Privacy Policy
Last updated October 7, 2026
The short version. Your voice never leaves your device. Cofactor turns speech into text on your iPhone or Mac, so we never receive your audio or your dictated words. If you create an account, we keep your email address and a sync backup that is encrypted so we cannot read it. We do not run ads and we do not track you across other apps or sites.
What stays on your device
- Dictation audio. Recordings are saved on your device before they are transcribed, so a failed take is never lost.
- Transcription and formatting. Speech recognition, punctuation, cleanup and writing tones run on your iPhone or Mac. Nothing is sent to a server to be transcribed or formatted.
- Your history, notes, saved phrases, personal vocabulary and settings.
You can use Cofactor without an account. After the one-time speech language download on iPhone, it works with no connection at all.
What we collect if you create an account
An account is optional. You need one only for encrypted sync across your devices, or for Team features. When you create one, we store:
- Your email address and display name, and how you signed in (Sign in with Apple, Google, or email and password). Passwords are stored only as a salted hash.
- Session records that keep you signed in, and short-lived tokens for email verification and password reset.
- An encrypted sync backup, if you turn sync on. It contains your settings, vocabulary, saved phrases, notes, history and stats. It is encrypted on your device before upload, with a key that is kept in your iCloud Keychain and never sent to us. We store only the scrambled data and cannot read it.
- Team details, if you use Team: the team name, members and roles, and shared vocabulary, phrases and defaults that your team sets.
- Usage counts, such as how many dictations completed or failed, seconds of audio, and character totals. These are numbers only. They never include your audio or the words you said. Team admins see totals, never anyone's words.
- Invite and referral records, if you invite a friend or join through an invite.
Payments
- If you subscribe through the App Store, Apple handles payment. We receive confirmation of your subscription status and the transaction details Apple provides, such as product, dates and renewal state. We never see your card number.
- If you pay for Team on our website, Stripe handles payment. We store Stripe's customer and subscription references and your plan status. We never see or store your card number.
What we do not do
- We do not sell your data.
- We do not use advertising or tracking SDKs, and the app does not track you across other companies' apps or websites.
- We do not use your voice or text to train models.
- This website does not use cookies for tracking. It stores one thing in your browser, your light or dark theme choice, and only on your device.
Who handles data for us
We use a small number of service providers to run the optional account features: a hosting provider for our servers and database, an email delivery service for verification and password-reset messages, Apple for App Store billing and sign-in, Google if you choose Google sign-in, and Stripe for Team payments. They process only what is needed to do that job.
Our servers also keep routine technical logs, such as request times and error messages, to keep the service running and to block abuse. Like any web service, our server briefly sees your IP address when your device contacts it.
How long we keep it
We keep account data until you delete your account. Billing records may be kept longer where the law or an accounting need requires it. If you have a subscription, Apple and Stripe keep their own records under their own policies.
Your choices
- Delete your account from inside the app. This permanently removes your account data from our servers, including your encrypted sync backup. Recordings, notes and settings on your own devices are not touched.
- Turn off sync, or never create an account, and nothing leaves your device.
- Ask us for a copy or a correction of your account data, or ask us to delete it, by emailing support@outliyr.com.
- Depending on where you live, you may have additional rights under laws such as the GDPR and the CCPA. Email us and we will honor them.
Children
Cofactor is not directed to children under 13, and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will delete it.
Changes to this policy
If we change this policy in a meaningful way, we will update the date at the top and, for significant changes, tell account holders by email or in the app.
Contact
Questions about privacy? Email support@outliyr.com.