Privacy Policy
Private by architecture.
Xyphex is designed to turn speech into useful text on your Mac. Your voice and transcripts are not collected by Xiy.
Speech stays on-device
Xyphex records microphone input only while you activate dictation. Its bundled speech model and proprietary Xyphex Intelligence runtime process that audio locally. Audio is released after dictation. Completed text is saved in history automatically. History stays until manually deleted by default; you can choose automatic deletion. Saved notes and snippets never expire automatically.
Local settings and private iCloud sync
Xyphex stores app settings, custom vocabulary, correction rules, and usage metadata such as session counts and per-app totals. It also stores saved dictation history, snippets, and Scratchpad notes.
When iCloud is available, custom vocabulary, corrections, usage metadata, saved history, snippets, notes, and history retention settings sync through your private CloudKit database. Core dictation works without iCloud. Deletions sync when connected; automatic history expiry is enforced when Xyphex runs. Optional note locks use device authentication to restrict access inside Xyphex, not a separate encryption key.
You remain in control
- Microphone: records only while dictation is active.
- Keyboard shortcut: Option-Space is registered without Accessibility or Input Monitoring access.
- Control gestures: optional Input Monitoring access detects the Control shortcut. Xyphex does not read or store typed text.
- Paste directly: optional Accessibility access lets Xyphex paste into the original application. It is off by default; without it, review and copy the transcription, then press Command-V yourself.
- iCloud: syncs the private records described above.
No automatic diagnostic upload
App Store builds use opaque diagnostic codes and do not write readable transcripts or raw microphone audio to Xyphex logs. Xyphex does not automatically transmit diagnostics to Xiy.
Data you choose to send
Bug reports, feature requests, and contact messages may include your name, email address, message, the page URL, and basic browser information. We keep support submissions only while needed to respond, prevent abuse, protect the service, or meet legal obligations. You may request deletion at any time.
Optional Xyphex email updates require an explicit checkbox and confirmation through your mailbox. Submitting a support request does not subscribe you. Consent, unsubscribe and suppression records are retained as needed to respect your choices; unsubscribing stops Xyphex marketing without affecting another app. See our email privacy and preferences notice for email processing, retention and withdrawal details.
Apple, Cloudflare and AWS
Apple provides the Mac App Store and private CloudKit sync. Cloudflare Pages and D1 host this website and its forms. Amazon Web Services sends support and confirmed product-update emails and processes delivery and consent records in US East (N. Virginia). Our support mailbox uses Apple iCloud Mail. These services may process information internationally. Xiy does not use advertising networks or cross-site tracking technologies on the Xyphex website.
Access, deletion, and controls
You can revoke app permissions in System Settings, disable Xyphex’s iCloud access, manage its iCloud storage, unsubscribe from website updates, or request access to or deletion of information submitted through the website.
Questions about your privacy?
Use the Contact Us form. We may update this policy when Xyphex’s features or legal obligations change; the effective date above identifies the current version.
Website accounts and optional updates
Website sign-in uses a secure, HTTP-only session cookie lasting up to 30 days, plus short-lived cookies for email codes and Apple sign-in. Accounts use a shared Cloudflare database and are scoped to this website. Apple and email sign-in create separate accounts, even when their email addresses match. Signing out revokes the current session. Amazon SES delivers email sign-in codes, which expire after 10 minutes.
We store your email address and, for Apple sign-in, Apple’s user identifier. You may optionally save your name and a profile photo. Photos are cropped and resized to 128 × 128 pixels in your browser and saved as small WebP images. If WebP creation is unavailable in your browser, only resized pixels are sent for conversion; your original image is not uploaded. Website reports and suggestions are linked to your signed-in account so you can follow our responses in your dashboard.
Marketing is optional. Choosing Subscribe records your consent, time, notice version, and originating website for Xyphex offers and updates. Xyphex consent does not subscribe you to other Xiy products. Unsubscribe in your profile or through a marketing email. Apple Hide My Email accounts receive no automatic welcome or subscription-confirmation email; explicit subscription permits future marketing to the relay address. For account deletion requests, contact legal@xiy.ai.