Privacy policy

In short: the AURIS app does not send your voice or your texts anywhere. The website sets no tracking cookie. We collect only what is needed to sell and activate a license and to answer you.

This policy has three parts: A. the website, B. the app, C. what applies to both.

Who is responsible

The controller is DBM Strategy LLC, a Delaware limited liability company, 2915 Ogletown Road, #4266, Newark, DE 19713, United States. To exercise your rights or ask a question, use the contact form, subject “Privacy and personal data”.

A. The website

Browsing

When you visit the site, the server receives your IP address and technical details about your browser. We use them only to deliver pages and protect the site, and keep them in server logs for no longer than 30 days. The site is hosted on a server of Hostinger International Ltd. (Cyprus) and delivered through Cloudflare, Inc. (United States), which provides the domain name service, page delivery and protection against attacks.

Audience measurement

We do not measure the site’s audience today. If we add measurement, it will be done by our own site, without cookies or personal identifiers, and this page will be updated first.

Contact form

Name, email address, subject and message. Purpose: answering you. Legal basis: our legitimate interest in answering you, or steps you ask for before or after a purchase. Retention: 12 months at most after your request is closed. To block automated spam, the form uses Cloudflare Turnstile, which checks your browser when you send the form. Turnstile sets no advertising cookies. After sending, you receive a confirmation copy of your message.

Waiting list and announcements

When you subscribe, we keep your email address and language to notify you of the launch and invite you to an optional questionnaire. A separate confirmation is not required to join the list. Questionnaire access verifies possession of the address. You may unsubscribe at any time using the link in the emails. The basis is your consent; the address is retained until you unsubscribe.

Purchase

Paddle, our reseller, collects the data needed for payment (for example email, country, payment method, VAT number if any) and processes it as an independent controller, under its own privacy notice (paddle.com/legal/privacy). We never see your card number. Paddle passes on to us what we need to deliver and manage your license, such as your email address, country, order reference, product and amount.

“My licenses” area

The customer account is being prepared. The planned login uses a one-time code sent by email, without a password. Necessary session cookies keep you signed in.

Education discount

To check eligibility, we send a confirmation link to your school or university address. That address is kept only as a fingerprint, for 24 hours.

B. The AURIS app

Your dictations stay on your Mac

Voice capture, transcription, cleanup and insertion happen on your Mac. The app sends no audio, no text, no usage statistics and no crash or diagnostic reports. It needs no account.

What the app keeps on your Mac

• Audio of a dictation: while you record, the audio is written every second to a temporary file, so that a crash does not lose it. After a successful dictation, the audio is kept for 5 minutes so it can be recovered, then deleted; only one such audio is kept at a time. After a failure or a crash, it is kept until you recover or discard the dictation. At launch, the app deletes audio files left over from a previous session (for example if you quit it during those 5 minutes), except one awaiting recovery. Apple’s engine works on a temporary copy of the audio, deleted at the end of the transcription; if the app closes unexpectedly during that transcription, the copy may remain in the macOS temporary folder.
• Recovery file: during a dictation, a small file records where the audio is and the text transcribed so far. It is removed once the text has been delivered; after a failure or a crash, it is kept until you recover or discard the dictation.
• History: on by default, it keeps your last 20 dictations (transcribed text and cleaned-up text, date, language and duration) in a local file. You can turn it off in Preferences › History; dictations already saved then stay in the file until you erase it (see “Erase everything”).
• Glossary: the words you add, in a local file, until you delete them in Preferences › Glossary.
• Settings: your choices in Preferences, stored by macOS for the app; they contain no dictated text.
• License: your signed license certificate, with your email address, the license identifier and this Mac’s fingerprint, until you free this Mac.
• Trial: the trial start date and the date of last use, in this Mac’s macOS keychain.
• Technical logs: operating information (engine used, durations, identifier of the app where the text is inserted) written to the macOS log, without the dictated text or the audio.

AURIS does not encrypt these files itself: they are protected by your macOS account’s access rights and, if you have turned it on, by FileVault encryption. We have no access to them.

Clipboard

When the app cannot write the text directly at your cursor, it pastes it by placing it briefly on the macOS clipboard, then puts your previous content back, unless you copied something else in the meantime. If automatic insertion is turned off or fails, or if you switched apps during the dictation, the text stays on the clipboard. Like any copied text, it can then be read by tools that watch the clipboard, such as a clipboard history manager or Apple’s Universal Clipboard if it is turned on.

