TessFlo Privacy Policy

Public URL: https://tessflo.trowins.com/privacy

Version: 1.9
Effective date: 21 October 2026
Provider: Trowins Pvt Ltd
Product: TessFlo
Privacy contact: support@trowins.com (also handles privacy requests)
Website: https://tessflo.trowins.com/

1. Overview

“Trowins Pvt Ltd,” “we,” “us” and “our” refer to Trowins Pvt Ltd, the provider of TessFlo. “TessFlo” means the macOS dictation application provided by Trowins Pvt Ltd. “You” and “your” mean the person using TessFlo or the organization on whose behalf that person is authorized to act. Trowins Pvt Ltd is responsible for the information we process as described in this policy.

TessFlo is a macOS dictation application with optional local writing cleanup. Audio and transcripts are processed locally on your Mac. TessFlo does not send audio, transcripts or cleanup input/output to model providers for inference. This statement concerns TessFlo's own processing: applications or services into which you paste, export or share text have their own data practices.

TessFlo still connects to services for model downloads, licensing, purchases, updates and support. This notice covers those connections and local data handling.

2. Information processed locally

Your saved history remains on your Mac and can be managed through the available app controls. macOS logs may contain device/error metadata. Exports and clipboard delivery create additional copies under your control.

Local data is not uploaded merely because it is stored. Mac backups, synchronization tools, other applications and users with access to your Mac can affect its privacy. Ordinary local files are not represented as independently encrypted by TessFlo.

Microphone permission enables recording. Accessibility permission supports pasting into another application. Clipboard use and text pasted into other applications may expose that text to those applications or operating-system features.

Your voice is not used for unrelated purposes

TessFlo processes your microphone audio locally on your Mac to provide the dictation you request. Recognized text is used locally for the display, history, clipboard/paste and optional cleanup features you choose. Trowins Pvt Ltd does not collect your microphone recordings through normal app operation, sell or rent your voice recordings or transcripts, use them for advertising or profiling, or use them to train or improve AI models. We do not send your voice recordings or transcripts to model providers for those purposes.

If you deliberately send us a recording or transcript for a support request, we handle it only as needed to address that request and meet applicable legal obligations, under the support and retention provisions of this policy. We do not use that material for AI-model training or advertising. Please avoid sending private speech content unless it is necessary for the issue.

These assurances concern TessFlo and Trowins Pvt Ltd. They do not control separate copies you export, share or paste into other applications, or data handled by your Mac's backup or synchronization services.

3. Model downloads

TessFlo uses the official FluidAudio package for on-device Parakeet v2 speech recognition, a Whisper runtime for supported Whisper models, and Gemma 2 for optional Light Cleanup. These models run on your Mac after installation. Model files and supporting assets are downloaded from Hugging Face and its delivery infrastructure; the selected model and its source are identified in the model information and license notices.

Download hosts can receive your IP address, request time, requested file/path, HTTP client information and other normal connection metadata. A model download may reveal which model you selected; it does not send your recorded speech or transcript. Downloading a Google-developed model from a third-party host does not mean TessFlo sends your dictation to Google.

This Privacy Policy covers all TessFlo models. The presence of a component in a local software package does not itself mean that it processes or transmits your information. This policy describes TessFlo's actual data handling. Applicable software and model licenses are available separately in Settings → Legal & Licenses.

4. Licensing and trial access

We use Polar as our merchant of record to process purchases and provide license keys and activation management. Polar processes purchase, billing and payment-related information under its own privacy policy: https://polar.sh/legal/privacy.

We also use Cloudflare to host TessFlo's licensing service, which verifies access and administers the one-time trial. This service processes limited device and licensing information, including device identifiers, license information supplied for activation or deactivation, activation references and status, trial dates. Device identifiers can be personal data even when hashed.

There is no post-trial free daily allowance, and the current app does not send daily dictation counts or create daily usage reservations. The app stores a signed entitlement receipt, trial-time checkpoints and a server-confirmed trial-expiry marker locally to support offline trial access and prevent ordinary clock changes from extending the trial. Starting the trial and recovering uncertain trial time require a connection to the licensing service; ordinary dictation during a valid trial can run offline. During normal operation, audio, transcripts, vocabulary and cleanup content are not sent to Polar or TessFlo's licensing service. Hosting and security services may process IP addresses and other technical connection information.

