Privacy policy
Last updated: 2026-09-25
1. Controller
Aurel-Cristian Grosu, c/o IP-Management #7467, Ludwig-Erhard-Straße 18, 20459 Hamburg, Germany. Email: [email protected]
2. Hosting and server log files
This website is run by an external hosting provider. When you visit it, technically necessary data is processed (IP address, date and time, requested page, browser and operating system) in order to deliver the site securely and reliably.
The legal basis is Art. 6 (1)(f) GDPR. Log files are deleted as soon as they are no longer needed for this purpose.
3. Cookies and tracking
For page views and downloads we use Umami, a self-hosted, cookieless analytics tool at umami.cristiangrosu.de. It processes the requested page, referrer, browser, operating system and approximate location. The IP address is not stored. When the app download starts on a Mac, we also record a “download” event. The legal basis is Art. 6 (1)(f) GDPR. A single technically necessary cookie (“NEXT_LOCALE”) is set when you switch the language manually, so your choice is remembered. Fonts are served locally; no data is sent to Google.
4. Downloads via GitHub
App files are provided through GitHub (GitHub Inc., 88 Colin P. Kelly Jr. St., San Francisco, CA 94107, USA). When you download, your IP address is transmitted to GitHub. GitHub is certified under the EU-US Data Privacy Framework. The legal basis is Art. 6 (1)(f) GDPR. More information: GitHub Privacy Statement.
5. The OnlyWhisper app
OnlyWhisper processes speech, text, meetings and files exclusively on your Mac. No audio or text is sent to us or any third party.
The app only connects to the network in two cases: to download the speech models once from Hugging Face (Hugging Face Inc., USA), and when checking for updates, where it requests the appcast.xml file from this website. This creates the log data described in section 2.
6. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object (Art. 15–21 GDPR). You may also lodge a complaint with a data protection supervisory authority.