Sotto
Privacy policy
Effective: September 15, 2026
I don't collect anything from Sotto. On iPhone it uses Apple's Speech framework and asks for on-device recognition whenever the phone can do it, and there's no network code of mine in the iPhone build.
Android's a bit different. I send your voice to whatever speech recognizer the phone has and ask it to stay offline. On Android 13 and up, if the phone has Google's on-device speech service, that's what runs, and it does stay offline. Older phones, or ones without that service, get Google's regular recognizer, and that one can send the audio to Google. The app has internet permission because Play billing needs it to check your subscription, and that's all it gets used for.
The mic only opens when you tap the mic key, and what you said is kept just long enough to turn into text, so there's no audio file and nothing ever comes to me. The keyboard doesn't log your keystrokes or send them anywhere either, they just go into whatever app you're typing in.
What's stored on the phone is your settings plus any transcript that hasn't been inserted yet, and deleting the app deletes both. This website uses PostHog to count visits, but the app has no analytics in it. If I change this policy I'll put the new date at the top.