Privacy policy · 26 August 2026

Your voice remains yours.

Summary

Blatero processes audio entirely on your device by default. Audio is not stored, synced or transmitted. Telemetry and cloud enhancement are off by default.

Local processing

The microphone is active only during a recording you start. Temporary audio buffers are released after transcription. A model download receives normal network data, never audio or transcript text.

Optional cloud enhancement

Only when you configure a provider and API key does transcript text — never audio — go to that endpoint. Isla makes this visible and keys remain in Keychain.

iCloud

If you enable sync, Blatero uses your private CloudKit database for text and settings. Audio never syncs, and Blatero remains complete without iCloud.

Command Mode

Voice commands are converted locally into a closed set of inspectable actions. Isla shows the exact action before execution. Arbitrary model text is never executed as a shell command.

Telemetry

Nothing is measured before explicit consent. Optional telemetry is aggregate and contains no audio or transcript text.

Deletion and contact

Local data can be deleted in the app. ‘Delete all synced data’ removes the private CloudKit zone. Questions: privacy@blatero.app.