Privacy

Dictation and transcription

Speech recognition happens on your Mac. Neither the audio nor the resulting text is sent anywhere. You can confirm this by turning off your network: both keep working.

AI rewriting, the paid feature

If and only if you turn this on, the transcript and the instruction you wrote are sent to our proxy at api.getwavenote.com, which forwards them through Cloudflare's AI Gateway to Gemini, run by Google. Our proxy holds them in memory for the duration of one request and writes them nowhere. They are not logged, at our proxy or at the gateway, which has request logging switched off. What we record is a count, a token total and a timestamp.

Organising a note, Wavenote+

Off until you agree to it. The first time you ask for a suggested title and Space for a note, Wavenote asks before it sends anything. If you continue, the note's text and transcript and the names of your Spaces go the same way as rewriting, to Gemini, and are handled the same way: held for one request, logged nowhere. Nothing in the note changes until you accept the suggestion.

The library assistant, Wavenote+

When you ask the assistant beside your library a question, the question and the passages of your notes that best match it are sent the same way, up to about 36,000 characters in one request. The notes an answer lists as its sources are the ones that were sent. Asking about, summarising or reworking a single note sends that note's text the same way.

Remote access to your library, optional

Nothing here happens unless you set it up. It lets an AI chat app you use somewhere else read your library, or add notes and tasks to it, while the library stays on your Mac. Each connection gets an access key, and a small program on your Mac collects each request, answers it from the library and sends the answer back. In between, our server keeps the request and the answer in a Cloudflare database. A request nobody answers expires after 5 minutes, and every request and its answer are deleted an hour after the request was made. Recordings are never sent, and neither are the names of recording or attachment files.

We keep your email address, the names you give the connection and the Mac, a fingerprint of each access key rather than the key, and a record of each request's type, outcome and time, without its contents. Removing a connection or a Mac stops its key working at once and deletes its requests.

Wavenote Capture, the browser extension

The extension reads a page only when you press its button or use its menu on that page. It reads that page's title, address, the text you selected and, if you choose the whole page, its text, and hands them to the Wavenote app on the same Mac, which writes them into your library. Nothing it reads is sent to us or to anyone else, and it keeps no history beyond a short list of what you saved, which clears when the browser closes.

What we store

If you buy a licence: your email address, your name, your Stripe customer id and an identifier for each Mac you activate. That is what issuing a licence and enforcing a 3-device cap requires, and for a licence it is all of it.

What the app does not do

No telemetry, no behavioural analytics, no automatic crash reporting, no account. The app does not phone home to tell us you opened it.

This website

The site counts page views and downloads through Umami, running on a server we run ourselves rather than at an analytics company. It sets no cookies, follows nobody between sites, and keeps no personal data. The app is a separate thing and reports none of this.