Your voice.
Your Mac.

Audio and transcript text

Bulong’s speech model runs on your Mac. Audio and transcript text are not sent to the subscription service and are not needed for billing. A first model download requires the internet; running the downloaded speech model is a separate, local operation.

Transcripts saved in local history remain on your Mac. You can clear them in the app. Exports, clipboard contents, backups, and text inserted into other apps are governed by where you put them. Your Mac account and disk security matter too.

We have not yet published an independent privacy audit or completed release network-capture report. We will not describe either as verified before the evidence exists.

Activation and billing

A subscription service needs limited purchase and device metadata: purchase or account identifiers, subscription state, platform, activation identifiers, expiry and grace dates, and records needed to process payment events safely. It must not receive audio, transcripts, contact lists, or the contents of other apps.

Hosted checkout is handled by the payment provider. Bulong’s site and entitlement service do not collect card details. The provider’s privacy and billing terms must be linked at checkout before sales open.

We do not claim that an activation identifier is anonymous. Device and purchase records can be connected to your purchase. Requests also expose ordinary connection metadata, such as an IP address, to the hosting provider.

Downloads and updates

Model hosts and software download hosts receive standard request metadata when your Mac downloads files. Optional update checks request release metadata, not your speech or transcript history. Downloads and account verification are not the same as sending speech to a cloud transcription service.

The launch list

If you sign up, we use your email address, preferred platform, optional language preference, consent time and version, signup page, and simple campaign source to manage launch updates and understand interest. Do not put private text or recordings into the form.

Cloudflare processes the public site and spam challenge and stores encrypted launch-list contact details in an access-restricted database. Our private automation service receives status records and keyed email fingerprints, without your address or preferences. Resend receives your address to send the confirmation and approved launch emails. Email open and click tracking, advertising pixels, and session replay are not part of this launch-list design.

Signups remain pending until you explicitly confirm. Confirmation links expire after 24 hours. Unconfirmed signups are removed after seven days by scheduled cleanup. Confirmed waitlist records expire after 365 days unless you make a new signup request. Unsubscribing removes contact details from the active launch list during processing. We retain a keyed suppression record to prevent more email and limited status records for retries and operations. An email already being sent may still arrive.

Use the unsubscribe link in a Bulong email, or ask for deletion by emailing hello@bulong.app. This is a launch list, not permission for unrelated marketing.

Support and deletion requests

Support messages contain whatever you choose to send. Please omit private audio, transcript history, license keys, and card details. If a recording is useful to reproduce a bug, we will request it separately and explain the purpose.

To ask about your data or request deletion, email hello@bulong.app. Some purchase records may need to be retained for billing, fraud prevention, or legal obligations. We will explain any applicable limits rather than promise instant deletion of every record.

Before public sales

Operator details and a verified release network inventory must be finalized before checkout opens. See the release status. These controls reduce data exposure, but they are not a promise that every possible data leak can be prevented.