Privacy policy

The short version

Speech recognition, cleanup, what Hushy learns from you, and voice actions (beta) run on your Mac.
No Hushy server receives your audio, transcripts, notes, or calendar. Sign-in and update checks do use servers. Neither carries what you said. We do not have a copy of your dictation.
Your words leave your Mac only through features you turn on or start yourself, such as calendar sign-in, the local connector for your AI apps, and exports you choose. Each is described below.
By itself the app downloads its speech model, checks for updates and signs you in to your account. None of these carries your audio, transcripts or notes.
The app shows no ads and loads no third-party trackers. Usage numbers are off until you turn them on: counts and timings on your Mac, never audio or text. This version does not send them.
Once a day the app sends a count that this Mac used Hushy: the app version and whether it is your first day, with no identifier and nothing you said. It is on by default and has its own switch in Settings → Privacy & security.

Who we are

“We” and “us” mean Hushy, the maker of the Hushy app for macOS and of this website, tryhushy.com. This policy covers both. For privacy questions, write to privacy@tryhushy.com; for help with the app, write to support@tryhushy.com.

Data that stays on your Mac

To do its job, Hushy processes the following on your Mac. None of it is sent to us.

Data	When	Why
Microphone audio	While you hold or tap the dictation key, and, if you use them, while you record a note or meeting	To transcribe what you say
Call audio from your Mac	Only if you record meetings: while you record one	To transcribe the other people on the call
Transcripts, cleaned-up text and History	After each dictation or recording	So you can find, copy and restore what you said
Meeting notes, summaries and action items	Only if you record meetings: after a recording	Your meeting memory
Voice signatures (a numeric profile of how a voice sounds)	Only if you record meetings: when you record your own voice, or name a speaker	To label “You” and people you have named in future recordings
The name of the app you are typing in	At each dictation	To choose a writing style and paste correctly
Text on screen	When Context awareness is on (it is on by default; turn it off in Settings → Privacy & security); never in password managers	When you dictate, Hushy reads the text on screen in that app, on your Mac, to get names and meaning right. It is never saved or sent anywhere.
The text field you just pasted into, read again a few seconds later	After a paste	To notice your corrections and improve future cleanup on your Mac
File and symbol names from code folders you choose	Only if you add a project in coding settings	To recognize your project’s vocabulary
Dictionary, snippets, modes and settings	When you create them	Your preferences

This data lives in ~/Library/Application Support/Hushy on your Mac. Calendar sign-in tokens live in your macOS login Keychain, and your Hushy account session is kept in a file in that folder that only your macOS user can read. It is protected by your Mac’s own security, including FileVault disk encryption if you have it on. You can delete individual items in the app; deleting that folder removes your recordings, notes, History and settings data. Hushy does not sync this data to any cloud.

When data leaves your Mac

Only in these cases. The ones that can carry your words or notes are off until you turn them on or start them yourself. The speech model download, update checks and the beta sign-in happen by themselves and carry none of your audio or text.

The Assistant (optional, off by default)

The Assistant is not promoted and is off unless you turn it on. The Assistant lets you ask questions about your meeting notes using your own Claude Code, the AI agent from Anthropic, running on your Mac and signed in to your own Anthropic account. Before you turn it on, Hushy shows what will be shared and asks you to agree.

When you press Send, your question, and the notes the agent looks up through Hushy to answer it, are sent to Anthropic through your account. Nothing is sent in the background.
The Assistant can read meeting notes only. It cannot read your dictations or History.
If it suggests an action, such as a reminder, nothing happens until you confirm it in Hushy.
Anthropic’s handling of that data is governed by your agreement with Anthropic and its privacy policy, not by us. We do not receive it.
Chats are saved on your Mac. You can delete them, or turn the Assistant off, in Settings at any time.

Calendar (optional)

You can connect a calendar in two ways. Both are read-only.

