0
Audio bytes that touch our servers
Productive Voice is built on a single architectural rule: your voice and your text never touch our infrastructure. We're not the cloud. We're the desktop app you bought once.
We don't have a server in either path. Your microphone stream goes directly to Deepgram over your own API key, under your contract with them. The LLM refinement step goes directly from your machine to OpenRouter (or whichever provider you've configured), again under your key. Productive Voice never sees a packet of either.
AES-256-GCM, with the encryption key derived from your operating system's keychain. Even with raw disk access, your keys can't be exfiltrated without first unlocking your OS user account.
Encrypted, searchable, and exportable, but only by you. No sync. No cloud backup. No "for our records." If you reinstall the OS, your history is gone unless you exported it yourself.
You don't sign up. You don't log in. You buy a licence, install the app, paste two API keys, and you're done. There is no profile we can compromise because there is no profile at all.
Every byte. Every hop. Spelled out.
Raw audio
Encrypts & routes
Speech → text
your API key
Text → formatted
your API key
Where you typed
Local disk only
Everything sensitive that Productive Voice stores locally is encrypted at rest with AES-256-GCM. Encryption keys are derived from your OS keychain so they can't be extracted without first unlocking your user account.
Your Deepgram speech-to-text API credentials. Decrypted in-memory on demand during recording sessions and never stored in raw text on disk. OS keychain protection ensures safety at rest.
Your LLM orchestration credentials. Derived from your OS account password, preventing unauthorized access by sandboxed applications or physical drives without your system login credentials.
Your local transcripts and search index database. Completely secure and local. Decrypted on the fly as you search or browse your timeline, ensuring other processes cannot read your records.
Your personalized spelling corrections, industry acronyms, and custom nomenclature. Encrypted securely on your local file system to prevent harvesting by unauthorized background software.
Your custom system prompts and formatting instructions (e.g. summaries, translations, formatting guidelines). Stored locally in encrypted format to keep your custom configurations confidential.
The strongest privacy guarantee is the one enforced by architecture: data we never collect can't leak, can't be subpoenaed, can't be sold.
Productive Voice uses Stripe as its payment processor. All purchase transactions are processed by Stripe, which receives the billing information needed to complete your order: your email address and payment details. This data is subject to Stripe's own privacy policy.
When you buy, our licence server (license.prtotype.com) also keeps a licence record: your email address, your Stripe customer ID, a hash of your licence key and the devices you activate it on. The app contacts that server to activate and validate your licence and to anchor your free trial; for that it sends your licence key and a one-way hash of your device identifier, never the identifier itself. No audio, transcripts or API keys are ever sent to it.
We keep licence records (your email address, Stripe customer ID, licence-key hash and device activations) for as long as the licence exists and for seven years after your last transaction, as accounting and tax rules require. Device activation records are removed when a device is deactivated. To ask for a copy of your licence record, or for it to be deleted, email support@productivevoice.com.
Apart from those licence checks, the app sends no telemetry and transmits audio only to your own configured provider (Deepgram, OpenRouter, or equivalent) using your own API keys. Productive Voice never receives or stores your payment card details.