Privacy Policy

Ito is a free, open-source macOS app that lets you speak instead of type and route your speech to any Automatic-Speech-Recognition (“ASR”) and Large-Language-Model (“LLM”) service you choose.Key point: Ito never sends your data to our servers—we don’t run any. Data moves only between your Mac and the third-party providers whose API keys you supply.

1. Data Flow at a Glance

No advertising IDs, analytics, crash telemetry, cookies, or other tracking data are collected by Ito.

2. How It Works

1. Capture – When you press the hot-key, Ito records your microphone.
2. ASR – Audio is streamed directly to your chosen ASR provider; the provider returns text.
3. LLM (optional) – That text can be sent directly to the LLM endpoint you configured for rewriting, summarising, or other tasks.
4. Display – Results appear in Ito and, if you wish, are pasted into the active app.

Ito never proxies, logs, or stores these API calls.

3. Third-Party Responsibility

The privacy, security, and retention of your audio and text at the ASR/LLM provider are governed solely by that provider’s policies. Review those terms before supplying an API key.

4. Legal Bases (GDPR / UK GDPR)

Performance of a contract – Providing the speech and LLM features you request.
Legitimate interests – Minimal 30-day web-server logs (IP, user-agent) on our informational website to deter abuse.
Legal obligation – Complying with lawful requests limited to those website logs (we hold nothing else).

5. Your Rights & Choices

Local history (if enabled) can be exported, cleared, or deleted at any time in Settings.
ASR/LLM data – Contact the respective provider to exercise rights over data you sent to them.
Do-Not-Track / Global Privacy Control signals are honoured on the Ito website.
Email privacy@ito.app to exercise any rights over the minimal website logs we keep; we respond within 30 days.

6. Security

- TLS 1.2+ for all outbound traffic.
- API keys stored in Apple Keychain (AES-256).
- App sandboxed and notarised by Apple.
- Open-source code base for independent audit.

7. Children

Ito is not intended for children under 13. We do not knowingly collect children’s data. If you believe a child has used Ito, contact us so we can delete any associated website logs.

8. Changes

Material updates to this policy will appear in-app and on GitHub at least 30 days before they take effect.

9. Contact

Demox Labs, Inc.
Email: privacy@heyito.ai
Mail: 1547 Palos Verdes Mall #124, Walnut Creek, CA 94597, USA