Privacy Policy

Last updated: October 7, 2026

Wisper Back is a Mac app for dictation (speak, and text appears) and narration (select text, and hear it). It is operated by Bishal Banerjee, in India (“we”, “us”), who decides how your personal data is used and is responsible for it. This policy covers the app, composer1.com and the services behind them.

The short version: your words are sent away only to be processed, we don’t keep your dictations, narrations or screenshots on our servers, your history stays on your Mac, and we don’t sell your data or use it to train AI models.

What we collect, and why

• Account details. Your email address, name and profile picture, through Clerk, our sign-in provider. We use them to run your account, your plan and any team you join.
• Dictation audio. When you dictate with the cloud, your microphone audio is streamed over an encrypted connection to our speech provider, either directly from your Mac or through our server, and the text comes back. To improve accuracy, the request also carries a short hint: the name of the app you’re typing into, words from your personal dictionary, and up to 15 names or terms visible in the window you’re dictating into (you can turn this off in Settings). We don’t store the audio or the transcript on our servers. When a speech pack is installed, dictation can run entirely on your Mac.
• Text and screenshots you ask us to process. Text you select for narration, screenshots you take with Wisper Back, the last message of a coding agent you ask it to read, and text being cleaned up after dictation are sent through our server to an AI provider to produce the summary, voice or clean text. We don’t store them on our servers.
• Usage records. For every request we record the time, the kind of request, the size (words, characters, seconds or tokens) and its cost, so we can enforce plan limits and run the service. These records never contain your words, audio or screenshots.
• Saved links. Links you save in Recall (the address, title, image and your note on why you saved it) are stored on our server so they appear on every device you sign in to. To fill in a title and picture we may look up the link with Exa and its logo with Brand.dev.
• Team content. If you join a team, the team’s shared vocabulary and snippets, meetings members choose to share (titles, participants, summaries, transcripts), and agent updates members choose to share are stored on our server and visible to that team.
• Listen on phone. If you choose it, the generated narration audio is uploaded for a private link that works only for your account and is deleted after ten minutes.
• Payments. Razorpay processes payments. We receive your plan, the amount, the status and the email you paid with; we never see or store card or bank details.
• Feedback and support. Feedback you send from the app and emails you send us, with your email address, so we can reply.
• Optional analytics. Off unless you turn on “Help improve Wisper Back” in the app. Then it sends content-free events (which feature was used, whether it succeeded, timing, app version and plan) to PostHog, linked to your account. Never your words, audio, screenshots, file names or app content. You can turn it off at any time. Activity sync, which shows your dictation stats on the website, is also off until you turn it on and stores only counts and times.

What stays on your Mac

Your dictation history, notes, meeting transcripts and recaps, narration history, screenshots, generated audio and your personal dictionary are stored on your Mac, not on our servers. You can delete them in the app. Some features read your screen through macOS Accessibility: the window you’re dictating into, to pick out names, and text you select. That text is kept in memory for the request and isn’t saved, apart from the hint words described above. If you use Claude Code, Codex or Cursor, the app can read their sign-in on your Mac to show your remaining usage; it asks those companies directly and nothing about it reaches us.

Who processes your data

We use other companies to run the service: Clerk for sign-in, Convex and Vercel for our servers and website, OpenRouter and the AI companies it connects to, OpenAI for live dictation, Cartesia for some voices, Razorpay for payments, Resend for email, and PostHog for optional analytics. Each receives only what it needs for its part. The full list, with what each one gets and where, is on our subprocessors page. AI providers process your content to answer the request, under their own terms and privacy policies.

Where your data is processed

Our servers and most of our providers are in the United States, so your data is transferred outside India and outside your country. We rely on these providers’ contractual safeguards, including the European Commission’s standard contractual clauses where they apply.

Legal bases

We process your data to provide the service you signed up for (contract), with your consent for optional features like analytics and activity sync, to meet legal duties such as tax and payment records, and for our legitimate interest in keeping the service secure and preventing abuse. Under India’s Digital Personal Data Protection Act, we rely on your consent, given when you create an account and when you turn on optional features, and on legitimate uses the Act allows.

How long we keep it

• Account details, usage records, saved links and team content: while your account is open.
• Payment records: as long as tax and accounting law requires.
• Listen-on-phone audio: ten minutes. Uploads that are never used: one hour.
• Shared agent updates in a team: seven days.
• Dictation audio, transcripts, narration text and screenshots: not kept on our servers at all.

Closing your account and deleting your data

To close your account, open Plans in the Mac app’s settings and choose Close account. It cancels any subscription and erases your account and its data from our servers straight away, except records the law requires us to keep, such as payment records. If you can’t use the app, write to support@composer1.com with the subject “Privacy request” and we’ll do it within 30 days. Data on your Mac stays until you delete it in the app or remove the app.

Your rights

Wherever you live, you can ask us to tell you what data we hold about you, give you a copy, correct it, erase it, or stop using it for something you consented to. Depending on your country you may also have the right to object to or restrict processing, to move your data to another service, and to name someone to act for you if you can’t. Write to us with the subject “Privacy request”; we reply within 30 days and may ask you to confirm it’s your account. If you’re not satisfied, you can complain to our Grievance Officer (see the contact page), and you can complain to your data protection authority, including the Data Protection Board of India.

California and other US states: we don’t sell your personal information or share it for cross-context behavioural advertising, and we don’t use sensitive personal information to infer things about you. You won’t be treated differently for using your rights.

Cookies

The website uses only the cookies and browser storage it needs to sign you in and remember your settings. There are no advertising or tracking cookies. See the cookie policy.

Security

Every connection is encrypted, keys for our providers stay on our servers, and every request is checked against your account. No system is perfectly secure; if we learn of a breach that affects your data, we’ll tell you and the authorities as the law requires. More on our security page.

Children

Wisper Back is for adults. You must be 18, or have a parent’s or guardian’s permission, to use it. We don’t knowingly collect data from children without that permission, don’t track or target ads at children, and delete such data when we learn of it.

Changes

We’ll update this page and the date above when our data handling changes, and tell you by email or in the app before a material change takes effect.

Contact

Privacy questions and requests: support@composer1.com. Grievance Officer: Bishal Banerjee, at the same address with the subject “Grievance”.