Privacy Policy

Last updated: April 2026

This Privacy Policy is provided in English for international visitors. The authoritative German version (Datenschutzerklärung, required by German law) is available here.

1. Controller

Björn Kindler
Bischofshofener Str. 9
82008 Unterhaching
Germany
E-mail: support@mundwerkapp.de

2. Principle: Data minimisation

Mundwerk is built as a privacy-first app. The app processes audio exclusively on your local Mac. No audio, no transcripts, and no personal data are ever transmitted to any server.

3. Data processing in the app

3.1 Audio processing

Mundwerk captures audio via your microphone and processes it with Whisper AI directly on your Mac (Metal GPU). Processing happens entirely offline. Audio data is discarded immediately after transcription and never stored.

3.2 Adaptive vocabulary

When you make corrections, Mundwerk stores them locally on your Mac at ~/Library/Application Support/Mundwerk/. This data never leaves your computer.

3.3 Settings

Your settings (hotkey, microphone selection, etc.) are stored locally. No telemetry, analytics, or usage data is collected.

3.4 No third-party AI services

Mundwerk uses no cloud or third-party AI services (no OpenAI, Google, Anthropic, Azure, or similar). All speech recognition runs exclusively on your Mac using a locally executed Whisper model (whisper.cpp, open source, MIT licence) via the Metal GPU. Audio, transcripts, and vocabulary never leave your machine.

3.5 App network access (model download)

The app requires network access only for the one-time download of the selected Whisper model from the public Hugging Face CDN (huggingface.co/ggerganov/whisper.cpp). This is a pure file download; no user data, no device information, no diagnostic data, and no telemetry are transmitted. After the download, the app functions fully offline.

Legal basis is Art. 6(1)(b) GDPR (performance of the core app function: local dictation recognition). The processor for the download is Hugging Face, Inc., 20 Jay Street, Brooklyn, NY 11201, USA. Only the IP address required to deliver the model file is transmitted.

4. Data processing on the website

4.1 Hosting

This website is hosted on Amazon Web Services (AWS). When the website is accessed, connection data (IP address, browser type, timestamp) is automatically recorded in server log files. Legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation). Log files are automatically deleted after 30 days.

Processor: Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. AWS is certified under the EU-US Data Privacy Framework.

4.2 Contact form

If you use the contact form on the Support page, the following data is transmitted:

  • Name
  • E-mail address
  • Subject
  • macOS version (optional)
  • Message

This data is forwarded as an e-mail to support@mundwerkapp.de via Amazon SES (Simple Email Service) and is not stored in a database. Legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in answering support requests).

4.3 Cookies

This website uses no cookies. No tracking, analytics, or advertising cookies are set.

4.4 Analytics tools

This website uses no analytics tools (no Google Analytics, no Matomo, no Meta Pixel).

5. Your rights

You have the right to:

  • Access (Art. 15 GDPR) — what data is stored about you
  • Rectification (Art. 16 GDPR) — correction of inaccurate data
  • Erasure (Art. 17 GDPR) — deletion of your data
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object (Art. 21 GDPR) — object to the processing of your data

To exercise any of these rights, contact: support@mundwerkapp.de

6. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, e.g. the state commissioner for data protection of your federal state in Germany.

7. Changes

This privacy policy will be updated as needed. The current version is always available on this page.