Calendars already on your Mac. Hushy asks macOS for calendar access and reads events locally. No network request is made by Hushy.
Google Calendar or Outlook Calendar, directly. You sign in with Google or Microsoft in your browser. Hushy requests read-only access only: Google’s calendar.events.readonly scope, or Microsoft Graph’s Calendars.Read and offline_access. The sign-in token is stored in your Mac’s Keychain, and your Mac talks to Google or Microsoft directly. No Hushy server is involved and we never see the token or your events.

Hushy reads each event’s title, time, attendee names and email addresses, your response, and its location or meeting link. If you record meetings, Hushy uses them to remind you when a meeting is about to start, to name a recording after the meeting it overlaps, and to suggest speaker names from the attendee list. Attendee names and email addresses are used during the lookup and are not stored; the only calendar detail Hushy keeps is the event title, as the name of your note. Hushy never creates, changes or deletes calendar events through these connections. To disconnect, use Settings in Hushy, which deletes the token from your Keychain; you can also revoke access in your Google or Microsoft account settings.

Google user data. Hushy’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data from Google stays on your Mac. It is not transferred to us or anyone else, not used for advertising, not read by people, and not used to train AI models.

Exports and other apps you connect

Apple Notes: if you save a note to Apple Notes, it is handled by Apple Notes and syncs through iCloud if you use it.
Your AI apps: Hushy includes a local connector (an MCP server) that AI apps such as Claude Desktop, Claude Code, Cursor or Codex can use to read your notes, and your dictation history, if you connect them. It runs on your Mac and only answers the apps you connect. What those apps send to their own providers is governed by their policies.
Files: anything you export or copy is under your control.
Voice actions (beta) hand details to Calendar, Reminders, Shortcuts, Mail or Messages on your Mac. Hushy asks before anything that reaches other people, and Mail and Messages drafts are never sent for you.

Downloads and updates

Speech model: on first run, Hushy downloads its speech recognition model from Hugging Face. Hugging Face sees your IP address and the files requested, as with any download.
Updates: Hushy checks updates.tryhushy.com for new versions and downloads them from there. That request includes your IP address and standard details such as the app version. Our hosting provider, Cloudflare, keeps short-term server logs of these requests. We do not combine them with anything else.
Neither request contains audio, transcripts, notes or calendar data.

Crash reports and usage data

Crash reports. Hushy has a “Share crash reports” switch in Settings → Privacy & security. It is off until you turn it on. When it is on and Hushy crashes, the crash details macOS gives the app are reduced on your Mac to: where in Hushy’s code it stopped (the names of the program files involved and positions within them), the type of crash, the app and macOS version, and your Mac’s chip. Never your words, audio or apps. They go to our own server at tryhushy.com, not to any third party, and are stored without your IP address or account. Reports waiting to be sent stay on your Mac for at most seven days, and turning the switch off deletes them. We delete reports on our server after 90 days.

Usage numbers. Hushy records a few setup timings (such as how long the first dictation took) on your Mac only. The app has a “Share usage numbers” switch, in Settings → Privacy & security and on the welcome screen. It is off until you turn it on; in beta builds published before 11 October 2026 it started on. When it is on, Hushy records counts and timings on your Mac, never audio or text; the current version has nowhere to send them, so they stay on your Mac, and turning the switch off deletes them. If we ever start sending usage numbers, that will apply only while the switch is on, will never include audio or text, and we will update this policy before it ships.

A daily count. Hushy has a “Send a daily count” switch in Settings → Privacy & security. It is on by default, including for people who installed before it existed. Once a day, after you dictate, the app sends tryhushy.com one small message: the app build number and whether it is the first day this Mac has used Hushy (for example, {"v":2,"build":"2622","first":false}). It carries no account, email, install ID or other identifier, and nothing you said, wrote or used. We count each request as it arrives, per day and app build, and keep only those totals; we do not store your IP address (Cloudflare’s own short-term server logs aside), a cookie or anything that could tell one Mac from another. It is separate from usage numbers, which stay off until you turn them on. “See what’s sent” in the app shows the exact message, and turning the switch off stops it at once.

