Privacy Policy
Last updated 2026-10-07. This policy covers the Stilltone Mac app and the stilltone.app website. Stilltone ("we") is the data controller. Contact: support@stilltone.app.
The short version
Stilltone records, transcribes and analyses your meetings on your Mac. Audio, transcripts, summaries, meeting memory and voice profiles are stored as files on your Mac and are not sent to us or anyone else. We don't have servers that receive your meeting content.
Data stored on your Mac
- Meeting audio, raw and cleaned transcripts, summaries, decisions, actions, memory items and metadata, in a folder you control.
- Voice profiles (numeric speaker embeddings) used to recognise speakers across meetings.
- Settings, and credentials (licence key, calendar tokens) in the macOS Keychain.
You can delete any meeting or all data by deleting its files or using the app's delete actions.
What leaves your Mac, and why
- Model downloads. On first use the app downloads speech and language models from Hugging Face (huggingface.co). These requests send no meeting data.
- Google Calendar (only if you connect it): the app requests your events directly from Google's API. See the next section.
- Licence (Pro only): the app sends your licence key and a device name to Lemon Squeezy to activate and validate it.
- Updates: the app checks for new versions at download.stilltone.app; the request includes the app version.
- Analytics and logs: we may collect general, anonymous interaction analytics and diagnostic logs from the app and the website (for example, which features are used and error reports) to improve Stilltone. These never include meeting audio, transcripts, summaries, memory content, calendar data or contact details.
- The local MCP server (optional) answers only AI clients you configure on your own Mac.
Google Calendar
If you connect Google Calendar, Stilltone requests the read-only scope https://www.googleapis.com/auth/calendar.readonly. It uses it to:
- show your upcoming meetings and their details (title, time, organizer, attendees, video-call link);
- name and file recordings after the matching event;
- suggest attendee names when you label speakers.
Stilltone never creates, edits or deletes calendar events. Calendar data is fetched directly from Google to your Mac, stored only on your Mac, and is not sent to us or any third party, not used for advertising, and not used to develop, improve or train AI or machine-learning models. Google OAuth tokens are stored in the macOS Keychain. To disconnect, use Settings → Calendar → Disconnect, which stops Stilltone from reading your calendar; to also remove Stilltone's access on Google's side, revoke it at myaccount.google.com/permissions. Imported calendar details attached to past meetings remain in those meetings' files until you delete them.
Stilltone's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Payments
Purchases are processed by Lemon Squeezy, our Merchant of Record, under its privacy policy. We receive your name, email, country and order details. We never see your card details.
Website
stilltone.app is hosted on Cloudflare, which processes technical request data (such as IP address) to deliver and protect the site. The site currently sets no cookies. If we add analytics that require consent, we will ask first.
Your rights (GDPR)
You can request access to, correction or deletion of personal data we hold (in practice: purchase records and support emails), object to processing, and complain to your data-protection authority. Legal bases: contract (purchases, licences), legitimate interest (anonymous analytics, security). We keep purchase records as long as tax law requires and support emails up to 3 years.
Children
Stilltone is not directed to children under 16.
Changes
We'll update this page and its date when practices change. Material changes are announced in the app's release notes.