Privacy policy

Last updated: October 24, 2026.

HoldTalk is built to collect as little data as possible: dictation happens on your Mac, with no account and no server. This page explains what is processed, by whom and why, both in the app and on this site.

Data controller

Théo Belnou, sole trader, NIF Y8506543F, Calle de Francisco Sempere, 4, 46006 Valencia, Spain. Contact: [email protected].

In the HoldTalk app

Your voice. The audio captured during a dictation is transcribed by Apple's speech recognition engine, on your Mac. It is not sent over the internet and not recorded: once transcribed, it is deleted. I never have access to it.

What stays on your Mac. In the Application Support folder of your user account, the app keeps your settings, your last 50 dictated texts and the number of words dictated during the week, which is used for the free version's limit. These files never leave your Mac and I have no access to them. You can clear the texts from inside the app, and remove everything by uninstalling HoldTalk and deleting the ~/Library/Application Support/HoldTalk folder.

The app's only connections:

• when you activate a Pro key, the app sends the key and the name of your Mac to Lemon Squeezy, to check the key and count the activated Macs;
• the first time you use a language, macOS downloads that language from Apple. This exchange happens between your Mac and Apple, under Apple's privacy policy.

The app contains no ads, no analytics and no tracking of any kind.

On this site

Analytics. To know how many people visit the site and where they come from, I use DataFast. It sets two cookies: datafast_visitor_id recognizes your browser from one visit to the next for 365 days, and datafast_session_id groups the pages of a single visit and expires after 30 minutes of inactivity. DataFast records the pages you view, the site that sent you here, your country and your type of device and browser. I use it only to follow traffic on the site, never for advertising.

Like any host, Cloudflare also processes your IP address to serve the pages and protect the site against attacks.

Waitlist. If you leave your email address to hear when HoldTalk Pro opens, I keep that address, the sign-up date, the page you signed up on and the country inferred from your connection. I use it only to write to you about HoldTalk: the opening of Pro, then major new versions. The legal basis is your consent, which you can withdraw at any time by writing to me. Your address is deleted on request, and at the latest 2 years after the last message I sent you.

Purchases

Payments are processed by Lemon Squeezy, which acts as reseller and as the controller of its own processing (payment, invoice, VAT, fraud prevention). Lemon Squeezy sends me your name, your email address, your country and the order details, which I keep for support and for my accounting obligations, that is, for 6 years. I never receive your bank or card details.

Recipients and transfers outside the European Union

Your data is never sold or rented. It is processed only by:

• Cloudflare, Inc. (site hosting, waitlist, support email);
• Lemon Squeezy, LLC, a Stripe subsidiary (license sales);
• Google (the inbox that receives the emails sent to [email protected]);
• DataFast (site analytics).

Cloudflare, Lemon Squeezy and Google are based in the United States. These transfers rely on the EU-U.S. Data Privacy Framework or on the European Commission's standard contractual clauses.

Your rights

You can ask to access your data, correct it, delete it, restrict its use, object to its processing or receive it in a readable format. Write to [email protected]: I reply within one month. If you believe your rights are not respected, you can file a complaint with the Agencia Española de Protección de Datos (aepd.es) or with the authority in your country, in France the CNIL (cnil.fr).

Changes

If this policy changes, the date at the top of the page is updated. For a significant change, people on the waitlist are notified by email.