The short version
Talkuza is a dictation app with an account. When you speak, your Mac sends the audio directly to Groq (and, for read-aloud, to Fish Audio) using your own API keys — we never proxy or listen to that traffic. The text that comes back — your dictations, your corrections, your settings and your statistics — is stored in your Talkuza account on our servers, so that when you sign in on another Mac, everything is there, the way you left it. We do not sell your data, share it with advertisers, or use it to train AI models. Your meeting audio recordings never leave your Mac. You can delete your account in the app, and you can ask us to erase your synced data from our servers — see Deleting your account below.
What we collect, and why
- Account details you give us: first name, last name, email address, and username — provided at checkout or in the app. Why: to create and identify your account and deliver your redeem code.
- Purchase details: months bought, amount, currency, order reference, and payment method type. We never see or store your card, UPI, or wallet secrets — those stay with your payment provider. Why: to match your payment to your order and run your subscription.
- Your dictation content, synced to your account: when you are signed in, the app syncs the following to our servers, under your account, so it follows you across your Macs:
- your dictation history (the transcripts of what you dictated, with their corrected versions);
- your statistics — total words, words per minute, streaks and related progress numbers;
- your Wordbook (dictionary entries) and the corrections the app has learned from you;
- your Saved Text (snippets) and your Quick Notes;
- your Echo Notes meeting notes and their AI summaries (the meeting audio itself is not synced — see What stays on your Mac);
- your to-dos created in the app;
- your settings — including your languages, Tone/writing styles, app preferences and your hotkeys;
- your profile details, including a profile picture if you add one.
- Your AI keys, in a sealed vault: Talkuza runs on your own Groq and Fish Audio keys (bring-your-own-key), which the app keeps in your Mac's Keychain. So that your Groq keys are restored when you sign in on a new Mac, they are also stored on our servers in a sealed vault: each key is encrypted with AES-256-GCM before it is stored, the master key is held separately from the database, and a copy of the database alone cannot be used to recover your keys. Sealed keys are unsealed only in response to an authenticated request from your own account.
- Device details for licence enforcement: your Mac's hardware UUID hash, device name, macOS version, app version, and last-seen IP address. Why: to enforce the 3-Mac limit and stop one account being shared by many people. For free trials, your Mac is checked with a one-way hash of its serial number — the raw serial never leaves your Mac and is never stored.
- Support messages and email records: what you write to us, and a delivery log of the service emails we send you (redeem codes, trial codes, expiry warnings). Why: to answer you and to prove delivery when a code goes missing.
- Website cookies: our website sets two cookies of its own:
tkz_country(remembers your country so we show ₹ or $ correctly) andtkz_ref(remembers a referral code for 30 days so the right person gets credit). Both last 30 days. - Country code: derived from your IP at checkout so we can show ₹ INR in India and $ USD / crypto elsewhere.
How your dictation actually flows
- You speak. The app on your Mac sends the audio straight to Groq using your key. Talkuza's servers are not in this path and never receive your dictation audio.
- Groq returns a transcript; a correction pass (also on Groq, with your key) cleans it up. Read-aloud, when you use it, goes straight from your Mac to Fish Audio with your key.
- The resulting text — the transcript and its correction — is saved in the app and synced to your Talkuza account as described above.
We do not use your dictations, notes, or any synced content to train AI models, and we do not read your content except where needed to operate the service, fix a problem you report, or comply with the law.
Where your data lives
Your account data is stored in a Postgres database hosted by Neon. The website itself is hosted on Vercel. Data is encrypted in transit (TLS) between your Mac, our website and our database, and encrypted at rest by the database provider. Your synced content is stored per account and per profile: one account's data is never mixed with or visible to another's. Vault keys get the additional AES-256-GCM sealing described above. Sync storage is capped per account (100,000 records / 512 MB) as an abuse safeguard.
Sync across your devices
- One account works on up to 3 Macs.
- Signing in on a Mac downloads your account's data — dictations, statistics, Wordbook, settings, hotkeys, notes — so the new Mac matches the account.
- While you are signed in, changes you make on one Mac are uploaded and appear on your other signed-in Macs on the app's live refresh cycle.
