Privacy

Updated October 14, 2026. This notice covers the downloadable Tokens beta from Tinkr, Inc., and the website that distributes it.

Your dictation stays on your Mac

The beta processes speech on your Mac and requires on-device speech recognition. If on-device recognition is unavailable, it stops rather than uploading your audio for recognition. Audio buffers are used in memory during a talk; this beta does not save audio recordings.

Optional local-model features communicate with Ollama on your Mac at 127.0.0.1. They require a model you install separately. Tokens does not upload your dictation to Tinkr for model training, analytics, or crash reporting.

What is saved locally

• History: spoken text and typed notes are saved in the app’s Application Support folder. There is no automatic expiry. You can use Clear History in the app to remove saved history.
• Recovery: recognized text may be saved locally until delivery is resolved or you discard it, to help recover from interrupted delivery.
• Preferences: settings, dictionary entries, and the Terms version and time you accepted are stored on your Mac.
• Diagnostics: local event logs contain event names rather than your words or audio. They are not automatically uploaded; the current logs are not automatically trimmed.
• Usage counters: local daily delivery counts support app limits and are not uploaded as analytics.

Removing the app alone may leave these files behind. Contact us for help locating the app’s local data if you want to remove it. We cannot remotely read or erase files stored only on your Mac. Your Mac’s backups, device management, and other software may retain additional copies.

Permissions and delivery

Microphone access is used during dictation. Optional background listening starts off and requires separate consent each launch. Accessibility allows Tokens to inspect the focused text field to check delivery. Input Monitoring detects the talk key; unrelated key presses are not stored. During paste, Tokens temporarily uses the clipboard and attempts to restore its prior contents.

When you paste into another app, that app’s own privacy practices apply. Review your text and destination before sending. You can revoke Tokens permissions in System Settings → Privacy & Security.

The website and support

The website and downloads are delivered through Cloudflare. Requests necessarily expose connection information such as your IP address, requested URL, and browser information to the hosting service. To download Tokens from the website, you continue with Google using a Gmail or Google Workspace account, and Google confirms that address to us. We keep a sign-in record of the address, when you first and most recently signed in to download, and whether you asked for update emails (off unless you tick the box; leaving the box untouched on a later download keeps your earlier answer, and unticking it records a no). Google also sends your name and a profile picture link; we do not keep them, and we never receive your Google password. Google’s sign-in button and window come from Google, which receives your connection information and Google session when they load, and Google’s privacy policy applies to them. The download dialog loads them when you open it. We use the record to know who downloaded Tokens from the website and, only if you asked, to email you about Tokens. To stop update emails, email us. You accept the Terms in the app, when you first open Tokens; the app records that acceptance on your Mac and does not send it to Tinkr. Downloads before October 14, 2026 asked you to agree to the Terms on the website as well: for those we also kept the Terms version you agreed to and when, and your browser may hold a local copy of that acceptance. Downloading the app does not create a Tinkr account or subscription.

If you voluntarily join the website waitlist, your email address and signup time are stored so we can contact you about availability. Signups made before October 5, 2026 may also include the IP address the form was sent from. The form uses Cloudflare Turnstile to reduce abuse, which receives your IP address, and keeps a counter tied to your IP address for up to 15 minutes to stop repeated attempts. This is separate from dictation in the app. If you email support, we receive the information you choose to send and use it to respond. Please avoid sending sensitive content. Email us to request removal from the waitlist, deletion of your download sign-in or agreement record, or deletion of support correspondence, subject to applicable retention obligations.

Updates and changes

Versions configured for updates check keeptinkr.ing shortly after launch and about once a day while running. You can also check manually. These requests share connection information with our hosting provider, including your IP address; they do not contain your dictation or typed notes, and Tokens does not send a Sparkle system profile. We count update checks, update downloads and website downloads by published app build, using the version already sent with the request. These counters store only the build, the kind of request and a count, with a server timestamp; they do not store your IP address, email, account identifier, dictation, or notes. Repeated checks and downloads count again, so these totals are not counts of people or successful installations. Updates are optional. Installing an update waits until dictation has finished before restarting. Versions without an update feed make no update-check requests.

Future versions may change features or data handling; material changes will be described before they take effect. Local operating-system or model downloads are governed by those providers’ settings and policies.

Contact

Tinkr, Inc. · contact@keeptinkr.ing.