GDPR, California under CCPA/CPRA), you may have rights regarding personal information. Because we do not collect your content on our own servers, in most cases the data subject to such rights resides on your device, in your connected systems, or with providers you have chosen. For questions, contact us below.
Legal bases and international processing
Where a legal basis is required, limited website and support information is processed to provide the service you request, pursue our legitimate interests in operating and securing DictateHub, comply with law, or act with your consent where applicable. Infrastructure and email providers may process information in countries other than your own, subject to the safeguards offered by those providers and applicable law.
Security
We use reasonable technical and organizational safeguards appropriate to the limited information we process. The website uses HTTPS and Cloudflare security controls, the App keeps credentials in the iOS Keychain and connects to services only over HTTPS, and recordings and transcripts remain under your control. No method of storage or transmission is completely secure, so you should also protect your device, connected systems, export destinations, and account credentials.
Changes to this policy
We may update this policy as the App evolves. Material changes will be reflected here with a new "Last updated" date.
Contact
Motu Dev LLC
privacy dictatehub com