Privacy

The short version

Flow transcribes speech on-device and never sends the audio or the transcript anywhere. There is no account, no server, and no telemetry. Flow does not know who is using it.

Transcription is local

Speech is transcribed on-device through whisper.cpp. The audio never leaves the machine, and neither does the resulting text. Flow depends on no vault, no hub, and no server of its own — it reads and writes only its config file, its own runtime state, and the files the operator asks it to insert text into.

Exactly three outbound connections, all optional or user-started

Flow's default posture is no network access at all. Three connections exist, each user-controlled:

• Local cleanup, off by default. If the optional cleanup pass is turned on in Settings, transcript text is sent to an Ollama instance running on the same machine — never a remote server — to tidy punctuation and formatting before insertion. It stays off unless turned on.
• Model download, user-started. Fetching a transcription model happens only when the operator starts a download, over HTTPS, from Hugging Face.
• Update checks, on by default. Flow checks a fixed update feed (myceliumflow.app/appcast.xml) for a newer version. This is the one connection that is on by default; it can be turned off from the General section of Settings. The check fetches only the feed itself — no system profile, hardware information, or usage data is sent with it.

No audio or transcript text is ever sent by any of these three connections.

What is stored, and where

Everything Flow stores lives on the machine it runs on, under~/Library/Application Support/Mycelium/, outside any synced or shared folder:

• Configuration— Flow's settings.
• Runtime state — metadata only (state transitions, timing), never transcript text.
• Recent-transcription history — kept in memory by default and cleared when Flow quits. Saving history to disk is off by default and is an explicit opt-in setting; when it is on, the file stays local and owner-only.
• Debug audio retention — off by default. If explicitly turned on for troubleshooting, a bounded number of recent recordings are kept locally instead of being discarded after transcription; this is an advanced, opt-in setting, not something Flow does on its own.
• Trial state — a small local file recording when the trial started, so the app can show days remaining. Deleting this file resets the trial timer; that is a known, accepted property of the honour-system trial, not a bug.

Purchases

Buying Flow happens through a third-party checkout linked from the website. Flow itself never receives or stores any payment information — no card number, no billing address, nothing. The purchase acknowledgement inside the app is a one-way switch the operator flips after buying; it carries no payment data back to anyone.

Checkout itself is run by Paddle.com, TaioTech's merchant of record, which collects and processes payment details directly. See Paddle's privacy policy for how they handle that data.

Support

Questions about any of this can be sent through the support page, linked from the app's About window and from this site.