Your dictation is not our dataset.

Effective September 23, 2026

Local use

Cursay can be used without an account. Local audio, transcripts, history, settings, and custom-endpoint credentials remain on your device under the desktop application’s security model.

Dictation processing

When you select Cursay Cloud or record in the browser, the recording is sent over encrypted transport to Cursay’s Vercel Function and routed to the configured speech provider through Vercel AI Gateway with per-request zero data retention. Smart Polish sends cleaned text after a successful cloud transcription. Dictation processing does not retain your audio or text in our database. Browser audio remains temporarily in the current tab after processing so you can download or retry it. It is cleared when you discard it, start a new thought, or leave the page. Downloaded recordings remain on your device until you delete them.

Optional Cursay Memory

Memory is off until you separately agree to text storage and AI analysis. When enabled, future non-private captures save original and corrected text, dates, projects, and derived insights to your account. Existing desktop history is not imported automatically. OpenAI processes saved text for Cursay’s AI analysis through a zero-data-retention Gateway route. Cursay retains the resulting summaries, vocabulary suggestions, and evidence links in your Memory. This processing is server-readable, not end-to-end encrypted. Audio is never stored in Memory. Content is excluded from product analytics, operational logs, and the account-administration interface.

Memory controls

Pause stops new capture and analysis while keeping saved text available. Delete a capture to clear its text and dependent analyses. Forget all Memory clears text, projects, vocabulary, and analyses and disables Memory. Minimal deletion markers remain to prevent offline devices from restoring forgotten content; cost metadata remains for budget enforcement. You can export your Memory from the workspace. Private capture excludes a dictation from Memory.

Backup copies

The production database has a six-hour restore-history window, verified on October 12, 2026. Deleted Memory text may remain recoverable in this history for up to six hours after deletion. Recovery must reapply independently retained deletion markers before any restored database reconnects to clients, so a restore cannot make deleted or forgotten thoughts available again. The independent recovery journal contains identifiers, consent epochs, and revision metadata, not saved text or audio.

Metadata we retain

We retain account and device identifiers, subscription status, service-window dates, model and provider identifiers, duration, token counts, estimated cost, request status, and timestamps. This supports authentication, quotas, fraud prevention, billing, and reliability without retaining what you said.

Accounts and billing

Clerk processes account identity. Stripe processes payment details, tax calculation, trials, cancellations, refunds, and billing records. Cursay does not receive full card details.

Retention and deletion

Expired device authorizations are temporary. Revoked device tokens become unusable immediately. Billing and transaction metadata may be retained where required for tax, fraud, accounting, and legal obligations. Contact the project owner through the private channels listed in the GitHub repository to request account deletion.

Controls

You can avoid all cloud processing by using Local Whisper. You can unlink devices, cancel Pro through the billing portal, and continue using local Cursay after cancellation.