Privacy Policy

Last updated: May 10, 2026

Limato Voice (“we”, “us”) is a Chrome extension that transcribes speech to text entirely on your device using on-device AI models. This policy explains what data we collect, how we use it, and your rights.

Core privacy guarantee. Your audio is captured, processed, and transcribed entirely inside your browser. It is never uploaded to any server. The only network requests the extension makes are a one-time model download and license activation.

1. What we collect

a) Audio and transcriptions

Audio captured via your microphone is processed locally by on-device speech recognition models (Whisper via Transformers.js or whisper.cpp WASM) and an on-device voice-activity-detection model (Silero VAD). Neither the raw audio nor the resulting transcription is sent to our servers or any third party.

b) License key and JWT

If you purchase Limato Voice Pro, you receive a license key from Lemon Squeezy. When you activate it, the key is sent to our license server (license.voice.limato.app) to validate it and issue a signed token (JWT). The JWT is stored locally in your browser and used offline to verify your Pro status. It is never shared with third parties.

c) Daily usage counter

A counter tracking how many free transcriptions you have used today is stored locally in your browser. It resets every 24 hours and is never transmitted.

d) Preferences

Your chosen language and model settings are stored locally in your browser and never transmitted.

e) Model files

On first use, the extension downloads speech recognition model files from Hugging Face CDN (approximately 140–500 MB depending on selected model and engine). These files are cached in your browser using the Cache API. After the initial download, the extension works fully offline.

2. How we use your data

Validate your Pro license key and issue an offline-verifiable JWT.
Enforce daily transcription limits for free-tier users (locally, without a server).

We do not use your audio, transcriptions, or any other data for advertising, analytics, profiling, or AI model training.

3. Third parties

Lemon Squeezy — payment processor and Merchant of Record. Handles your purchase and issues the license key. We receive only the license key status when you activate; your payment details are never accessible to us.
Cloudflare — hosts our license server (Cloudflare Workers). Cloudflare processes your IP address transiently for network routing.
Hugging Face CDN — serves model files on first install. After download, no further contact is made.

We do not sell or rent your data to any third party.

4. Data retention

Audio and transcriptions: never stored — processed in memory and discarded immediately.
License JWT: stored locally in your browser until you deactivate or uninstall the extension.
Usage counter and preferences: stored locally, cleared when you uninstall the extension.
Model files: cached in your browser until cleared via browser settings or extension uninstall.

5. Permissions we request

offscreen — to run microphone capture and on-device transcription in a hidden document. Microphone access is requested by your browser only when you start a recording.
storage — to save your preferences, usage counter, and license JWT locally.
activeTab — to insert the transcribed text into the focused field on the current page.
Host permissions for huggingface.co and its CDN (cdn-lfs.huggingface.co, cdn-lfs-us-1.huggingface.co) — to download model files on first use.
Host permissions for license.voice.limato.app — to activate or deactivate your license key.

6. Your rights

You can uninstall the extension at any time to remove all locally stored data. Because we do not store your audio or transcriptions, there is no content to delete on our side.

If you are located in the EEA, UK, or California, you have rights under GDPR / UK GDPR / CCPA, including access, correction, deletion, and objection. To exercise these rights, contact us at the address below.

7. Children

Limato Voice is not directed at children under 13 (or 16 in the EEA). We do not knowingly collect data from them.

8. Changes to this policy

We may update this policy. Material changes will be announced on this page with a new “Last updated” date.

9. Contact

Questions or data-deletion requests: [email protected].