Productive Voice is built on a single architectural rule: your voice and your text never touch our infrastructure. We're not the cloud. We're the desktop app you bought once.
We don't have a server in either path. Your microphone stream goes directly to Deepgram over your own API key, under your contract with them. The LLM refinement step goes directly from your machine to OpenRouter (or whichever provider you've configured), again under your key. Productive Voice never sees a packet of either.
AES-256-GCM, with the encryption key derived from your operating system's keychain. Even with raw disk access, your keys can't be exfiltrated without first unlocking your OS user account.
Encrypted, searchable, and exportable, but only by you. No sync. No cloud backup. No "for our records." If you reinstall the OS, your history is gone unless you exported it yourself.
You don't sign up. You don't log in. You buy a licence, install the app, paste two API keys, and you're done. There is no profile we can compromise because there is no profile at all.
Every byte. Every hop. Spelled out.
Raw audio
Encrypts & routes
Speech → text
your API key
Text → formatted
your API key
Where you typed
Local disk only
Everything sensitive that Productive Voice stores locally is encrypted at rest with AES-256-GCM. Encryption keys are derived from your OS keychain so they can't be extracted without first unlocking your user account.
Your Deepgram speech-to-text API credentials. Decrypted in-memory on demand during recording sessions and never stored in raw text on disk. OS keychain protection ensures safety at rest.
Your LLM orchestration credentials. Derived from your OS account password, preventing unauthorized access by sandboxed applications or physical drives without your system login credentials.
Your local transcripts and search index database. Completely secure and local. Decrypted on the fly as you search or browse your timeline, ensuring other processes cannot read your records.
Your personalized spelling corrections, industry acronyms, and custom nomenclature. Encrypted securely on your local file system to prevent harvesting by unauthorized background software.
Your custom system prompts and formatting instructions (e.g. summaries, translations, formatting guidelines). Stored locally in encrypted format to keep your custom configurations confidential.
The strongest privacy guarantee is the one enforced by architecture: data we never collect can't leak, can't be subpoenaed, can't be sold.
Productive Voice uses Lemon Squeezy as its payment processor and merchant of record. All purchase transactions are processed by Lemon Squeezy, which receives the billing information needed to complete your order: your email address and payment details. This data is subject to Lemon Squeezy's own privacy policy and is entirely separate from the app itself.
The app sends no telemetry and transmits audio only to your own configured provider (Deepgram, OpenRouter, or equivalent) using your own API keys. Productive Voice never receives or stores your payment card details.