Feedback. If you press the feedback button in the app and send a message, the message, the email address of your Hushy account (so we can reply) and, if you leave the box ticked, your app version, macOS version and Mac model are emailed to us. Nothing is sent unless you press Send, and it never includes your dictations, history or the apps you use. We do not store feedback on our servers; it reaches us as an email, and we keep a daily count of how many were sent.

Accounts

Opening Hushy requires signing in. Signing in checks your account and checks again from time to time while you use the app. The app also asks tryhushy.com whether the service is open, and keeps the answer and the time you last heard it on your Mac; that request carries no account, token or identifier. Supabase hosts the account email. Hushy sends the account email for sign-in and receives the account’s status; dictation text, notes, audio, learned terms and history stay on your Mac.

Invite codes and support

Invite codes are checked on your Mac.
No purchases: Hushy sells nothing today, so we collect no payment details.
Earlier invite requests: if you asked for an invite before Hushy opened to everyone, we keep your email address and optional use choices in a Cloudflare D1 database in Hushy’s own account. We use them only to reply to you and delete them on request.
Support email: if you write to us, we keep your email address and message to reply. You can ask us to delete them at any time.

This website

tryhushy.com uses only a strictly necessary HttpOnly sign-in cookie when you sign in. It runs no tracking scripts, and loads no fonts or images from other companies. The only script from another company is Cloudflare’s check that you are a real browser: it loads on the sign-in page and, in the download box, only once you start typing an email address. When you sign in, the browser contacts Supabase Auth to request and verify a one-time code or to start Google sign-in. To know how many people visit, our server counts page views without cookies: for each page view it keeps the page, the country, the website that linked to us and any campaign tag in the link. It keeps no IP address and nothing that identifies you or links one visit to another, and we never sell or share this data. If you choose a light or dark theme, that choice is stored in your browser only. The “Try it with your voice” demo on the home page uses your microphone only if you allow it, measures loudness in your browser, and records and sends nothing. Our hosting provider, Cloudflare, processes standard request logs (IP address, browser type, pages requested) to serve and protect the site.

Legal bases

Where laws such as the GDPR apply: data processed only on your Mac is not collected by us. For the limited data we do handle (support emails, earlier invite requests and server logs), we rely on performing our contract with you, our legitimate interest in running and securing the service, your consent where we ask for it, and legal obligations.

We do not sell or rent personal information, and we do not share it for advertising.

How long we keep data

Data on your Mac is kept until you delete it. Support emails and earlier invite requests are kept until you ask us to delete them or we no longer need them. Crash reports, sent only if you turn them on, are deleted after 90 days. Request logs are kept by our hosting provider, Cloudflare, under its own retention rules.

Your choices and rights

Delete any recording, note, chat or History item in the app, or everything by deleting the Hushy folder.
Turn off Context awareness, learning from your edits, usage numbers, crash reports, the Assistant or a calendar connection in Settings at any time.
Revoke Hushy’s microphone, accessibility or calendar access in macOS System Settings.
For the data we hold (emails and earlier invite requests), you can ask for access, correction, deletion or a copy, and object to processing, by writing to privacy@tryhushy.com. You may also complain to your local data protection authority.

Children

Hushy is not directed at children under 13 (or 16 where that is the local age of digital consent), and we do not knowingly collect their data.

Security

Because your data stays on your Mac, its security mainly depends on your Mac: keep macOS up to date and FileVault turned on. Calendar sign-in tokens are stored in the macOS Keychain, and your Hushy account session in a file only your macOS user can read. Updates are signed, and the app verifies each update’s signature before installing it.

Changes to this policy

If we change how data is handled, we will update this page and its date before the change ships, and describe material changes in the changelog and in the app.

Contact

Privacy questions: privacy@tryhushy.com. Help with the app: support@tryhushy.com.