5. Purchases and support

Polar handles checkout and related purchase/customer information, including details required for payments, invoicing, refunds and fraud prevention. Payment credentials are processed by payment services rather than stored in TessFlo's local history. Through Polar, we may access customer names and email addresses, customer identifiers and record dates, and billing names, addresses and tax identifiers where supplied and made available. We may also receive related order, refund, license and activation information to supply your purchase and support. Customer records can include optional external identifiers and metadata that we supply. We use these records for purchase administration, support, refunds and entitlement management. Where permitted, we also use available purchase email addresses to send service notices about the end of active maintenance or permanent retirement of the licensing service.

If you contact support or submit a privacy request at support@trowins.com, we receive your email address, any name you provide, your message and any attachments you choose to send. We use Hostinger Mail to receive, store and send this correspondence and respond to your request. Email delivery also involves technical message information, such as sender and recipient addresses and timestamps. We have not connected this mailbox to another email service or enabled automatic forwarding.

Please remove unnecessary private content before sharing. TessFlo does not automatically send diagnostic logs or crash reports to us. We receive such files only if you choose to share them with support. Information you deliberately include in a support email is processed through the email service even if it originated in a local recording or transcript.

6. Updates and website

Promotional emails and newsletters are currently disabled. If we introduce them, we will offer a separate opt-in and explain how to unsubscribe. Accepting TessFlo's app terms, acknowledging this Privacy Policy or purchasing TessFlo does not itself sign you up for promotional emails.

TessFlo checks for and downloads app updates using services hosted by Cloudflare. From TessFlo 1.0.4, automatic update checks are enabled by default after a fresh install. If you previously saved a different preference, TessFlo preserves it. You can turn automatic checks off or on in Settings, or check manually. Automatic checks do not automatically install an update; you choose whether to proceed. Update checks and downloads can send your IP address and technical request metadata to the update host. Update checks do not need dictation content.

Cloudflare hosts our website and may process technical request metadata, such as IP addresses, request times and browser information, to deliver and protect the website. Website request records are available to us through Cloudflare's dashboard.

We use Cloudflare Web Analytics on tessflo.trowins.com, within our trowins.com website configuration, to understand website visits and page performance. A browser script sends page-view and performance measurements to Cloudflare. The current automatic setup is configured to exclude visitors in the EU. Cloudflare describes this service as not tracking individual visitors across its customers' websites. This website analytics processing does not send TessFlo recordings, transcripts or cleanup content.

If you opt in through Privacy choices, we use Microsoft Clarity on the TessFlo website to understand visitor behavior and improve usability through interaction measurements, heatmaps and session replay. Clarity can collect page and browser/device information, clicks, scrolling, mouse movements and page content used to reconstruct interactions. It can use cookies and similar technologies to link visits and interactions. Microsoft receives this website data and processes it under the Microsoft Privacy Statement, including for the purposes described there. This website analytics is separate from the Mac app: it does not receive TessFlo microphone recordings, local transcripts or Light Cleanup input/output. See Clarity data collection and cookie information.

The Clarity script remains unloaded until you choose Allow analytics. Declining does not restrict access to the website. You can change or withdraw your choice through Privacy choices in the footer; withdrawing stops Clarity by reloading the page. We store your choice in this browser for up to 180 days, then ask again. If browser storage is unavailable, optional session analytics remains off. We do not load Clarity on the purchase-confirmation page. Our consent signal permits analytics storage only and denies advertising storage. This choice controls Clarity; the separately described Cloudflare hosting and Web Analytics processing remains subject to its configuration and applicable legal requirements. Withdrawing consent does not itself erase information already collected; contact us about applicable deletion rights.

We do not embed third-party videos, live chat, external contact forms or social-media widgets. You can use your browser's cookie controls to restrict cookies; this may limit analytics features. Contact support@trowins.com for website analytics questions or privacy requests. Acknowledging this notice does not provide consent to optional website analytics. See Cloudflare's Web Analytics documentation for its collection method.

7. Purposes, recipients and legal bases

We use necessary licensing/purchase information to provide the app entitlement you request, support information to respond to you, and necessary financial records to meet legal obligations. Limited security/abuse-prevention processing may serve legitimate interests where that legal basis applies, subject to the required assessment. Optional processing based on consent must be separately identified and withdrawable.