The only four connections the app can open

None of them transmits your voice or your texts.

• License activation, when you click “Activate”, once per device. Sent to our license server, on the aurisformac.com domain: your key, the email used for the purchase, a fingerprint of the device (a one-way value computed from its hardware identifier, which itself never leaves the Mac) and the word “Mac”, without your computer’s model or name. When you free this Mac in Preferences › License, the app sends that server the license certificate stored on this Mac. No other check takes place: the license then works offline.
• Download of a transcription model (Whisper), when you click “Download” in Preferences › Models. The app fetches it from Hugging Face (huggingface.co), which may redirect the download to its own delivery servers. No dictation data is sent.
• Download of a cleanup model (Qwen), when you click “Download” in Preferences › Advanced, in the same way from Hugging Face.
• Update check, when you click “Check for updates”, when you open Preferences › General, or at most once a day if you turn on automatic checks (off by default). The app reads a public version file on our website, aurisformac.com. If you choose to download an update, the app fetches it from aurisformac.com and checks its fingerprint and signature; installing it takes one more click. These requests contain neither your key, nor your email address, nor any device identifier.

Any connection reveals your IP address to the server contacted. Hugging Face processes it under its own policies. Our servers (website, updates, licenses) receive it under the conditions described in part A; to limit repeated attempts, the license server also keeps a one-way fingerprint of the address the request comes from, together with an attempt counter.

The trial works without any connection. The “Buy on the website” and “Manage my licence” buttons open this website in your browser: your browser connects to it, not the app.

A resource installed by macOS

If you choose Apple’s speech recognition engine for a language whose speech resource is not yet installed on your Mac, AURIS asks macOS to install it. macOS downloads it from Apple’s servers, under Apple’s rules; the request concerns the language, not your dictation. In the automatic setting, AURIS uses Apple’s engine only if that resource is already installed.

What we keep about your license

From the opening of sales, our license server keeps:

• a fingerprint of your key (never the key itself), the order reference, the license type, the version covered, the number of devices and the status: for the life of the license;
• for each activated device, its fingerprint, its type (“Mac”) and dates; never your computer’s name or exact model;
• a log of license actions (action, date, origin) without IP address: 1 year;
• your email address, in our customer system.

If you ask us to erase your data, devices already activated keep working offline, but the license can no longer be found or recovered. Records that the law requires us to keep for accounting are retained.

Erase everything

Deleting the app does not delete this data. To erase everything:

• if a license is activated on this Mac, free it in Preferences › License;
• discard any pending recovery, wait 5 minutes after your last dictation so that its audio is deleted, then quit AURIS;
• delete the folder ~/Library/Application Support/Auris (history, glossary, license, recovery file and downloaded models) and the file ~/Library/Preferences/com.auris.app.plist (settings): in the Finder, choose Go › Go to Folder and paste the path;
• in the Keychain Access app, delete the item “com.auris.trial” (trial dates).

C. For the site and the app

Legal bases

• Contract: delivering, activating and supporting your license.
• Legitimate interest: security of the site and the license server, answering messages, announcements to customers.
• Consent: the waiting list.
• Legal obligation: accounting and tax records (kept for as long as the law requires, usually up to 10 years).

Who receives data

• Our host, Hostinger International Ltd. (Cyprus), and Cloudflare, Inc. (United States), for the network and security.
• An email delivery provider acting on our instructions, for the emails we send.
• Paddle, our reseller, for purchases (independent controller).
• Hugging Face, only when you download a model from the app (part B).

We do not sell or rent personal data, and we use no advertising service.

Transfers outside the European Union

DBM Strategy LLC is based in the United States, and some of our providers process data outside the European Union. These transfers rely on the European Commission’s standard contractual clauses or, where applicable, the EU-US Data Privacy Framework.

Your rights

You can ask to access, correct or erase your data, to restrict or object to its use, and to receive it in a portable format. You can withdraw your consent at any time. Write to us through the contact page: we answer within one month. You can also lodge a complaint with a data protection authority, for example the CNIL in France (cnil.fr), the Garante per la protezione dei dati personali in Italy (garanteprivacy.it), or the authority of your country.

Children

AURIS is not intended for children under 16. We do not knowingly collect their data.

Changes

We update this policy before any change in our practices takes effect. The date of the current version is shown at the top of the page.