Shepit is a dictation app for macOS. This policy explains what data we collect, why, where it is stored, and how to have it removed. Shepit is currently in a private testing phase; this policy covers that phase and will be revisited before any public launch.

Who we are

Shepit is operated by Rebbix LTD (Cyprus). For any privacy question or data request, contact oleksij@rebbix.com.

What we collect

• Account identity. When you sign in with Google, we receive your email address, display name, and profile picture URL from Google. We do not receive your Google password.
• Audio you dictate. The audio you record is sent to our API, which forwards it to OpenAI for transcription and returns the text to your Mac. Every dictation takes this path.
• Usage metadata. Basic records tied to your account, such as first and last sign-in times, and operational logs needed to run and secure the service.

We do not collect the contents of your transcriptions on our servers beyond what is needed to perform the transcription itself, and we do not sell any of your data.

How transcription works

Your audio is forwarded to OpenAI’s transcription model (gpt-4o-mini-transcribe), which returns the transcribed text. Our API passes the audio through to produce that text and returns it to your device; we do not store the audio file on our servers after the request completes.

A copy of your audio is kept locally on your own Mac while the “save audio recordings” option in the app is on, which it is by default; turn it off and no copy is kept. That archive lives on your device, not ours, and you can delete it at any time.

Where your data is stored

• Account and usage records: Google Cloud Firestore in the us-east1 region (United States).
• Authentication: Firebase Authentication (Google Cloud).
• Audio for Cloud transcription: processed transiently by our API and by OpenAI; not retained by us after the response is returned.

Third parties

• Google / Firebase - sign-in and data storage. See Google’s Privacy Policy.
• OpenAI - speech-to-text transcription. See OpenAI’s Privacy Policy.

We share data with these providers only to the extent needed to operate the service.

Analytics and cookies

Our public website uses Google Analytics 4 (GA4) by default to understand how visitors find and use Shepit, and how the site performs, so we can improve it. This measures site usage only; we do not collect any extra personal data through analytics, and we never use it for advertising.

When you first arrive, a banner tells you analytics are on and lets you opt out. If you decline, we turn analytics off on this device and remember your choice, so no analytics cookie is set on return. If you accept, analytics stay on. GA4 uses a first-party analytics cookie (named _ga) to count visits and recognise a returning visit. See Google’s Privacy Policy.

Retention and deletion

We keep your account and usage records for as long as your account is active. To delete your account and the data associated with it, email oleksij@rebbix.com and we will remove your users record and any allowlist entry. Audio sent for Cloud transcription is not retained on our servers, so there is nothing to delete there. Locally saved audio is under your control on your own device.

Your rights

You can request access to, correction of, or deletion of your personal data at any time by contacting oleksij@rebbix.com. You can also stop all data collection by signing out of the app, or by no longer using it.

Changes to this policy

We may update this policy as the service evolves. Material changes will be reflected by the “last updated” date above.