This Privacy Policy explains how Zarah AI handles information — and why, by design, the most sensitive part (your voice) never leaves your Mac.
Zarah AI is voice dictation that runs on your Mac. The product is built so that the sensitive part of what you do — your voice — never leaves your device. This Privacy Policy explains what limited information we do process, why, and the choices you control.
Zarah AI is provided by Mylo Prime LLC (“Zarah,” “we,” “us”), located at Mylo Prime LLC, Bountiful, Utah 84010, USA. We are the controller of the limited personal data described below. You can reach us at support@myloprime.com.
Your microphone and system audio are processed only on your device using Apple's on-device speech recognition. Audio is held in memory just long enough to produce text and is then discarded. We never receive, transmit, store, or use your audio to train any model.
The text Zarah produces is inserted where your cursor is and saved to a local, encrypted history on your Mac. This history is not synced to us or to any cloud service. You can search, edit, export, or delete it at any time within the app.
If you choose to connect your own Anthropic (Claude), OpenAI, or xAI (Grok) account for grammar cleanup or rewriting, the already-transcribed text (never your audio) is sent to that provider over the internet, under that provider's own terms and privacy policy. This is off by default and clearly labeled. Your API key is stored in the macOS Keychain on your device and is never sent to us.
When you sign in to activate a paid license, we process your email address, an opaque per-device identifier, and your license and subscription status. We use this solely to authenticate you, issue your software license, and manage your subscription. Sign-in is protected by Cloudflare Access.
Subscriptions are processed by Stripe, Inc. We do not receive or store your full payment card number. Stripe processes your payment details under its own privacy policy and shares with us limited data such as your email, the last four digits of your card, and your subscription status.
If you enable it, Zarah reads contact names locally to help spell people's names correctly while you dictate. This happens entirely on your Mac and no contact data is ever transmitted.
Zarah can check for software updates. When it does, it simply fetches a small static version feed over HTTPS and compares it against your installed version entirely on your device. The request sends no app version, no account email, and no other data about you — the server sees only the standard network information any web request includes, such as your IP address. The in-app Trust panel keeps an honest count of every outbound connection.
When you visit our website, our hosting provider (Cloudflare) automatically logs basic technical data such as IP address, browser type, and pages requested, to operate and secure the site. Our marketing site sets no advertising or cross-site tracking cookies; checkout pages hosted by Stripe may set cookies necessary to process your purchase.
We use the limited information above to: provide and maintain the app and your account; authenticate you and issue your license; process and manage your subscription; provide customer support; detect, prevent, and address fraud, abuse, or security issues; and comply with our legal obligations.
We do not sell your personal information, and we do not use your dictation content for advertising or to train models.
We share limited data only with vendors that help us run the service, each bound to protect it:
We may also disclose information if required by law, to enforce our agreements, or to protect the rights, safety, and property of our users or others. If we are involved in a merger or acquisition, information may be transferred subject to this Policy.
We are based in the United States and process data there. If you access Zarah from outside the U.S., you understand that the limited account data described above is processed in the U.S. and other countries where our service providers operate.
Audio is never retained. Your dictation history lives on your device until you delete it. Account, license, and subscription records are retained for as long as your account is active and as needed to comply with our legal, tax, and accounting obligations, after which they are deleted or anonymized.
We design for least exposure: audio stays on-device, local history is encrypted, API keys live in the macOS Keychain, and sign-in is protected by Cloudflare Access with single sign-on. No method of transmission or storage is perfectly secure, but we maintain administrative, technical, and physical safeguards appropriate to the limited data we handle.
You can access, correct, export, or delete your local dictation history directly in the app at any time. For account data we hold, you may request access, correction, deletion, or a copy by emailing support@myloprime.com.
Depending on where you live, you may have additional rights under laws such as the EU/UK GDPR or the California Consumer Privacy Act (CCPA/CPRA), including the right to know, delete, correct, and to not be discriminated against for exercising your rights. We do not sell or “share” personal information as those terms are defined under California law.
Zarah is not directed to children and is intended for users 18 and older. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
We may update this Privacy Policy from time to time. We will post the updated version with a new effective date and, for material changes, provide additional notice. Your continued use after an update means you accept the revised Policy.
Questions or requests about your privacy? Contact Mylo Prime LLC at support@myloprime.com, or by mail at Mylo Prime LLC, Bountiful, Utah 84010, USA.