Privacy
What we collect, where it goes.
Short version
Purr runs entirely on your Mac. The app collects nothing — no servers, no analytics, no account system, and no way to see what you say into the app. There is nothing for us to leak because there is nothing for us to store. The website uses privacy-friendly, cookieless analytics that count visits without identifying you; details below.
What the app does on your machine
When you hold the hotkey, the app records audio through your microphone, runs speech recognition on the Apple Neural Engine, and types the result into whichever app has focus. The audio is held in memory only for as long as it takes to transcribe. We never write recordings to disk and we never send them anywhere.
Meeting mode saves the transcript (text, not audio) to the folder you
pick during setup, by default
~/Library/Application Support/Purr/Purr Meetings. Those
files live on your machine. We do not see them.
The only network requests Purr makes
- Speech model downloads. On first use the Parakeet TDT v2 model (~450 MB) downloads from Hugging Face. If you switch engines, Whisper variants (about 140 MB to 950 MB) download from the same place.
- Optional features. Turning on Smart Typing downloads the Parakeet EOU model (~440 MB), and turning on Meeting Mode downloads a speaker-separation model. Both download once from Hugging Face.
- Optional summarizer. If you turn on meeting summarization, the Gemma 3 4B model (~2.5 GB) downloads once from Hugging Face.
- Update check. When you open About Purr, or click Check for Updates, Purr asks GitHub for the latest release. If you choose to update, the new version downloads from GitHub and its checksum is verified.
Purr makes no other outbound requests, and none of these carries your audio or your text. You can verify with Little Snitch or the macOS firewall.
What this website collects
Aggregate, anonymous traffic counts — nothing that identifies you. We use Cloudflare Web Analytics, which is cookieless and does not store your IP address, fingerprint your device, or build any cross-site profile. It records aggregate page views, referrers, and visitor country — enough to know which pages people find useful, and no more. No cookies, no consent banner, no third-party ad embeds. That data is processed under Cloudflare’s privacy policy.
We also use PostHog (US cloud) to see where visitors lose interest: which pages they open, how far they scroll, which sections they reach, which links and buttons they click, where on the page clicks land, and how fast pages load. It runs in cookieless mode, so nothing is stored in your browser, and no session recordings are made. To tell visits apart without a cookie, PostHog keeps only a one-way hash of your IP address and browser details mixed with a value that changes every day; the IP address itself is discarded. We do not build profiles of visitors.
If you use the contact form, your name, email address and message are stored by Netlify and emailed to me so I can reply. They are used for nothing else, and you can ask me to delete them.
The site is otherwise plain HTML served by Netlify; their access logs may record IP addresses for abuse prevention, governed by Netlify’s privacy policy.
Children
Purr is not directed at children under 13. We do not knowingly collect data from anyone, so there is no separate flow for minors.
Changes
If this policy ever changes, the updated date at the top of this page will move forward. The full history is in the git log of this file.
Contact
Questions? Open an issue on GitHub, or use the contact page.