Security & privacy
Your data stays yours. Here's the machinery.
VoxClip is local-first: the Timeline is a database on your own device, dictation audio is processed on your machine and never uploaded, and the free app sends none of your Timeline, voice, or usage data to us. Choosing a local model downloads it to your device. Paid cloud features are opt-in, show what leaves before sending, and sync is end-to-end encrypted.
The free app: your content stays local
Capture, dictation, search, Snippets and the Quick-picker run in the app's local core. Choosing a voice model downloads that model from its host to your device. VoxClip sends no Timeline content, audio, telemetry or crash reports as part of that download.
Dictation: your voice stays home
Speech-to-text runs on your device with a local model. Audio lives in memory during transcription and is discarded after. If you turn on the optional "keep recordings" setting, recordings are stored on your device only; they are never synced and never uploaded.
Sync: encrypted before it leaves
Turn on sync and your entries are encrypted on your device with a key only your devices hold, protected by a recovery code only you know. What our servers receive and store is ciphertext. We cannot read your Timeline; nobody who breaches our servers could either. The honest cost: lose the recovery code and we cannot restore your synced data. We hold no spare key, on purpose.
AI features: disclosure before anything is sent
"Talk to your stash", transforms and Enhance need a cloud model. Before each request, VoxClip shows you the exact text that would leave your device, and nothing is sent until you confirm. Only the matched snippets or the text being transformed are sent, never your whole Timeline, and never audio. Requests are processed and not used to train AI models.
Team snippets: shared on purpose
Team snippets are stored on our servers and are not end-to-end encrypted, so other members can use them. Personal snippets stay on your device until you choose to share them.
Guardrails you control
The app exclusion list keeps chosen apps out of capture entirely. Concealed clipboard types (how password managers mark secrets) are ignored by default. One-click clear wipes local history; "wipe synced data" removes a device's sync state.
The one-rule summary: if it runs on your machine, it's free and it stays there. If it needs our servers, you'll know, before anything is sent.
See Pricing and the Privacy Policy.