Local-first by design#
Speech-to-text and AI cleanup both run on your device. The Apple Neural Engine transcribes your audio and cleanup runs in-process; the raw audio, the transcript, and the cleaned output stay in your Mac’s memory and never cross the network. The full data-handling statement is in the Privacy and local-first doc.
Data at rest on your Mac#
Evoglyph stores your dictation history in a local SQLite database and your vocabulary, hotkey choice, and settings in local app storage. None of it syncs to a server. macOS does not protect these files at rest unless you enable FileVault, which encrypts your whole disk. We recommend turning it on; it is the right at-rest control for anything on your Mac, Evoglyph included.
The network surface#
Evoglyph is local-first but not network-free. It makes a small, fixed set of network calls — for the one-time model download, license activation and re-validation, the free trial’s start/usage sync, update checks, and (only if you opt in) crash reporting. Each one is enumerated, with what it sends and why, in the network calls section of the Privacy doc. Crash reporting is off by default and is never enabled without your explicit opt-in.
License and account security#
Your license key is stored locally in Evoglyph’s application-support folder, in a file readable only by your macOS user account (owner-only permissions); enable FileVault for at-rest disk encryption. License enforcement itself is server-side — keys are device-bound and revocable, so possession of the file alone does not confer a license. Activation and periodic re-validation happen over HTTPS against the licensing service. Each license covers two devices; to free a slot, open the LICENSE section on Evoglyph’s Home screen and choose Deactivate this device, which releases the Mac you’re using. Evoglyph can’t reach a device you no longer control, so if you lose access to a Mac while both slots are in use, email [email protected] and we’ll free the slot. The website is served over HTTPS with HSTS.
The licensing and billing records tied to your purchase live server-side in Cloudflare D1: your email, license key, order references, and the device labels for your activations. The Privacy and local-first doc describes exactly what is stored, who processes it, and for how long. If a security breach affects your personal data, we will notify affected users without undue delay and, where the law requires, the relevant supervisory authority.
Payment security#
Stripe, a PCI-DSS Level 1 provider, processes all payments. You enter your card details directly with Stripe; Evoglyph and Eluketronic never see or store your full card number.
Updates and dependencies#
Evoglyph checks for updates so security fixes can reach you quickly. You can disable automatic update checks in Settings, but we recommend leaving them on. We update the third-party components Evoglyph ships, including the on-device models, when we learn of relevant fixes.
Reporting a vulnerability#
If you believe you have found a security vulnerability in Evoglyph or this website, email [email protected] with “Security” in the subject line and enough detail to reproduce the issue. We aim to acknowledge reports within a few business days. Please give us a reasonable opportunity to investigate and fix the issue before disclosing it publicly, and do not access or modify other users’ data while testing. We appreciate responsible disclosure.