Privacy Policy

Last updated 31 August 2026

Who is responsible

The data controller is Mykhailo Korotych, of Myronenko 43, Poltava, 36010, Ukraine. Contact: support@sayful.app.

What stays entirely on your Mac

• Keyboard-layout correction. It is rule-based and local — no account and no network request.
• The typing trainer, your notes, your history and your settings.
• Any API keys you enter yourself. They live in the macOS Keychain.

What we process when you use a cloud feature

Dictation, text correction, translation, read-aloud and screen text recognition send data to our servers, which forward it to a third-party AI provider and return the result. We send only the exact text, audio clip or screen region you acted on — never your wider screen, clipboard or files.

This content is processed in transit and is not written to our database.

What we do store

• Account: your Google account id, email address, email domain and profile picture URL.
• Usage counts: how many words each request cost, the feature it came from (dictation, chat, read-aloud, screen text) and which AI model handled it. No content.
• Subscription: your plan, its status, the renewal date and the payment-provider identifiers needed to keep access in sync. We never see or store your card details.
• Feedback you send us: your message and anything you choose to attach.

Why we may process it

To provide the app you asked for and to bill you (performance of a contract); to enforce usage allowances and prevent abuse (legitimate interest); and to meet tax and accounting obligations (legal obligation).

Who else is involved

• Supabase — authentication, database and serverless functions.
• OpenRouter and Groq — AI providers that process your request content in order to answer it.
• Creem — merchant of record for purchases completed through Creem Checkout. Creem receives your billing details directly and handles payment, invoicing, sales tax and refunds for those transactions.
• Other checkout providers — if another authorised merchant of record is offered, we identify it before purchase. Sayful never receives or stores your card details.
• Resend — sends transactional email such as feedback notifications.
• Vercel — hosts this website and provides privacy-preserving, aggregate Web Analytics for the public landing page. This lets us understand page views, referral and campaign sources, broad country and device/browser information, and which Download button was clicked. We do not send names, email addresses, account or payment data, dictated text, or other user content to website analytics. Analytics does not use tracking cookies, and we do not use advertising networks.

Optional app analytics (PostHog, US Cloud). Only if you enable “Share anonymous usage events” in onboarding or Settings → General, Sayful sends a small set of feature, onboarding and checkout milestones, the app version, and a random installation identifier through our server to PostHog. We do not send your email, account ID, dictated text, audio, screenshots, document contents, or screen recordings. Our event gateway does not forward your IP address to PostHog. These events do not create an account-linked analytics profile. Turning the setting off stops future sending and removes the analytics identifier on your Mac; it does not automatically delete previously received events. Website hosting and network infrastructure may still process connection metadata to serve requests.

We do not sell your data and we do not use your content to train models.

How long we keep it

Account and subscription records are kept while your account exists. Weekly usage counts are kept for cost and abuse analysis. The in-app Delete Account action removes the saved profile and session from your Mac; to permanently delete the Sayful Cloud account and associated records, email us. We may retain records that the law requires for tax or accounting purposes.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Email support@sayful.app. You can remove the local account and session from inside Sayful at any time; permanent cloud deletion currently requires a support request.

macOS permissions

Sayful asks for Input Monitoring, Accessibility, Microphone and Screen Recording. These let it detect your hotkey, insert corrected text, hear dictation and read a screen region you select. They are used only for those actions. Sayful deliberately stays quiet in terminals, password managers and other sensitive apps, and it does not record your screen or keystrokes in the background.

Children

Sayful is not intended for children under 16.

Changes

If this policy changes, the date at the top changes with it, and significant changes are announced in the app or by email.