Privacy Policy

1. Who we are

Revera Flow ("we," "us," or "our") provides Revera Flow Capture and the broader Revera Flow service. Contact: hello@reveraflow.com.

2. What Capture does on your Mac

To do its job, Capture requests three macOS permissions on first launch:

• Microphone: only while you hold the dictation hotkey or start a recording. Capture does not listen in the background.
• Accessibility: required to insert text at your cursor and to read text you've highlighted (for Command Mode). Capture does not read text you have not selected.
• Input Monitoring (global hotkeys): required so the dictation hotkey works in any app. Capture only acts on the specific key combinations you've configured; all other keystrokes are ignored.

You can revoke any of these in System Settings → Privacy & Security at any time. Revoking microphone or accessibility access will disable the relevant features.

3. Local Only mode (default)

When the destination is set to Local Only, Capture transcribes using WhisperKit running on Apple Silicon's Neural Engine. No audio, transcript, or metadata is sent to our servers. The cleaned-up text is inserted at your cursor and a copy is placed on your clipboard. That is all.

Your dictation history (last 30 captures) is stored locally on your Mac. You can clear it at any time from Preferences → View History → Clear All. We never see it.

4. Save to Flow mode (opt-in)

When the destination is set to Save to Flow, the cleaned-up transcript is also sent to your Revera Flow corpus. Audio is not sent — only the text. Transcripts are stored encrypted in transit and at rest in our infrastructure (Supabase, hosted in the United States). Only you can access them. They are never used to train any model, ours or any third party's.

5. Polish, Rewrite, and Command Mode (cloud features)

These features require sending the relevant text to an LLM provider for processing. As of this update, our LLM provider is OpenAI. The following applies:

• Audio is never sent to the LLM provider — only the text transcript or the highlighted selection plus your spoken command
• The provider processes the text and returns the result; the request is not retained for model training (per our agreement with OpenAI)
• Capture sends the text over TLS-encrypted HTTPS to our backend, which forwards it to the provider
• We retain operational logs (request timestamp, user ID, model used, token counts) for billing, cost monitoring, and debugging — typically 30 days
• We do not retain the input or output text past the duration of the request

We may change LLM providers in the future. If a change materially affects how your data is processed we will notify you.

6. Account data

If you create an account (for the trial and paid subscription), we collect:

• Your email address
• Your subscription status, plan, and Stripe customer ID
• Authentication credentials (passwords are hashed; we never see plaintext)
• App version and device platform — used for support and bug triage

We do not collect your name, address, phone number, or any other personal identifier unless you provide it. Billing is handled entirely by Stripe; we do not store payment-card details ourselves.

7. Usage and telemetry

To monitor service health and cost, Capture's backend logs:

• Per-request: user ID, feature used (e.g. capture.polish, capture.rewrite, capture.command), model name, prompt and output token counts, request latency
• Aggregated by month for the admin cost dashboard described in our Revera Flow controls

This data is operational, not behavioral. We do not track which apps you dictate into, what you said, or when you take breaks. The App itself collects no analytics events — there is no Mixpanel, no Segment, no third-party SDK shipped inside Capture.

8. Crash reports and diagnostics

If Capture crashes, the App can write a diagnostic record locally (Preferences → Diagnostics) and let you send it to us by email. We don't auto-upload crashes. If you choose to send one, it includes the App version, macOS version, the last few seconds of console logs from the App, and a redacted snapshot of your settings — never the contents of your dictations.

9. Third-party services we use

• Apple: macOS itself, WhisperKit (on-device), Speech framework. Local-only; covered by Apple's terms.
• OpenAI: Polish, Rewrite, Command Mode, and (when local transcription is unavailable) backend Whisper transcription. Bound by our data-processing agreement with OpenAI; not used for training.
• Supabase: data storage for Save to Flow captures and account data. US region. Encrypted at rest.
• Fly.io: backend hosting for our Capture endpoints. US region.
• Stripe: payment processing. We store only the customer ID and subscription status; Stripe handles all card data per PCI standards.
• Cloudflare / Vercel: CDN and static hosting for this website, the app download, and Sparkle updates.

10. Your rights

You can:

• Export your data — email hello@reveraflow.com and we'll send a copy of everything we have associated with your account within 30 days
• Delete your account — email us; we'll delete your account data within 30 days, except where retention is required by law (e.g. tax records)
• Correct inaccurate data — email us
• Object to processing — email us; for marketing emails, just hit unsubscribe

If you're in the EU/UK, you have additional rights under GDPR/UK GDPR (data portability, right to erasure, right to object). If you're in California, you have rights under CCPA/CPRA. Email us and we'll honor the request that applies.

11. Data retention

• Local-only captures: as long as you keep them on your Mac. We never see them.
• Save-to-Flow captures: as long as your account is active, or until you delete them
• Account data: until you delete your account, plus required legal retention
• Operational logs (token counts, request metadata): typically 30 days
• Stripe billing records: as long as required for tax and accounting (typically 7 years)

12. Children

Capture is not directed to children under 13 (under 16 in the EU/EEA). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please email us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or in-app notice. The "Last updated" date at the top reflects the latest revision.

14. Contact

Privacy questions, data requests, or anything else: hello@reveraflow.com.