Privacy policy.

1. Speech and microphone audio

LocalFlow records only after you tap its floating microphone button. Microphone permission is required. Showing the floating button alone does not record. You can choose a recording maximum of 30 seconds, 1 minute, or 5 minutes, and stop sooner.

Audio is processed on your device using a downloaded speech model. LocalFlow does not upload microphone audio or transcriptions, use a cloud speech-recognition service, or train a remote model on your speech.

Microphone audio is not kept as an audio history. Audio needed for an active local recognition request is held temporarily in memory and released when processing finishes. Cancelling prevents the result from being delivered or saved. A recording that reaches its time limit waits for your approval.

2. Optional direct insertion and editor access

If you enable LocalFlow’s optional Android Accessibility service, the app locally checks the focused editor’s app and window identity, field text, selection, and available sensitivity metadata. On Android 13 and newer, available keyboard-session metadata adds checks of the editor’s identity and input type.

These checks support inserting a transcription you approve into the same unchanged, supported field. Original editor contents are not written to history, used to train personalized suggestions, or uploaded. Known sensitive or password fields and unsupported fields are refused. Android can hide metadata, so LocalFlow cannot identify every editor privacy flag.

Insertion prefers a positively matched native typing connection on Android 13 and newer, with a supported text action or advertised paste action as alternatives. The automatic paste route first places only your approved transcription on Android’s clipboard. The text-action and typing routes do not use the clipboard. LocalFlow chooses one route before submitting text and does not retry a submitted action through another route.

Accessibility is optional. Without it, you can dictate and explicitly copy the result for manual pasting with your usual keyboard. In manual-copy mode, LocalFlow cannot inspect another app’s destination field or detect password fields. You can disable the insertion service in Android Accessibility settings at any time.

3. Local history, retention, and deletion

History stores approved transcription text with its model and timestamp in private app storage. Saving is enabled by default, retaining the latest 10 notes. You can change the retention limit, turn future saving off, copy, favourite, delete individual notes, or clear history. Favourites obey the same retention limit.

Approved text may be saved when insertion fails or the original editor disappears. Unapproved cancelled results and known sensitive destinations are not saved. Turning off future saving does not delete notes already stored; use the deletion controls to remove them.

Preferences and downloaded models also stay in private app storage. The in-app text pad is retained through screen recreation; it is not an automatic audio archive. Use Models → Delete to remove a downloaded model. Clearing Android app storage or uninstalling removes LocalFlow’s private notes, preferences, and model files.

The app disables Android cloud backup and excludes app data from its declared backup and device-transfer rules. LocalFlow does not operate an account system or server-side history store. Deleting data in LocalFlow does not delete text you already copied, pasted, or shared into another app.

4. Model downloads and network metadata

Installed speech models work offline. LocalFlow uses the internet when you explicitly request a model download. It fetches pinned model files over HTTPS from Hugging Face and its download infrastructure and verifies the files before use.

No microphone audio, transcription, saved history, destination-editor text, or advertising identifier is included in those requests. Download hosts receive ordinary connection and request metadata, such as your IP address, request time, requested model file or URL, and LocalFlow User-Agent.

Those providers may maintain their own logs. LocalFlow does not control their independent privacy practices or retention. See the Hugging Face privacy policy. This network metadata is separate from local speech recognition and local history.

5. Clipboard, insertion, and sharing

An explicit Copy action places text on Android’s clipboard. Direct insertion transfers approved text into the field you selected; its automatic paste route also places that text on the clipboard.

On Android 13 and newer, LocalFlow marks the automatic paste clip as sensitive to suppress its preview. This mark does not erase clipboard text or control another app’s use of it. Clipboard text may remain even if a paste attempt is refused or cannot be confirmed.

Share sends text to the app you choose through Android’s sharing interface. Android, your keyboard, and recipient apps control their own storage, synchronization, clipboard, and network behavior. Review those apps’ privacy settings before sending sensitive text.

6. Android permissions

• Microphone: records speech you initiate for local recognition.
• Display over other apps: displays the movable floating voice button.
• Foreground microphone service and notifications: support the user-started recording service and its visible controls or status.
• Internet: downloads speech models you request.
• Accessibility service, if enabled: checks the focused editor locally and inserts text you approve into supported fields.

Android controls these permissions. You can close the floating control and manage app permissions in Android settings. LocalFlow does not request access to contacts, location, or the advertising identifier.

7. Analytics, advertising, and security

LocalFlow includes no advertising, analytics, remote crash-reporting, or login SDK. Speech recognition, Chinese script conversion, history, and editor validation run locally.

Downloads use HTTPS, cleartext app network traffic is disabled, and model file digests are checked before loading. Private app data is stored in Android’s app sandbox instead of a public recordings folder.

These measures depend on Android and your device’s security. Protect your device and any text you separately export. LocalFlow cannot erase another app’s copy or guarantee how another app handles text you deliver to it.

8. This website and email inquiries

This website does not use analytics scripts, advertising trackers, third-party fonts, a contact form, browser storage, or microphone access. Images and other site assets are served from the website itself. There is no website account.

This website is hosted on Cloudflare. Cloudflare receives the ordinary network information needed to deliver and protect it, such as an IP address, requested URL, request time, and browser or connection information. Hosting-provider processing is separate from LocalFlow’s on-device dictation. See Cloudflare’s privacy policy for its practices.

If you email us, we receive your email address, message, and any details or attachments you choose to include. We use this information to respond to your inquiry. Send only the information necessary for your question; audio recordings and transcripts are not needed for general privacy inquiries. You can ask us about access, correction, or deletion of your inquiry information using the contact below, subject to applicable requirements.

9. Contact and policy changes

For questions about LocalFlow or this privacy policy, contact:

We will update this policy if LocalFlow’s data handling changes, including changes to cloud features, telemetry, SDKs, or model-download services. This policy takes effect on 2 October 2026. Future revisions will show their updated date.