THOHT - Privacy Policy

Effective Date: February 2026
Last Updated: February 2026

Overview

THOHT is a macOS dictation app that converts speech to text, developed by THOHT Limited, a company registered in England and Wales.

In short: THOHT is designed with a local-first architecture. Audio is processed on your device. We have no user accounts, no analytics, no advertising, and no tracking. When you use Pro features, only your transcribed text (not audio) is sent to third-party AI services for processing.

1. Who We Are

Data Controller: THOHT Limited
Registered in: England and Wales
Email: info@thoht.app
Website: https://www.thoht.app

THOHT Limited is the data controller responsible for your personal data processed through the THOHT app. As a small organisation, we are not required to appoint a Data Protection Officer. For any data protection enquiries, please contact us at info@thoht.app.

2. Data We Collect

2.1 Audio Data

How it works: THOHT records audio from your microphone when you initiate a recording session via hotkey or button press. Audio is never recorded in the background.

• Local transcription (default): Audio is processed entirely on your device using a state-of-the-art on-device speech model. No audio leaves your device.
• Cloud transcription (optional): If cloud transcription is enabled, audio is sent to a managed speech-recognition provider via our secure proxy server. Audio is transmitted over HTTPS and is not stored by our proxy.

Audio file retention: You may optionally enable local audio file storage. Retention periods are configurable (7 days, 30 days, 90 days, 1 year, or forever). Audio files are stored locally on your device and are never uploaded to our servers.

2.2 Transcribed Text and User Content

When you use Pro features (AI reformatting, translation, or custom prompts), the following data is sent to third-party AI services via our secure proxy:

• Your transcribed text
• Your custom prompt text (if using custom prompts)
• Your personal context/profile (if you have optionally provided one)
• The name of the app you were dictating in (for context)

This data is sent solely to process your request and is not stored by our proxy server.

2.3 Diagnostic Data (User-Initiated Only)

We do not collect crash reports, analytics, or telemetry automatically. Diagnostic data is only collected when you explicitly choose to submit it:

• Bug reports: You may optionally submit a bug report from the app settings. This includes your written description, an optional screenshot, session logs, app version, and macOS version.
• API error reports: When an API error occurs, you may choose to report it. This includes the error type, HTTP status code, app version, macOS version, and timestamp.

Bug and error reports are sent via email to info@thoht.app using the Resend email service. No user-identifying information (name, email, account ID, device ID) is attached to these reports.

2.4 Purchase Data

In-app purchases are handled entirely by Apple's StoreKit framework. We do not collect, process, or have access to your payment information (credit card numbers, billing address, etc.). Apple manages all subscription transactions.

2.5 iCloud Sync (Optional)

If you have iCloud enabled on your device, THOHT may sync the following data via Apple's iCloud Key-Value Store:

• Your custom prompts
• Your user profile/personal context
• App settings

This sync is managed by Apple's iCloud infrastructure and is subject to Apple's privacy policy. You can disable iCloud sync in your macOS System Settings.

3. Data We Do NOT Collect

• Names, email addresses, phone numbers, or physical addresses
• Location data (precise or coarse)
• Contacts or address book data
• Browsing or search history
• Health or fitness data
• Financial or credit information
• Device identifiers (IDFA, IDFV, or other device-level IDs)
• User IDs or account identifiers (we have no user account system)
• Analytics or usage metrics
• Advertising data

4. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis for processing your personal data. The bases we rely on are:

Audio processed locally on your device is not transmitted to us or any third party, and therefore does not constitute data processing by THOHT Limited under UK GDPR.

5. Third-Party Services

THOHT uses the following third-party services to provide Pro features. Data is sent only when you actively use these features:

5.1 Anthropic (Claude API)

• Purpose: AI provider for text reformatting, translation, and custom prompt processing.
• Data sent: Transcribed text, custom prompt, optional user context.
• Privacy: Under Anthropic's Commercial API Terms, customer content is not used for model training. API data is retained for up to 30 days for trust and safety purposes.
• Policy: https://www.anthropic.com/legal/privacy

5.2 Groq

• Purpose: Cloud-based speech-to-text transcription (when cloud transcription is enabled).
• Data sent: Audio recording.
• Policy: https://groq.com/privacy-policy

5.3 Resend

• Purpose: Email delivery for user-initiated bug and error reports.
• Data sent: Report content (error details, logs, system info). No user-identifying information.
• Policy: https://resend.com/legal/privacy-policy

5.4 Apple (StoreKit & iCloud)

• Purpose: In-app purchase management and optional data sync.
• Data sent: Subscription transactions (managed by Apple). Optional sync of custom prompts and settings via iCloud.
• Policy: https://www.apple.com/legal/privacy

All third-party service providers are required under their respective terms to provide appropriate protection of any data they process. We do not sell or share your data with any parties beyond those listed above, and only for the purposes described.

