Legal

Privacy Policy

Last updated: May 2, 2026

The privacy of your data — and it is your data, not ours — is important to us. In this policy we explain: what data we collect and why; how your data is handled; and your rights.

Who we are

SnailText ("we", "us", "our") is a voice-to-text desktop application for Mac and Windows. You can reach us at support@snailtext.app.

The short version

• Speech recognition runs on your device. Audio is processed by a local Whisper model and never sent to our servers or any third party.
• Desktop analytics: we collect anonymous in-app usage events (PostHog) to improve the product. Opt-out at any time in Settings → Privacy. We never include audio or transcription text in analytics.
• Website analytics: we use Cloudflare Web Analytics (no cookies). With your consent, we also load Google Analytics 4 to measure download conversions. Reject the cookie banner and GA4 never loads.
• We never sell your data.

What we collect and why

1. Account information

When you create an account, we collect your email address. We use it to:

• Send you a confirmation email
• Let you sign in
• Send important product updates (not marketing without your consent)

We use Supabase to manage authentication. You can also sign in with Google OAuth — in that case Google shares your email and name with us.

2. Payment information

When you subscribe to Pro, payment is processed by Lemon Squeezy (our payment processor). We never see or store your credit card number. Lemon Squeezy provides us with:

• Your email address
• Your subscription status and plan
• Transaction records for invoicing

Lemon Squeezy acts as the Merchant of Record and has its own Privacy Policy that governs payment data.

3. Voice audio and transcriptions

Your audio is processed entirely on your device by a local Whisper model. It is never uploaded to our servers or any third-party service. Your transcriptions are stored locally in a SQLite database on your machine, and you control them via Settings → Privacy → History (delete individual entries, set a retention period, or wipe everything).

We never use your audio or transcription text to train our own AI models. We also never store your audio anywhere, even temporarily — it stays in RAM during recognition and is freed when the text is produced.

4. In-app usage analytics (opt-out)

To understand how the app is used and improve it, we collect anonymous in-app usage events such as:

• App launched
• Recording started / completed / cancelled
• Feature used (snippets, hotkey, settings changes)
• Errors encountered

We do not include:

• The content of any transcription
• Your email or name
• Your IP address (anonymized before storage)
• Any audio data

We use PostHog (EU-hosted) for in-app analytics. Your distinct_id is a hash of a random device UUID — there is no way to map it back to you. You can disable analytics at any time in Settings → Privacy → Analytics. When disabled, no data is sent — not even anonymized events.

5. Website analytics

Our website snailtext.app uses two layers of analytics:

• Cloudflare Web Analytics — always on. Cookie-less, no cross-site tracking. Collects aggregated data about page visits, countries, and browsers. No personal data is stored.
• Google Analytics 4 (GA4) — only loaded after you accept the cookie banner on first visit. We use GA4 to measure download conversions, traffic sources, and campaign performance. GA4 sets cookies in the _ga* family and assigns you a pseudonymous client identifier. If you reject the banner, GA4 is not loaded — no GA cookies, no GA requests.

You can change your choice at any time by clearing your browser's local storage for snailtext.app and reloading the page; the banner will reappear.

6. Cookies and similar technologies

The full list of what may be set in your browser when you visit snailtext.app:

We do not use Meta Pixel, Hotjar, FullStory, or any session-recording tools.

7. Advertising

We may run paid acquisition campaigns on Google Ads (and possibly other platforms in the future) to promote SnailText. When we do:

• Conversion measurement uses our GA4 setup — only with your consent.
• We may build remarketing audiences in Google Ads from GA4 data (e.g. "people who visited /pricing/ but didn't download").
• If you reject the cookie banner, you are not added to any remarketing audience.

If we ever add ad platforms with their own pixels (e.g. Meta Pixel), we will update this policy and the cookie banner before doing so.

8. Support correspondence

If you contact us by email, we keep that correspondence to help you and to maintain a history of past interactions. We will never share your support emails with third parties.

Third-party services we use

What we do NOT do

• We do not sell your data to anyone, ever.
• We do not use your audio or transcriptions to train our AI models.
• We do not share your personal data with advertisers.
• We do not track you across other websites or apps.

Data retention

Your rights

Regardless of where you live, you have the right to:

• Access — request a copy of the data we hold about you
• Correction — request that we correct inaccurate data
• Deletion — request that we delete your data ("right to be forgotten")
• Portability — request your data in a machine-readable format
• Objection — object to certain types of processing
• Opt-out of analytics — disable in Settings → Privacy at any time

To exercise any of these rights, email us at support@snailtext.app. We will respond within 30 days.

EU/EEA residents (GDPR): you also have the right to lodge a complaint with your local data protection authority.

California residents (CCPA): we do not sell personal information. You have the right to know what data we collect and to request deletion.

Data security

We use industry-standard security practices:

• All data in transit is encrypted via TLS/SSL
• Supabase encrypts data at rest
• API keys and secrets are stored in environment variables, never in code
• We use Supabase Row Level Security so users can only access their own data

No method of transmission or storage is 100% secure. If you discover a security issue, please report it to support@snailtext.app.

Children

SnailText is not directed at children under 13 (or 16 in the EU). We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to this policy

We may update this policy as our product evolves. When we make significant changes, we will:

• Update the "Last updated" date at the top
• Notify registered users by email if the change affects how we handle their data

The history of changes will be available on our website.

Contact

Questions, requests, or concerns about this policy:

Email: support@snailtext.app
Product: snailtext.app

Adapted from the open-source Basecamp/37signals policy template, used under their open license.