Privacy

GhostSpeech Privacy Policy

Last updated: September 2, 2026

GhostSpeech is a dictation keyboard for iPhone. You hold or tap to dictate, ask questions, and rewrite text. This policy explains what data GhostSpeech collects, why we use it, when it leaves your device, and the choices available to you.

The short version

• Your audio is transcribed and discarded. GhostSpeech does not store voice recordings.
• The keyboard has no internet access of its own. The GhostSpeech app performs connected requests and Apple-managed setup outside the keyboard.
• Normal typing is never logged, recorded, or sent. Only content needed for an action you explicitly invoke is processed.
• You control your account history. Signed-in users can delete items, clear history, change retention, or delete their account. History is unavailable without an account.
• On-device processing is available on supported iPhones through signed-in Private Mode or the limited no-account option.
• We do not sell personal information or use it for cross-app advertising or tracking.

Scope

This policy applies to the GhostSpeech app, keyboard, website, and related services operated by VESTAPLAN, INC. It does not govern services that you choose to access outside GhostSpeech.

Data we collect and why

• Account data: if you sign in, an account identifier and, when provided during Sign in with Apple, an email address and complete name. We use the account identifier and email to create, secure, and support your account. The name and email are also shown as read-only account information inside GhostSpeech; the name is not used to authenticate or authorize the account.
• Audio and user content: when you use a connected feature, audio you submit for dictation or Ask, prompts, transcripts, text you submit for Rewrite, and limited text near the cursor when needed for an Ask request. We process this content only to perform the feature you request, provide history you enable, prevent abuse, and improve the service when you separately opt in. No-account feature content is processed on your device and is not sent to GhostSpeech or its cloud providers.
• Subscription data: product, status, transaction, app, and device information associated with an account or provider-generated anonymous subscription identifier. We use this to validate purchases, separate a signed-out session from the prior account, and provide paid features only when signed in. We do not receive payment-card details.
• Usage and diagnostics: for signed-in use when diagnostics are enabled, feature interactions, device and app information, performance timings, and error types. We use this to operate, secure, troubleshoot, and improve GhostSpeech. Diagnostics do not include your speech, typed text, prompts, or transcripts. GhostSpeech does not collect usage or diagnostics in no-account mode.
• Support communications: messages and information you send when requesting help. We use them to respond and resolve your request.

We receive data from you, your device, the platform services you use to sign in or purchase a subscription, and service providers acting on our behalf.

Dictation and audio handling

When signed in, Dictate uses the server-powered path or, in Private Mode, on-device processing. Without an account, supported dictation is processed on device using Apple's speech framework and is not sent to GhostSpeech. Source audio is discarded after processing. GhostSpeech does not store voice recordings.

Camera scanning

The optional text and QR-code scanner processes the camera feed on your device. GhostSpeech does not upload or store the camera feed or scanned result.

Your history and improvement choices

• History and Usage require an account. They are unavailable without an account, and no no-account Dictate, Ask, or Rewrite history is retained by GhostSpeech.
• Signed-in Ask history stays on your phone. Ask conversations are stored locally on your device only.
• Dictation and rewrite history may be saved to your account so you can review it across sessions. You control retention: Off, last 10, or All. You can delete an item or clear a category. Setting retention to Off also removes existing server history in that category.
• Help improve GhostSpeech is optional. If you opt in under Settings > Privacy, we may retain transcripts and rewrites, text only and never audio, to improve recognition quality even when history is off. This is off by default and can be changed at any time.

What connected features send

Connected Dictate, Ask, Rewrite, search, and media features require an account and send only the information needed to perform the action you choose. An Ask request may include text near your cursor, up to about 4,000 characters. GIF search sends your GIF query, a provider-scoped random identifier, and the interaction signals required to operate that feature to the media-search provider. Review surrounding text before invoking a connected feature if it may contain sensitive information.

Using GhostSpeech without an account

On eligible iPhones and supported languages, you can choose limited on-device features without creating an account. Dictate uses Apple's on-device speech model. Ask and Rewrite are available only when Apple's on-device language model is ready. Web search, GIFs, enhanced cloud AI, History, Usage, subscriptions, improvement sharing, and diagnostics are unavailable. Feature content is not sent to GhostSpeech or its cloud providers in this mode.

