What leaves your Mac, and what never does.
Sotto listens to you for a living, so this page is specific rather than reassuring.
Your audio goes to a transcription service to be turned into text, and nowhere else. Your dictation history stays on your own Mac. There is no analytics, no tracking, and no copy of your speech kept by us for training or anything else.
Who we are
Sotto is made by HT&DT Sp. z o.o., ul. Grójecka 214/118, 02-390 Warsaw, Poland. For anything on this page, write to kontakt@marbily.com.
Your voice
When you hold the dictation key, Sotto records only while the key is held. That recording is sent over an encrypted connection to the speech-to-text provider configured in the app, which returns the text. The audio is not stored on our servers, because it never passes through our servers.
The resulting text may then be sent to a language model to be tidied into finished writing — the same journey: sent, processed, returned.
- We do not keep your audio. Once transcribed, the recording is discarded.
- We do not use anything you say to train models.
- The app sends the request through our own service, which forwards it to the speech-to-text provider we use. You do not manage a provider key, and we do not attach your identity to the request beyond the subscription that authorises it.
- Providers process the request under their own terms and retention rules. We will name the current provider on request, and will say so here if it changes.
What is stored on your Mac
Everything Sotto remembers is written to your own disk, in your account's Application Support folder, with permissions that restrict it to you:
- History — the text of your takes, so you can re-paste them. Capped to recent entries, never uploaded.
- Settings — your preferences, modes and sign-off.
- Your subscription token — held in the macOS Keychain, encrypted by the system, never written to a file. It is what tells our service you're entitled to use it, and carries nothing about what you dictate.
- A diagnostic log — timings and mode names. It does not contain what you said.
Deleting the app's Application Support folder removes all of it. Nothing is retained elsewhere.
Crash reports
Crash reporting is off by default. Switched on, a crash sends a technical stack trace, the app version and the macOS version. By design it carries no transcript, no audio, no keys and no file contents, and your home folder path is stripped before anything is sent. You can turn it off again at any time.
Update checks
Sotto checks for new versions by requesting one small, static, cryptographically signed file from our server. No identifier, no usage data and no account is attached to that request.
The beta list
If you ask for beta access we store the email address you typed, so we can send you a build and talk to you about it. We do not add you to a marketing list, we do not share or sell it, and asking us to delete it removes it.
Your rights
Under the GDPR you may ask for a copy of what we hold about you, ask us to correct or delete it, or object to our use of it. In practice the only thing we are likely to hold is your email address. Write to kontakt@marbily.com and we will act on it. You may also complain to the Polish supervisory authority, the UODO.
Children
Sotto is not directed at children under 16, and we do not knowingly collect their data.
Changes
If this policy changes in a way that affects what we send or keep, we will update the date above and say so in the release notes rather than changing it quietly.