Privacy policy.

The short version

• Wisspa is a desktop app. All of your data — settings, history, action files — stays on your Mac and never touches a server we control.
• Your audio is sent directly to Groq for transcription, under your own Groq API key. The transcript is sent directly to Anthropic (Claude) for cleanup or prompt rewriting, under your own Anthropic API key. There is no Wisspa server in the path — we never see your audio or transcripts.
• The app checks a manifest on GitHub Releases to see if a newer version exists. That’s the whole network footprint beyond your two API providers.
• Wisspa has no account system and no telemetry. The only personal data we hold is your email address, and only if you join the waitlist on this site.
• We run no analytics in the app. The marketing site uses cookieless, privacy-preserving analytics (Plausible) — no cookies, no fingerprinting, no cross-site tracking.
• You can ask us to delete what we hold any time: support@wisspa.app.

Who we are

Wisspa is published by TechGuider, a sole-trader business based in Sydney, Australia. For privacy purposes we are the data controller for the small amount of personal data we collect (currently just waitlist email addresses).

What goes where

Wisspa today is strictly bring-your-own-key: you enter your own Groq and Anthropic API keys in Settings (stored in the macOS Keychain), and the app talks to those providers directly. When you hold a hotkey and speak, Wisspa records the audio, then runs through this pipeline:

1. Audio leaves your Mac and goes directly to Groq (api.groq.com), authenticated with your own Groq API key. Groq returns a text transcript. Groq’s data-use policy applies — at the time of writing, Groq does not train on API requests; check their current policy.
2. The transcript leaves your Mac and goes directly to Anthropic (api.anthropic.com), authenticated with your own Anthropic API key. Anthropic returns the cleaned-up dictation or the rewritten prompt. Anthropic’s data-use policy applies — at the time of writing, Anthropic does not train on API requests; check their current policy.
3. The result is pasted into the focused app and logged locally.Wisspa writes a row to history.db on your Mac — timestamp, mode, raw transcript, output, app, success flag. That database never leaves your Mac. Clear it any time from Settings → History.

Separately, the app periodically checks an update manifest hosted on GitHub Releases to see whether a newer version of Wisspa exists. It’s a plain file download — nothing about you or your usage is sent.

That is the complete network footprint of the current app: Groq, Anthropic, and GitHub. Wisspa has no backend, no account system, and no telemetry.

Planned: the paid layer (not yet built)

We intend to offer a paid subscription with managed API access — a Cloudflare Worker proxy (with AI Gateway) that carries Groq and Anthropic traffic so you don’t need your own keys, validated by a trial UUID or license key. That layer does not exist in the shipping app today. When it launches, this section will be updated to describe it as effective policy. The design intent is:

• The proxy would see the same request you’d send directly, validate your license, enforce per-user rate limits, and forward the request. Audio, transcripts, and model output would not be persisted — only minimal request metadata (timestamp, license/trial ID, response status), retained for up to 30 days for rate limiting and abuse prevention.
• Billing would be handled by LemonSqueezy as Merchant of Record, which would receive your email and payment details. We would receive a license key and your email for account recovery.
• Routing through the proxy would be part of the paid plan; the bring-your-own-key mode described above is unaffected by these plans.

Nothing in this “Planned” section describes a data flow that exists today. It is included so you know what we intend before it ships.

What we store about you

Today, the app itself sends us nothing — there is no account, no license check, no telemetry. The only personal data we hold is:

When the paid layer described above launches, we would additionally hold: your license key and subscription status (mirrored from LemonSqueezy, to authorise your installation against the proxy), a trial UUID (generated locally by your installation, not linked to your identity until you subscribe), and per-request proxy metadata (kept up to 30 days; audio and transcripts are not stored). Payment details would go to LemonSqueezy only — we would never see your full card number.

What stays on your Mac

• Your Wisspa settings (settings.json).
• Your action registry YAML files.
• Your history database — last 100 dictations / actions / prompts per defaults.
• Your Groq + Anthropic API keys — stored in the macOS Keychain, not in plain text.

Cookies and analytics

The Wisspa application sets no cookies and runs no analytics.

The marketing site (this site) uses Plausible Analytics — a privacy-preserving, cookieless service that does not fingerprint visitors or share data with third parties. Page-view counts and referrer aggregates only. If you’d rather not appear in those counts, any major browser ad-blocker will block Plausible by default.

Sub-processors

Some companies process data in the course of delivering Wisspa. They’re bound by their own privacy commitments and, where relevant, by data processing agreements with us:

• Groq — speech-to-text. The app calls Groq directly from your Mac, under your own API key and your agreement with Groq.
• Anthropic — language model API for dictation cleanup and prompt rewriting. Also called directly from your Mac, under your own API key.
• GitHub — hosts the public .dmg distribution and the auto-update manifest the app checks.
• Vercel — hosting infrastructure for the marketing site at wisspa.app.
• Supabase — stores waitlist email addresses for this site (Sydney region).
• Apple — code-signing and notarisation infrastructure for the app binary.

Planned, once the paid layer launches (see above): Cloudflare (API proxy — Workers + AI Gateway — for Groq + Anthropic requests under a trial or subscription) and LemonSqueezy (payment processing, subscription management, tax collection as Merchant of Record). Neither processes any Wisspa data today.

Your rights

Depending on where you live, privacy law (the Australian Privacy Act, GDPR in Europe, CCPA in California, others) gives you rights to access, correct, export, or delete the personal data we hold about you. Email support@wisspa.app and we’ll handle the request within a reasonable time — at most 30 days.

You can also opt out of marketing email from us at any time by replying or using the unsubscribe link.

Children

Wisspa is a professional tool. It’s not directed at children under 16, and we don’t knowingly collect data from anyone under 16. If you believe a child has provided us data, email support@wisspa.app and we’ll delete it.

Changes to this policy

If we make material changes that affect how we handle your data, we’ll update the effective date at the top of this page and email you. Smaller changes (typos, clarifications) are made silently.

Contact

Privacy and data requests: support@wisspa.app
Postal address: available on request to the email above.

TechGuider · Sydney, Australia