GhostSpeech does not initialize its subscription processor during a clean no-account session. If you previously signed in during the same app process, signing out changes the app's current subscription identity from the GhostSpeech account identifier to a provider-generated anonymous identifier. Our subscription processor, RevenueCat, may then refresh content-free purchase or offering information and may retain customer, alias, and purchase records needed for subscription processing. The app requests do not contain speech, prompts, transcripts, nearby or typed text, GIF queries, or GhostSpeech diagnostics, and they do not enable paid or connected features without an account.

The app may ask Apple system frameworks to prepare speech or language-model assets regardless of whether you sign in. Apple manages the availability and download of those assets under your device settings and Apple's terms. Sign in with Apple, support and legal links, and other external actions you explicitly choose may also communicate with Apple or the destination you open.

Private Mode

Signed-in users can enable Private Mode on supported iPhones to run Dictate, Ask, and Rewrite on device. While it is active, those features do not send your speech, nearby text, prompts, transcripts, or generated content to our servers; media search is disabled; and diagnostics upload is paused. Web search is unavailable in Private Mode. No-account mode is always on-device only.

The keyboard itself

The keyboard extension makes no network connections of its own. It communicates only with the GhostSpeech app on your device, which performs requests for connected features. The keyboard cannot see your screen or other apps, only the active text field. As iOS requires for every keyboard, secure fields such as passwords use the system keyboard instead.

How we disclose data

For signed-in and connected features, and for the limited subscription lifecycle described above, we disclose the minimum information needed to service providers that perform cloud speech recognition, generative-AI processing, search and media retrieval, hosting, diagnostics, authentication, and subscription processing on our behalf. Their access depends on the feature or lifecycle operation involved. They are permitted to process data only to provide and secure the service for us, not to sell your personal information, use it for cross-app tracking, or train general-purpose models on your content.

We may also disclose information when reasonably necessary to comply with law, protect the rights and safety of users or others, investigate abuse, or complete a merger, financing, acquisition, reorganization, or sale of assets. If ownership changes, this policy will continue to apply to transferred personal information unless you are notified otherwise.

Legal bases where applicable

Where data-protection law requires a legal basis, we process information as needed to perform our contract with you and provide requested features; for legitimate interests such as securing, supporting, and improving GhostSpeech, balanced against your rights; with your consent for optional processing; and to comply with legal obligations. You may withdraw consent at any time, but withdrawal does not affect processing already completed.

Retention and deletion

• Source audio is processed transiently and is not retained as a voice recording.
• Account content is retained according to the history and improvement choices described above and until you delete it or your account.
• Diagnostics are pseudonymous while associated with an active account, are de-identified when the account is deleted, and are removed within 180 days.
• After account deletion, a content-free, one-way allowance identifier and its credit ledger may remain for up to 60 days to prevent an immediate welcome-credit reset. It does not contain your Apple identifier, name, email, audio, prompts, transcripts, or typed text and is deleted after that period.
• Account, subscription, security, and support records are retained only as long as needed to provide the service, meet legal obligations, resolve disputes, and prevent fraud or abuse.

Deleting your account removes your account and account-linked GhostSpeech content from our primary systems, disconnects the associated platform sign-in authorization, and removes the subscription-management customer profile, subject to the limited 60-day allowance record described above. Other limited records may be retained where required by law or for legitimate security and fraud-prevention purposes, and de-identified data may be retained where it can no longer reasonably be linked to you. Deleting your GhostSpeech account does not cancel an App Store subscription.

Security and international processing

We use administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit, access controls, and restricted production credentials. No system is completely secure. GhostSpeech and its service providers primarily process data in the United States, which may have different data-protection laws from where you live.

Children

GhostSpeech is not directed to children under 13. If you are not old enough to enter these Terms or consent to data processing under the law where you live, a parent or legal guardian must consent on your behalf where the law permits. Contact us if you believe a child provided personal information without appropriate consent.

Your choices and rights

• Configure history retention, delete items, or clear a category in Settings.
• Turn diagnostics off or change the Help improve GhostSpeech choice in Settings > Privacy.
• Use Private Mode on supported devices for available on-device features.
• On eligible devices and languages, continue without an account using limited on-device features.
• Delete your account and account-linked data from inside the app.

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information, or to object to or restrict certain processing. We may need to verify your identity before completing a request. To exercise a right or appeal a decision, email privacy@ghostspeech.ai. We will not discriminate against you for exercising a privacy right.

Changes to this policy

We may update this policy as GhostSpeech evolves. We will post the revised policy here and update the date above. If a change materially affects your rights or how we use personal information, we will provide additional notice appropriate to the change.

Contact

VESTAPLAN, INC. - privacy@ghostspeech.ai