Recipients include Cloudflare for licensing infrastructure, Polar and its payment infrastructure for purchases, license keys and activation management, selected model/download and update hosts, Hostinger for support and privacy-request email, Cloudflare for website hosting, and Microsoft for Clarity website analytics. We do not sell or rent purchase, licensing or support information or share those records with other businesses for their advertising. Microsoft's use of website analytics data is described in its Privacy Statement linked above. Their roles differ: not every recipient acts solely as our processor. We may disclose necessary information when legally required or to establish/protect legal rights.

8. International processing and security

Online providers may process records outside your country and outside India. Local speech inference itself occurs on your Mac.

Our primary Cloudflare licensing database is located in Asia-Pacific with read replication disabled. Our Cloudflare update bucket is also shown in Asia-Pacific and stores public installers. These locations do not guarantee that Cloudflare's request handling, security processing or other service records remain within that region. We do not promise country-restricted storage for public installers. Cloudflare's Self-Serve Subscription Agreement incorporates its Data Processing Addendum for the personal data covered by that provision. The DPA includes EU Standard Contractual Clauses, UK transfer provisions and Swiss adjustments where applicable. You can contact support@trowins.com for information about relevant safeguards.

For support email, Hostinger and its service providers may process information internationally. Hostinger publishes a Data Processing Addendum covering email services, with EU Standard Contractual Clauses and UK transfer provisions where applicable, and a Privacy Policy. We do not promise that support correspondence or its recovery copies remain in a particular country. You can contact support@trowins.com for information about the safeguards relevant to your request.

Microsoft processes Clarity data through its cloud services; its Privacy Statement describes international processing and relevant safeguards.

TessFlo uses HTTPS and local access controls. Information stored or transmitted electronically cannot be guaranteed to be completely secure.

Third-party vulnerabilities and incident response

If we become aware of a credible vulnerability or suspected security incident affecting personal information for which we are responsible, we will assess its nature, scope and potential impact using the information available. We will take appropriate measures within our control to contain the incident, mitigate risks and address its cause, coordinating with relevant service providers where appropriate.

A provider handles remediation of its own infrastructure; using that provider does not remove our obligations for the personal information for which we are responsible. A provider may also have separate responsibilities under its own role, terms and applicable law. We will make reports to competent authorities and notify affected individuals where and within the periods required by applicable law, with the information required and available. We do not promise that every vulnerability will result in an individual notification where the law does not require one, or that every third-party issue can be resolved within a fixed period.

You can report a suspected security issue to support@trowins.com. Provide a description and the affected app or website version where available; do not send passwords, payment details, license keys or private dictation content. The Privacy and support guide explains how to report safely. Section 9.5 of the Terms of Use describes our response to third-party vulnerabilities affecting TessFlo. These provisions do not limit mandatory security, reporting, notification or consumer obligations.

9. Retention and deletion

You can manage local history, models and logs using the available app controls. Removing the application alone may leave its data and backups. Local support logs are size-limited. Agreement records remain locally for remembering prior decisions.

Installed models remain until removed using the available controls or by removing application data.

We apply the following retention criteria and schedules:

