privacy & network use
Local-first, verifiably.
By default nothing you say, show or type leaves your computer. Don’t take the page’s word for it: put a firewall in front of the app, or pull the network cable — dictation and Crop & Speak keep working. Here is every network touch, exhaustively.
| What | Goes online? | Details |
|---|---|---|
| Speech-to-text (transcription) | On-device by default | Runs entirely on your computer — audio is never uploaded. One exception, off until you set it up: Pro can send audio to a cloud speech provider you configure, with your own account key. |
| Crop & Speak screenshots | No | Saved to a local folder you choose (or a temp folder, auto-cleaned) and pasted locally. The image never leaves your device. |
| History | No | Kept in memory while the app runs and gone when you quit — never uploaded. Pro can optionally keep history on disk, stored only on your machine. |
| Speech model files | Download only | Fetched once from Hugging Face (size depends on the model you pick), then cached and used offline. Only the model comes down — no audio goes up. |
| Local AI polish model | Download only | A small instruct model downloads once on first use; text enhancement then runs offline. |
| Update check | Version file only | A small, digitally-signed version file is fetched from dl-voice.croppick.com — no account, no analytics, none of your content. Updates are verified before they install. You can turn checks off or block updates entirely. |
| Pro licence activation | One-time (Pro) | Entering a Pro key makes one activation call: the key plus an anonymous device code (a one-way hash) — never your name, audio, text or screenshots. After that Pro works fully offline; machines without internet can use a licence file from /activate instead. |
| AI enhancement via Ollama | Your own server | Text goes only to the Ollama address you configure — http://localhost:11434 (your own machine) by default. Nothing is sent to us or any third party. |
| AI enhancement via OpenAI / Claude | Yes — uploads that text | Only if you deliberately choose an online provider and press Polish / Prompt. Your dictated text (never audio, never screenshots) goes to that provider over a secure connection, using your own account key. Off until you enable it; the built-in local model or your own Ollama server work fully offline instead. |
| Tracking / analytics | None | The app reports nothing about you or your usage — nothing gets sent home, ever. This website is equally boring: no cookies, no trackers. |
Account keys for optional online providers are stored encrypted on your own machine — sealed in a local vault protected by your operating system’s keychain; a key is sent only to the provider you chose. Logs stay local (last 10 sessions) and record the length of dictated text, not its content.
the free-forever promise
What can never move behind a paywall
Pro exists to fund the app, and it is additive only. If a feature is on this list — or is simply free today — it stays free. No rug-pulls.
- Unlimited on-device dictation — no word caps, no time caps
- The full on-device model catalog, including the best ones — quality is never a paywall
- Core Crop & Speak: capture, annotate, narrate, smart delivery
- Editable voice modes and basic AI polish
- The history panel
- Offline, private operation — privacy is the floor, never the upsell
- Every feature that is free today
updates
Signed, verified, optional
The app checks a small, digitally signed version file (Ed25519) — at most hourly on launch, about daily while it runs. The signature is verified before anything is trusted, every download is checksum-verified, and if anything doesn’t match, the update is simply rejected. No account, no analytics, none of your content.
Prefer silence? Settings → Updates can turn automatic checks off — or block updates entirely.
the formal bits
Privacy policy, officially
This website sets no cookies, runs no analytics, and has no accounts — it collects nothing about you. It is served by Cloudflare, whose infrastructure processes technical request data (such as IP addresses) transiently to deliver the pages, under Cloudflare’s own policies.
The app collects and transmits no personal data — the table above is the complete list of its network activity. There is no account system and no way for us to identify you as a user.
The activation page (/activate) sends only what you type into it — your purchase email or an offline request code — to our licence service, solely to answer that request. Its forms are gated by Cloudflare Turnstile, Cloudflare’s privacy-preserving bot check, which processes technical request signals under Cloudflare’s own policies; it is loaded only on that page.
If you email us, we keep the correspondence to help you — that’s it. When Pro purchases open, payments will be handled by a merchant-of-record payment provider; we receive the order details needed to deliver your license (like your email address), never your card number.
Data controller: the operator of Croppick (registered individual activity, Republic of Lithuania). Contact for any privacy question or request: the email in the footer — full controller details available on request there.