Penwright
Privacy

Your voice. Your Mac. Your privacy.

Penwright is built so audio and text never leave your device. Here's what that means in practice, and what it doesn't mean.

What we ship today

No imaginary certifications. We list them only after they're awarded.

Local-first

Audio and transcripts never leave your Mac.

Live today

GDPR-aware

Personal content stays on the Mac by default. There is no audio to process serverside. Subject-access requests honored.

Live today

SOC 2 Type II

Controls under review. Available on request once audited.

In progress

ISO 27001

On the roadmap. Targeting completion within the next 12 months.

In progress

How privacy mode works

  1. 1

    Audio is captured locally

    Your Mac records to a temporary WAV file. That file never leaves your device.

  2. 2

    Transcription runs locally

    A Whisper model on your Mac transcribes the audio using Metal acceleration.

  3. 3

    Cleanup runs locally

    A local language model cleans the text up. No prompt, no output leaves your Mac.

  4. 4

    Text is inserted

    Penwright types the clean text into the active app via the macOS accessibility API.

  5. 5

    Audio is destroyed

    The temporary WAV file is deleted immediately.

The only online step: Penwright periodically verifies your license status. That call contains no content, no audio, no text.

Privacy FAQ

Does Penwright send my audio anywhere?

No. Audio is captured by the desktop app, transcribed by a local Whisper model on your Mac, and discarded. It is never written to a server and never leaves the device.

Where does AI cleanup happen?

On your Mac, using llama-cpp-2 with Apple-silicon Metal acceleration. The cleanup model runs locally. Your text never round-trips a cloud.

What does your server ever see?

Three things, and only three: your account email, your license/subscription status, and the app version. No transcripts, no audio, no clipboard content.

Is Penwright SOC 2 / ISO certified?

Not yet. We're in the process. We list certifications only after they're awarded. We don't claim what we don't have.

What happens if I cancel my subscription?

The app keeps your settings and custom dictionary locally. Dictation stops working until you re-subscribe. Nothing about your content is uploaded as part of cancellation.

Looking for the legal text? Read the privacy policy.

Nothing leaves your Mac.

Download Penwright today. Privacy is built in, not bolted on.