← Hush

Privacy policy

Last updated: 2026-05-17

Hush is designed so your voice and your saved dictation history stay private. This policy describes exactly what data Hush handles, where it lives, and who can see it.

1. Speech to text — runs on your device

After the one-time speech model download, all dictation runs locally on your iPhone using on-device machine learning. Audio is never sent off your device. The transcribed text is inserted into the text field you're typing in.

The speech model is downloaded over HTTPS from a content delivery network the first time you start dictation; the model itself contains no personal data.

2. Saved dictation history (optional)

Hush can save a history of your transcripts so you can review them later. This history is encrypted on your device with a key derived from your recovery phrase before it ever leaves your iPhone. The encrypted blobs are stored in your private storage canister on the Internet Computer (ICP). Only your device, holding the key, can decrypt them.

Platform operators (the team that maintains the canister software) cannot read your transcripts — the encryption key never leaves your phone.

You can disable encrypted history sync at any time in the app's settings.

3. Custom dictionary

The terms, names, and spellings you teach Hush are stored in a per-user dictionary canister on the Internet Computer, indexed by your principal (a public anonymous identifier derived from your recovery phrase). Dictionary entries are stored as plain text so Hush can use them to correct on-device transcription output. They are not linked to your name, email, Apple ID, or phone number.

4. Keyboard extension and Full Access

Hush includes an iOS keyboard extension. The keyboard requests "Allow Full Access" so it can:

  1. Insert your transcribed text into the active text field, and
  2. Pass dictation commands to the main Hush app via the iOS App Group.

Hush's keyboard extension does not log, transmit, or store any keystrokes other than the ones it inserts itself after dictation. It does not record audio — only the main Hush app does, and only while the orb is tapped.

5. Recovery phrase

A 12-word BIP-39 recovery phrase is generated on-device during setup. Hush never stores, transmits, or uploads this phrase. Write it down — it is the only way to restore your encrypted history and dictionary on a fresh install or new iPhone.

6. Purchases

Credit packs are purchased through Apple's StoreKit 2. Apple sends Hush a signed receipt for each purchase. Hush forwards the receipt to a verification service hosted on Cloudflare Workers, which validates the signature with Apple and instructs the Hush credit-ledger canister on the Internet Computer to credit your principal. The verification service does not see your Apple ID, your phone number, your name, or any transcription content — only the signed transaction receipt and your anonymous principal.

7. Analytics, tracking, advertising

Hush contains no analytics SDKs, no tracking, no advertising, and no third-party tracking pixels. No usage data, no crash reports, no device identifiers leave your phone except the StoreKit receipt described above.

8. Data subject rights (GDPR / CCPA)

Because Hush stores only encrypted data keyed to your anonymous principal, the platform operators cannot identify you and cannot fulfill a data-access request on their own. You hold the only copy of the encryption key (your recovery phrase). To delete all of your data:

  1. Open Hush → Settings → Clear all history.
  2. (Optional) Reinstall the app to wipe local state, then refuse to enter a recovery phrase.

The canister will continue to hold the encrypted blobs indexed by your principal; they are unreadable to anyone but you, and Hush will not transmit them anywhere.

9. Children

Hush is rated 4+ but is intended for users 13 and older. Hush does not collect any personal information from children.

10. Changes

We may update this policy. The "Last updated" date at the top will change. Material changes will be highlighted in the app's release notes.

Contact

For privacy or support questions: preredact@gmail.com