• Purchase and licensing records: We retain limited purchase and licensing records—such as the purchase/order reference, license identifier, purchase date, activation status, and refund or revocation status—for as long as necessary to provide your purchased access, support license recovery or transfer, prevent fraud, resolve disputes, and meet legal obligations. These records do not contain recordings, transcripts, microphone data, or cleanup content. When the information is no longer required, we delete or anonymize it.
• Trial-eligibility records: We retain a limited device identifier and trial start/expiry record for as long as needed to administer the one-time trial and prevent repeat claims. These records do not contain recordings or transcript content. The current service no longer creates daily free-dictation counts or reservations. When the retirement migration is deployed to a service database, it removes the legacy daily usage and reservation records from that database. Provider recovery copies may persist for their documented recovery window.
• Purchase/accounting records: We retain financial records we control for the periods required by applicable tax and accounting law, and as necessary to address refunds, payment disputes and legal claims. Relevant criteria include the type of transaction, the applicable statutory recordkeeping period and any unresolved proceeding. Polar and payment providers may retain records under their own legal obligations and published policies.
• Ordinary support correspondence and customer-supplied attachments: 24 months after the request is closed. Unnecessary sensitive attachments are deleted sooner; material needed for an ongoing dispute or legal obligation may be kept longer for that purpose.
• Email recovery copies and technical records: the support-correspondence schedule above applies to the mailbox records we manage. Deleting a message from that mailbox does not guarantee immediate removal of every provider recovery copy or technical record. Hostinger manages those records under its applicable service terms and legal obligations. We do not specify a fixed deletion period for individual-message recovery copies or email logs because that period has not been established for our service.
• Hosting/security logs and provider-managed backups: Provider-managed technical and security records are retained according to the applicable service, security needs and legal obligations. The specific Cloudflare history windows and Hostinger recovery-copy limitations described here do not establish one deletion deadline for every provider record. We do not make additional backups or exports of hosted customer records outside the services described here.
• Website analytics: Cloudflare states that unsampled Web Analytics beacon data is stored for seven days and subsequently reduced for longer-term storage. The service provides access to the previous six months of analytics history. This access window is not a promise that every provider copy is deleted at six months. See Cloudflare's Web Analytics FAQ.
• Microsoft Clarity analytics: access and retention depend on the type of analytics and Microsoft's service practices. See the current Clarity FAQ and Microsoft Privacy Statement. We do not promise that a dashboard access window is a deletion deadline for every provider copy.
• Website request records: our visible Cloudflare records use the adaptive HTTP request dataset (httpRequestsAdaptive) and include IP addresses, country, requested host/path, request times and response metadata. Cloudflare publishes retention of at least 31 days for adaptive request analytics on Free domains. This minimum is not a fixed deletion deadline or a promise that all provider copies are erased then. Available history depends on the applicable service and dataset limits. See Cloudflare's analytics retention update.

We retain only what is necessary for stated purposes or legal obligations. Deleting local TessFlo data does not automatically erase these hosted records.

Cloudflare D1 also maintains automatic database recovery history. On the Workers Free plan, its published recovery window is seven days. Deleting a record from the active database does not immediately erase recovery copies; they expire through the provider’s rotation. We have not configured extra exports or backups. If data is restored, we reapply completed deletion requests, removal of retired usage tables and the applicable retention schedule before returning it to normal service. Cloudflare D1 recovery documentation.

10. Your choices and rights

You can decline Light Cleanup while continuing dictation, manage local data, control available update/diagnostic settings and decide what to share with support. Depending on applicable law, you may have rights to access, correct, delete or port personal data, restrict/object to processing or withdraw consent where consent is used. Some records must be retained for legal obligations or justified purposes. You may complain to the relevant supervisory authority where applicable.

License recovery may require your original purchase email or order reference; it is not guaranteed solely from local records. A deletion request may not result in immediate removal of records still needed to administer your purchased license or meet legal obligations. We assess requests under applicable law and explain any retention that remains necessary.

Contact support@trowins.com for requests concerning records we control. We handle these requests, with technical assistance where needed. We may ask for proportionate proof of identity or purchase; do not send passwords, payment-card details or sensitive dictation content. We will handle requests within applicable deadlines. Providers acting independently may need to handle requests for their own records.

Privacy grievances and further review

Grievance support: support@trowins.com

If you have a concern about our handling of personal information or our response to a privacy request, email support@trowins.com. Describe the concern, any previous request or response, and the outcome you seek. A subject such as "Privacy grievance - TessFlo" is helpful but is not a condition for handling your complaint. We may seek proportionate identity verification where needed to protect the information involved; do not send sensitive identity documents unless reasonably requested through an appropriate process.

We will acknowledge and assess the grievance, communicate our response and reasons, and provide corrective action where required. If the concern remains unresolved, reply in the same email thread or email us with the previous reference and request a further review. Section 10.2 of the Terms of Use describes the general complaint process; any privacy-specific requirements or deadlines take precedence where applicable. The ordinary support response target does not extend those deadlines.

You may complain to a competent data-protection or other authority and pursue remedies available under applicable law, subject to any procedures that law requires. Our internal process does not waive those rights or extend legal deadlines. Providers acting independently may need to address grievances about their own processing; we remain responsible for matters within our own legal responsibility.

11. Children and changes

TessFlo is intended for adults: at least 18 and the age of legal majority where the user lives.

We will update this notice when data practices change and identify material changes appropriately. A new notice is not a substitute for consent where new processing requires consent. The current website notice is available at https://tessflo.trowins.com/privacy. Settings → Legal & Licenses contains the policy bundled with your installed app, which may be an earlier revision. Website analytics does not change the Mac app's local speech processing.

Download complete document