Privacy policy
Your words stay
on your Mac.
Sotto keeps speech recognition, correction, and insertion on-device.
Data that is not transmitted
- Microphone audio
- Recognition and correction results
- Frontmost-window images, full OCR text, and extracted terms
- User dictionaries, industry dictionaries, and per-app profiles
Sotto does not send this data to an operator-controlled server. No account is required for the app’s core features.
Storage on your Mac
The short pre-roll that protects the start of a phrase exists only in memory and is discarded after recording. Audio and screen images are not saved to disk.
Correction logging is off by default. If you explicitly enable it, Sotto stores transcript text, locale, and frontmost-app details locally for up to 90 days and 10 MiB.
Permissions
- Microphone: required to capture speech
- Speech Recognition: required for Apple’s on-device recognition
- Accessibility: required for the hotkey and text insertion
- Screen Recording: optional, only for screen context
You can revoke permissions at any time in macOS System Settings.
Purchases and updates
The hosted payment provider processes payment details and email addresses under its own privacy policy. Sparkle checks https://sotto.run/appcast.xml for updates; no voice or transcript data is included.
Last updated: September 4, 2026