OctaflowYour voice is turned into text on your Mac, and the recording never leaves it. While a task runs, the text of your request and what Octaflow needs to see of the app it’s working in go to AI providers so they can pick the next step. Our server counts usage. It doesn’t store your requests, your screen or the AI’s replies, unless you send us feedback or a crash report with recent activity included. We don’t sell your data, show you ads, or use your data to train AI models.
Octaflow is a Mac app that does tasks on your Mac when you ask by voice. It’s made by Tuned Tech LLC, a Wyoming company (“we”, “us”). This policy covers the Octaflow app, your Octaflow account and this website.
What stays on your Mac
- Your voice. Speech is turned into text on your Mac. The audio is never uploaded, whether you’re dictating or asking Octaflow to do something.
- Recent recordings. The last 20 recordings of requests and their transcripts are kept so problems can be looked into. Older ones are deleted automatically.
- Task history. For each task, Octaflow keeps a record of its steps, including the text it read from the apps it used. It keeps the most recent 20 and deletes older ones. Screenshots aren’t saved.
- Learned shortcuts and vocabulary. Routes that worked before (for example, a page inside a website) are remembered to make repeat tasks faster, along with words you add to your vocabulary. Learned shortcuts don’t include what you dictated or typed into messages.
- Your history. The app lists your last 30 requests with Octaflow’s answers, and your last 200 dictations so you can copy text that didn’t land where you meant. Each list has a Clear button in Octaflow’s window.
The recordings, task records, shortcuts and vocabulary live in Octaflow’s folder in Application Support, and deleting that folder removes them. The two history lists are cleared with their Clear buttons. None of this is sent anywhere unless you include recent activity in feedback or a crash report (see below).
What’s sent while a task runs
Dictation doesn’t send anything. When you ask Octaflow to do something, it sends the following through our server to AI model providers, only while that task is running:
- The text of your request.
- A description of the app you’re working in: its buttons, fields and labels as macOS’s accessibility system reports them, or the text of the page in Google Chrome.
- When a step needs it, a screenshot of that one app window. Never your whole screen.
Octaflow never reads or sends anything from password managers, Keychain, or banking and wallet apps, or from banking and password sites in Chrome, Safari, Edge, Brave or Firefox. It recognizes them by the app’s name and the site’s address: sites with “bank” or “credit union” in the address, and major banks, brokers, payment and password services. It never reads what’s typed in a password box, and it doesn’t read a password that a password manager copied to the clipboard.
The providers are OpenAI and OpenRouter (which routes to the model that picks each click). We ask OpenAI not to store these requests. Each provider’s own policy covers how it handles the data it receives. Our server passes this data along without saving it.
What Octaflow reads on screen is treated as information, never as instructions. Anything that sends, submits, deletes, buys or posts waits for your “yes.”
Your account
You need an account to ask Octaflow to do things. Dictation works without one. You sign in with Apple or Google, and we don’t see your password. If you use Apple’s Hide My Email, we only get the relay address Apple gives us.
| What we keep | Why |
|---|---|
| Your email address and account ID | To know it’s you and keep your plan |
| Your plan, and when a free allowance started | To apply the right allowance |
| Daily usage: the number of AI calls, tokens used and which model | To count use against your monthly allowance (Pro) or one-time allowance (new accounts and promotional codes), and to understand costs |
| Calls per minute | To stop abuse of the service |
If you redeem a promotional code, your account switches to that code’s plan. We don’t record which code you used.
Payments
Octaflow Pro is paid through Stripe. Your card details go straight to Stripe and never reach us. From Stripe we keep your Stripe customer ID, whether your subscription is active, and its billing period. Stripe handles the rest under its own privacy policy, including receipts and the page where you manage your subscription.
Feedback and crash reports
When you use Send Feedback in the app, we keep your message, your email, and your Octaflow and macOS versions. “Include what Octaflow did recently” is on by default. When it’s on, the report also includes the end of the app’s logs, which can contain what you asked, what Octaflow did, its answers, and text from the apps it was working in.
If Octaflow quits unexpectedly, it offers to send a crash report the next time it opens. That report includes the same recent logs if the box is ticked. You choose whether to send it, and you can change “Always send crash reports” at any time.
Only the Octaflow team reads feedback and crash reports. We use them to fix problems.
Updates
Octaflow checks for new versions by fetching a small file from downloads.octaflow.app, which is hosted on Cloudflare. It currently checks about once an hour. These checks don’t include your account or anything you’ve done. Like any web request, they show your IP address to the host.
This website
octaflow.app has no analytics, advertising or tracking cookies. It’s served by Cloudflare, which processes basic request information such as IP addresses to deliver the site and protect it from attacks. The app has no analytics or tracking today.
We plan to add product analytics to the app with PostHog, to learn which features work and where things go wrong. It would record events, such as a task finishing or a setting being changed, never the content of your requests, your recordings or your screen. It isn’t switched on yet. We’ll update this page before it is.
Who we work with
| Service | What for |
|---|---|
| Supabase | Our server and database: accounts, usage counts, feedback |
| OpenAI, OpenRouter | AI models that decide each step while a task runs |
| Stripe | Payments and subscriptions |
| Apple, Google | Sign-in |
| Cloudflare | This website, downloads and update checks |
| PostHog (planned, not yet on) | Product analytics without content, once switched on |
We don’t sell or rent your data, share it for advertising, or use your requests or screen contents to train AI models. We share data only with these services, to run Octaflow, or when the law requires it.
How long we keep data
- Your account, plan and subscription details: while your account exists. We delete them within 30 days of you asking us to delete your account, except billing records we must keep by law (usually several years, kept by Stripe and us).
- Usage counts: while your account exists, then deleted with it.
- Feedback and crash reports: up to 12 months, then deleted, or sooner if you ask.
- On your Mac: recordings, task history and shortcuts are kept as described above, until Octaflow replaces them or you delete them.
Your choices
- Local data: clear your request and dictation history with the Clear buttons in Octaflow’s window, and delete Octaflow’s Application Support folder to remove recordings, task records, shortcuts and vocabulary.
- Feedback: untick “Include what Octaflow did recently” before sending, and turn off “Always send crash reports.”
- See or delete your data: email us to ask what we hold about you, to correct it, or to delete your account and the data tied to it. We’ll answer within 30 days. Cancel any subscription first, from Settings › Account in the app.
Depending on where you live (for example in the EU, the UK or California), you may have more rights over your data, including the right to complain to your local data protection authority. Email us and we’ll help.
Where data is processed
We and the services above may process data in the United States and other countries. Where the law requires it, we rely on safeguards such as the providers’ standard contractual clauses.
Children
Octaflow isn’t meant for children under 13, and we don’t knowingly collect their data. If you think a child has given us data, email us and we’ll delete it.
Changes
If this policy changes, we’ll update this page and the date below. For significant changes, we’ll also tell you in the app.
Contact
Tuned Tech LLC, Wyoming, USA. help.octaflow@gmail.com
Last updated October 1, 2026