Privacy Policy

Last updated: 31 July 2026

WhisperBud and this website are operated by CosmicFusion Labs Private Limited, a company registered in India ("CosmicFusion Labs", "we", "us"), which is the data controller for the limited personal data described here. WhisperBud is built privacy-first. Your dictation, both the audio you speak and the text it becomes, is processed entirely on your Computer. It is never uploaded to us or to any third party. This policy explains the limited data we do handle: what you give us when you create an account, and what our website collects.

1. On-device dictation

When you hold the key and talk, WhisperBud records audio, transcribes it, and formats the text locally on your device. We do not receive, store, or have any access to your audio or transcripts. Nothing about what you dictate leaves your Computer.

2. Account information

If you create a WhisperBud account, we collect and store:

• Email address: to identify your account, sign you in, and send important service messages.
• Password: stored only as a one-way scrypt hash. We never see or store your actual password.
• Sign-in with Google: if you choose Google sign-in, we receive your name, email, and Google account ID to create and verify your account. We do not access anything else in your Google account.

3. Usage and subscription data

To run the service and any paid plan, we may store basic, non-content data such as the number of words dictated, dictation counts, editing-impact totals, the time of your latest completed dictation, your plan and billing status, and app version. This helps us enforce plan limits, operate the service, and improve the app. It never includes the contents of your dictation.

4. Payments

If you buy a paid plan, Dodo Payments processes the purchase and subscription. We receive the account, plan, payment, and subscription information needed to provide and manage your access. We do not store your full card details on our servers. Dodo Payments handles payment data under its own privacy policy.

5. Website and cookies

On whisperbud.com, strictly necessary storage remembers your cookie choices. Google Analytics and Google Tag Manager do not load unless you give the matching analytics or marketing consent. If allowed, they help us understand site use and measure campaigns. You can reject optional tracking or change your choice at any time using the Cookie settings button on the website.

6. Desktop product analytics

If product analytics is enabled, the WhisperBud desktop app sends bounded product-use events through our service to Amplitude. These events can include the app surface, control type, element type, interaction context, and app version. Signed-in events may be linked to your account; events before sign-in remain anonymous. Product analytics never includes audio, transcripts, formatted dictation text, clipboard contents, input values, or pointer coordinates.

7. Crash and error reports

WhisperBud can share sanitized technical crash and error reports to help us diagnose reliability problems. This sharing is on by default and can be turned off in Settings. A report can include bounded technical logs, error details, app and system information, and an optional crash minidump. Reports never include audio, recordings, transcripts, formatted dictation text, clipboard contents, credentials, environment variables, or the local usage database. Full reports are stored privately and expire after 90 days.

8. Service providers

We use service providers only where needed to operate WhisperBud:

• Amazon Web Services: account services, email delivery, and private storage.
• Dodo Payments: payment and subscription processing.
• Amplitude: desktop product analytics as described above.
• Google: optional Google sign-in and, only after the relevant website consent, Google Analytics and Google Tag Manager.

9. How we use your data

• To create and secure your account.
• To provide the app and any subscription features.
• To send essential service notices (for example, security or billing notices).
• To diagnose problems and improve the product.

We do not sell your personal data, and we do not use your dictation to train models.

10. Data retention

We keep account and usage data for as long as your account is active. Full crash and error reports expire after 90 days. Payment and subscription records may be kept where required for legal, tax, accounting, fraud-prevention, or dispute purposes. If you delete your account, we remove your personal data within a reasonable period, except where we must keep records for those purposes.

11. Your rights

You can request access to, correction of, or deletion of your personal data at any time. To do so, email us at hello@whisperbud.com.

12. Security

We use industry-standard measures to protect account data, including hashed passwords and encrypted connections. No system is perfectly secure, but we work to keep the data we hold safe.

13. Children

WhisperBud is not directed at children under 13, and we do not knowingly collect data from them.

14. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you.

15. Contact

Questions about this policy or your data? Email us at hello@whisperbud.com.