This Privacy Policy explains how Zarah AI handles information — and why, by design, the most sensitive part (your voice) never leaves your Mac.
Zarah AI is voice dictation that runs on your Mac. The product is built so that the sensitive part of what you do — your voice — never leaves your device. This Privacy Policy explains what limited information we do process, why, and the choices you control.
Zarah AI is provided by Mylo Prime LLC (“Zarah,” “we,” “us”), located at Mylo Prime LLC, 320 W 500 S Ste 200, Bountiful, Utah 84010, USA. We are the controller of the limited personal data described below. You can reach us at support@zarah.ai.
Your microphone and system audio are processed only on your device using Apple's on-device speech recognition. Audio is held in memory just long enough to produce text and is then discarded. We never receive, transmit, store, or use your audio to train any model.
Dictated text is inserted where you choose. When history saving is enabled and its encryption key is available, Zarah also saves it in encrypted local history on your Mac. Zarah does not sync or upload this history. You can search, edit, export, or delete dictation history, choose a dictation retention period, or use Incognito to avoid saving new dictations. Text you copy, export, or send through another app is handled by the destination you choose.
Local history is marked to exclude it from Time Machine backups. Other backup or disk-cloning tools may not honor that marking. Deleting a record does not delete copies you previously exported or placed in other apps.
Meetings starts when you select an audio source, confirm that participants have been informed and permission to transcribe is in place, and press Start. Zarah does not notify participants or obtain permission on your behalf. It captures audio from the selected app and, if you enable it, your microphone. Browser capture can include unrelated tabs, windows, or helper processes; it does not isolate a particular meeting tab.
Zarah's microphone is independent of your call application's mute control. Muting in a call does not pause Zarah. Use Pause my mic in Zarah or Stop to end capture. App audio can continue while your microphone is paused. Me and Others identify audio sources, not individual participants; speaker playback may also reach the microphone. Recording controls may be visible when you share your screen.
Transcription runs locally and captured audio is not retained. When you select Generate draft, Apple's on-device model processes the saved transcript on your Mac. Draft notes may omit or misinterpret information; source quotations and review flags help you review output but do not guarantee accuracy. Meetings does not automatically send transcripts to a connected cloud provider.
Meeting transcript content, titles, source-app names, consent acknowledgments, bookmarks, draft notes, source quotations, and review flags are encrypted on this Mac. The local index also stores an identifier, start date, and revision. Meetings remain until you delete them; dictation auto-delete settings do not apply. Incognito blocks starting a meeting and stops active capture, without deleting text already saved.
The optional history lock also protects access to saved meetings. Copied text and exported plain-text files are outside that lock; Zarah does not encrypt exported files or control their destination. If you copy meeting text into a cloud-enabled feature such as Ask or Read Aloud, that feature's provider settings apply.
If you choose to connect your own Anthropic (Claude), OpenAI, xAI (Grok), Google (Gemini), or Meta account — for grammar cleanup, for Ask rewrites, or (with xAI) for Grok voices in Read Aloud — the relevant text (your transcribed words or text you've selected, never your audio) is sent to that provider over the internet, under that provider's own terms and privacy policy. This is off by default and clearly labeled. Your API key is stored in the macOS Keychain on your device and is never sent to us.
If you select ElevenLabs voices, Zarah sends the text you ask it to read — including your last dictation when nothing is selected — to ElevenLabs to generate speech. Its terms and data-retention settings apply; Zarah does not promise zero retention by ElevenLabs. Voice-catalog requests send no selected text, and voice previews send a fixed demonstration sentence. Generated audio streams into memory for playback and is not saved by Zarah. Your recorded microphone or meeting audio is not uploaded. Your ElevenLabs key is stored in this Mac’s Keychain, excluded from settings exports, and can be replaced or removed in Read aloud settings.
When you sign in — required for both the free trial and a paid license — we process your email address, an opaque per-device identifier, your Mac's name (so the device can be recognized in your account), and your license and subscription status. We use this solely to authenticate you, issue your software license, and manage your subscription. Sign-in is protected by Cloudflare Access.
Subscriptions are processed by Stripe, Inc. We do not receive or store your full payment card number. Stripe processes your payment details under its own privacy policy and shares with us limited data such as your email, the last four digits of your card, and your subscription status.
If you enable it, Zarah reads contact names locally to help spell people's names correctly while you dictate. This happens entirely on your Mac and no contact data is ever transmitted.
Zarah can check for software updates. When it does, it simply fetches a small static version feed over HTTPS and compares it against your installed version entirely on your device. The request carries no account email or other information about you — only what any app's web request includes: your IP address and a standard user-agent naming the app's build number and your macOS version. The in-app Trust panel logs the connections Zarah makes on its own — sign-in, license checks, and update checks — so you can see them for yourself. Optional features you switch on, such as a connected cloud model or Grok or ElevenLabs voices, connect to that provider when you use them; those are described above and are off unless you enable them.
When you visit our website, our hosting provider (Cloudflare) automatically logs basic technical data such as IP address, browser type, and pages requested, to operate and secure the site. Our marketing site sets no advertising or cross-site tracking cookies; checkout pages hosted by Stripe may set cookies necessary to process your purchase.
We use the limited information above to: provide and maintain the app and your account; authenticate you and issue your license; process and manage your subscription; provide customer support; detect, prevent, and address fraud, abuse, or security issues; and comply with our legal obligations.
We do not sell your personal information, and we do not use your dictation or meeting content for advertising or to train models.
We share limited data only with vendors that help us run the service, each bound to protect it:
We may also disclose information if required by law, to enforce our agreements, or to protect the rights, safety, and property of our users or others. If we are involved in a merger or acquisition, information may be transferred subject to this Policy.
We are based in the United States and process data there. If you access Zarah from outside the U.S., you understand that the limited account data described above is processed in the U.S. and other countries where our service providers operate.
Captured audio is not retained. Dictation history remains on your device until you delete it or your selected retention period removes it. Meetings remain until you delete them in Meetings; dictation retention does not remove them. Deleting local records does not remove copies you exported, shared, or saved in backups. Account, license, and subscription records are retained for as long as your account is active and as needed to comply with our legal, tax, and accounting obligations, after which they are deleted or anonymized.
Captured audio stays on-device. Dictation and meeting transcript content and draft notes are encrypted locally using a key kept in this Mac's Keychain. Optional provider API keys also live in the Keychain. The history lock protects access inside Zarah, not text already copied or exported. Sign-in is protected by Cloudflare Access. No method of transmission or storage is perfectly secure, but we maintain administrative, technical, and physical safeguards appropriate to the limited data we handle.
You can access, correct, export, or delete local dictation history in the app. You can also search, copy, export, and delete saved meetings and their draft notes. For account data we hold, you may request access, correction, deletion, or a copy by emailing support@zarah.ai.
Depending on where you live, you may have additional rights under laws such as the EU/UK GDPR or the California Consumer Privacy Act (CCPA/CPRA), including the right to know, delete, correct, and to not be discriminated against for exercising your rights. We do not sell or “share” personal information as those terms are defined under California law.
Zarah is not directed to children and is intended for users 18 and older. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
We may update this Privacy Policy from time to time. We will post the updated version with a new effective date and, for material changes, provide additional notice. Your continued use after an update means you accept the revised Policy.
Questions or requests about your privacy? Contact Mylo Prime LLC at support@zarah.ai, or by mail at Mylo Prime LLC, 320 W 500 S Ste 200, Bountiful, Utah 84010, USA.