6. How We Use Your Data

All data collected is used solely for app functionality:

We do not use any data for:

• Advertising or marketing
• Analytics or user profiling
• Tracking across apps or websites
• Training AI models
• Sale to third parties or data brokers

7. Automated Decision-Making

THOHT uses AI models to process your text (reformatting, translation, custom prompts). This processing is performed by third-party AI services (see Section 5) at your explicit request. These AI features are tools that assist you — they do not make decisions that produce legal or similarly significant effects on you. You always have the opportunity to review, edit, or discard AI-processed output before use.

8. Data Linked to Your Identity

None of the data collected by THOHT is linked to your identity. We have no user account system, collect no user identifiers, and send no device identifiers with API requests. There is no mechanism to associate collected data with a specific individual.

9. Tracking

THOHT does not track you. We do not:

• Use advertising identifiers (IDFA)
• Share data with data brokers
• Link your data with third-party data for advertising purposes
• Include any third-party analytics or advertising SDKs

10. International Data Transfers

THOHT Limited is based in the United Kingdom. When you use Pro features, your data may be transferred to and processed in the United States by the following services:

• Anthropic — servers located in the US
• Groq — servers located in the US
• Vercel (our proxy server host) — servers located in the US

These transfers are necessary to provide the services you have requested (Article 49(1)(b) UK GDPR — performance of a contract). No user-identifying information accompanies these transfers. We ensure all data is transmitted over encrypted HTTPS connections.

11. Data Retention

We do not retain any personal data on our own servers. All user data is either stored locally on your device or processed transiently by third-party services.

12. Your Rights

Under the UK GDPR, you have the following rights:

• Right of access — You may request a copy of the personal data we hold about you.
• Right to rectification — You may request correction of inaccurate personal data.
• Right to erasure — You may request deletion of your personal data.
• Right to restrict processing — You may request that we limit how we use your data.
• Right to data portability — You may request your data in a portable format.
• Right to object — You may object to processing of your personal data.
• Right to withdraw consent — Where we rely on consent (e.g., bug reports), you may withdraw consent at any time. This does not affect the lawfulness of processing carried out before withdrawal.

Since THOHT has no user accounts and stores all user data locally on your device, most of these rights are inherently satisfied — you have direct control over your data at all times. You can delete transcriptions, custom prompts, and your personal profile directly within the app.

For any data protection requests, contact us at info@thoht.app. We will respond within one month.

Right to Complain

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been infringed:

Information Commissioner's Office
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113

13. Your Controls

You have full control over your data within the app:

• Delete transcription history from within the app
• Delete custom prompts from within the app
• Clear your personal context/profile from within the app
• Configure audio retention (never store, 7 days, 30 days, 90 days, 1 year, or forever)
• Disable iCloud sync via macOS System Settings
• Choose not to submit bug or error reports (submission is always optional)
• Use local transcription only to ensure no audio leaves your device
• Uninstall the app to remove all locally stored data

14. Children's Privacy

THOHT is not directed at children under the age of 13 (or 16 in the UK). We do not knowingly collect data from children. If you believe a child has provided data through the app, please contact us at info@thoht.app and we will take steps to delete such data.

15. Security

We take appropriate technical measures to protect your data:

• All data transmitted to third-party services is sent over encrypted HTTPS connections
• Our proxy server does not store or log user content
• Audio and transcription data is stored locally on your device, protected by macOS security
• No user-identifying information is transmitted with API requests
• API authentication credentials are stored securely and never exposed to end users

16. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last Updated" date at the top of this document. For significant changes, we will endeavour to notify users through the app. Continued use of the app after changes constitutes acceptance of the updated policy.

17. Contact Us

If you have questions or concerns about this Privacy Policy or how your data is handled:

THOHT Limited
Email: info@thoht.app
Website: https://www.thoht.app

This privacy policy aligns with the data disclosures made in the Apple App Store privacy nutrition labels for THOHT.