Legal
Privacy
Last updated 1 September 2026
ploca is built so that privacy does not depend on trust. This page describes what the app does on your machine, the network calls it makes, and what your email is used for if you choose to give it to us.
i.The app collects nothing
ploca runs entirely on your Mac. Your audio is captured into memory, transcribed by a local Whisper model, and discarded. It is never written to disk. Your transcripts are processed locally and injected at your cursor. They are never sent anywhere.
There is no analytics SDK, no crash reporter, no A/B testing framework, and no install identifier. This is not a setting you can turn off. That code was never written. The only things stored on disk are your own settings, vocabulary, and snippets, which stay on your Mac.
ii.The disclosed network calls
When ploca launches, it fetches a small status file from ploca.app, and its signature, to confirm this release is still current. Once a day, while it is running, it asks ploca.app whether a newer version exists. If you have entered a lifetime licence key, it also sends that key, and nothing else, to confirm it, once per launch. On first run only, it downloads the speech model from Hugging Face, once. Apart from the licence key itself, these requests carry standard HTTP headers and nothing more. No audio, no transcripts, no usage data, and no install identifier are ever sent. Our server sees the headers and your IP address in its access log, the same as any web request.
The seven day trial, and the three day grace period after it ends, make no network call at all: both are dates recorded on your Mac. That is separate from the licence key check above, which respects its own seven-day offline grace window, so ploca keeps working on a flight or behind a firewall. We derive a rough count of daily and monthly users from the release-check access logs. The app itself runs no telemetry.
iii.Your email, if you choose to give it
ploca never asks for an email address to download or use it. If you sign up for occasional updates on the website, we use that address only to send those updates. We do not sell it, share it with advertisers, or use it for anything else. You can ask us to delete it, or unsubscribe, at any time by writing to hey@ploca.app.
A separate purchase confirmation, if you buy a licence, is handled by Polar, our payment processor. Two other services help deliver the site itself: Cloudflare hosts it, and Resend sends update emails to those who sign up. Each processes only what is needed to do its job. Cloudflare also counts page views for us, without cookies, so we can see how many people visit and nothing about who they are. The website sets no advertising cookies and runs no other third-party trackers.
iv.Permissions the app asks for
ploca asks for two standard macOS permissions: Microphone, to hear you, and Accessibility, to type text at your cursor. It deliberately does not ask for Input Monitoring or Screen Recording, which some dictation tools use to read on-screen context. We treat those as permissions not worth the cost.
v.Verifying all of this
You do not have to take our word for any of it. You can watch ploca's network activity with a tool like Little Snitch and see the silence yourself. Privacy that can be checked is the whole point.
vi.Questions
Write to hey@ploca.app. This statement covers ploca and will be updated as the product changes.