- Signing out of a Mac wipes that Mac's local copies of your data. Your account data remains in our database and comes back when you sign in again.
- Removing a Mac from your Account page revokes that Mac's access.
What stays on your Mac
- Audio. Your dictation audio is sent only to Groq (by the app, directly) and is not stored by Talkuza. Your Echo Notes meeting recordings (audio) are stored on your Mac and are never synced — only the meeting's notes and summary sync to your account.
- Local working copies and caches the app keeps so it works quickly and offline; signing out wipes them.
- The local, machine-bound copy of your API keys in the macOS Keychain.
How long we keep it
- Synced account content (dictations, notes, Wordbook, settings, statistics, vault keys): kept while your account exists; on deletion, as described in Deleting your account below.
- Account, order and redeem-code records: kept while your account exists; after deletion, order records needed for accounting are kept in anonymised form only as long as the law requires.
- Device records: kept while the device is bound to your account; removed when you remove the device or delete the account.
- Support messages and email delivery logs: kept while your account is active, so we can answer you and prove delivery when a code goes missing.
- Shared notes: until the link expires or you unpublish, whichever is sooner.
Deleting your account, and your rights (DPDP Act 2023)
As a Data Principal under the DPDP Act 2023, you have the right to access the personal data we hold about you, correct inaccurate data, withdraw consent, raise a grievance, and erase your data.
Erasure, as it works today: deleting your account in the app ends your subscription and removes the app's data from that Mac. Today, deleting in the app does not by itself erase the copies of your data synced to our servers. To erase your synced data as well — your dictations, notes, Wordbook, settings and statistics, your sealed vault keys, your device records and your profile — email [email protected] from the email address on your account and we will carry out the erasure manually and confirm once it is done. A full self-serve erasure inside the app is being built. Order records needed for accounting are retained only in anonymised form, as the law requires.
To exercise any right, email [email protected] from the email address on your account, or use the contact form. We verify identity by matching the email and, where needed, the redeem code on the account. We respond to verified requests within 30 days.
Recording consent
Echo Notes records meetings. Always get consent before transcribing others. The app reminds you every time a recording starts, and the meeting-recorder setup gate asks you to confirm you have consent.
- Meeting audio stays on your Mac; the meeting's notes and summary sync to your account like your other notes.
- Shared notes (/shared/:id) are public to anyone with the link — share deliberately, and unpublish from the app when you're done.
- If someone asks you to delete a recording of them, delete it — and tell us if you need help removing a shared copy.
Who else processes your data
We share personal data only with the processors below, only for the purpose listed. We do not sell personal data and do not share it with advertisers.
- Groq — your dictation audio and transcripts (sent by the app on your Mac, with your key): speech-to-text transcription and the AI correction pass.
- Fish Audio — text you choose to have read aloud (sent by the app, with your key): read-aloud text-to-speech.
- Neon — our Postgres database, holding your account and synced data: database hosting.
- Vercel — website traffic and our web application: website hosting.
- Brevo — your email address and the service emails we send: email delivery (codes, warnings, support).
- Our payment provider — payment details you enter at checkout for UPI/card payments: processing INR payments. We never see or store your card or UPI credentials.
- Crypto payments (USDT TRC20) — your payment is made on-chain to our receiving address; no payment processor holds your data. Crypto checkout is matched to your order by its unique amount.
- AI tools you connect (MCP) — the Wordbook entries, Saved Text snippets, dictation statistics, and settings summary you expose via MCP Sync with your personal key: only at your direction, and governed by that tool's own policy.
Children
Talkuza is not directed at children under 18. If you are under 18, please use Talkuza only with a parent or guardian, and do not send us personal data without their consent.
Grievance officer
For any privacy complaint under the DPDP Act 2023, contact our Grievance Officer at [email protected] with the subject “DPDP Grievance”. Include your account email and a description of the issue. We acknowledge grievances within 48 hours and resolve them within 30 days.
Changes
If this policy changes materially, we'll note the new “Last updated” date here and, for active subscribers, include a short note in the app. Continued use after a change means you accept the updated policy.