Privacy

Updated October 18, 2026. This notice covers the downloadable Tokens beta from Tinkr, Inc., and the website that distributes it.

Your dictation stays on your Mac

The beta processes speech on your Mac and requires on-device speech recognition. If on-device recognition is unavailable, it stops rather than uploading your audio for recognition. Audio buffers are used in memory during a talk; this beta does not save audio recordings.

Optional local-model features communicate with Ollama on your Mac at 127.0.0.1. They require a model you install separately. Tokens does not upload your dictation to Tinkr for model training, analytics, or crash reporting.

What is saved locally

• History: spoken text and typed notes are saved in the app’s Application Support folder. There is no automatic expiry. You can use Clear History in the app to remove saved history.
• Recovery: recognized text may be saved locally until delivery is resolved or you discard it, to help recover from interrupted delivery.
• Preferences: settings, dictionary entries, and the Terms version and time you accepted are stored on your Mac.
• Diagnostics: local event logs contain event names rather than your words or audio. They are not automatically uploaded; the current logs are not automatically trimmed.
• Usage counters: local daily delivery counts support app limits and are not uploaded as analytics.

Removing the app alone may leave these files behind. Contact us for help locating the app’s local data if you want to remove it. We cannot remotely read or erase files stored only on your Mac. Your Mac’s backups, device management, and other software may retain additional copies.

Permissions and delivery

Microphone access is used during dictation. Optional background listening starts off and requires separate consent each launch. Accessibility allows Tokens to inspect the focused text field to check delivery. Input Monitoring detects the talk key; unrelated key presses are not stored. During paste, Tokens temporarily uses the clipboard and attempts to restore its prior contents.

When you paste into another app, that app’s own privacy practices apply. Review your text and destination before sending. You can revoke Tokens permissions in System Settings → Privacy & Security.

The website and support

Downloading Tokens requires no sign-in or account. We do not collect your name, email address or account identifier when you download. The website does not load Google or Apple sign-in, set download identity cookies, or record a website Terms agreement. Terms acceptance happens locally in the app.

The website no longer accepts waitlist or download signups. Earlier sign-in, waitlist and agreement records may remain until deleted; this change does not erase historical records. If you contact support, we receive the information you choose to send. Email us to request deletion of historical records or support correspondence.

Daily in-use ping

The official Tokens download sends keeptinkr.ing a small usage ping while it is in use, normally once per UTC day. A failed request may be retried. The message contains a random ID created on your Mac, the app version and the build number. Starting with build 88, this ping is part of the official app and has no in-app off switch. Earlier builds may provide a switch in Settings. It never contains your dictation, audio, typed notes, app names, account or hardware details. Our usage dataset stores a one-way hash of the ID with the version, build and a server timestamp. We use these records to estimate how many copies are in use each day, week and month; retries and sampling mean these are not exact counts of people or installations. The request shares connection information with our hosting provider, including your IP address; we do not include that information in the usage dataset. Builds you make from the source code do not send it.

Updates and changes

Versions configured for updates check keeptinkr.ing shortly after launch and about once a minute while running. You can also check manually. These requests share connection information with our hosting provider, including your IP address; they do not contain your dictation or typed notes, and Tokens does not send a Sparkle system profile. We count update downloads and website downloads by published app build. We do not count update checks. These counters store only the build, the kind of request and a count, with a server timestamp; they do not store your IP address, email, account identifier, dictation, or notes. Repeated downloads count again, so these totals are not counts of people or successful installations. Updates are optional. Installing an update waits until dictation has finished before restarting. Versions without an update feed make no update-check requests.

Future versions may change features or data handling; material changes will be described before they take effect. Local operating-system or model downloads are governed by those providers’ settings and policies.

Contact

Tinkr, Inc. · [email protected].