Privacy Policy

Information Collection and Use

• User Preferences: BlabbyAI stores user preferences locally on your device. This information is used solely to customize your experience with the app.
• User Authentication: BlabbyAI uses Google authentication to verify user access. We store your Google account identifier and email address so your modes, snippets, spellings and languages follow you across devices.
• Usage Analytics: Like most apps, Blabby uses third-party analytics tools to understand how the app is used and where people run into problems, so we can fix them. This never includes your dictated text, your audio, or anything from the apps you dictate into.
• User-Created Modes: User-created modes are stored securely on our servers, allowing users to access them whenever needed. Users have full control over their modes and can modify or delete them at any time

Microphone and Voice Recordings

• When we record: Blabby records audio only while you are actively dictating, after you start a recording from the floating button or the side bar. Blabby does not listen in the background and does not record unless you start a recording.
• How recordings are handled: The recording is written to a temporary file in the app's private cache on your device, sent over an encrypted HTTPS connection to our servers for transcription, and then deleted from your device once the request finishes, is cancelled, or fails.
• Retention: Transcription is processed in real time by Zero Data Retention (ZDR)-enabled AI providers. Your audio and its transcript are not stored, logged, or retained by us after processing.
• On-device history: Your most recent transcripts are kept on your phone so you can re-insert them. They are stored in the app's private storage, are excluded from Android's cloud backup, and are removed when you sign out or uninstall the app.

Accessibility Service

Blabby uses Android's Accessibility Service, which you enable yourself in Android Settings, to make dictation work inside other apps. This is what it is used for and nothing else:

• Finding your text field: Blabby inspects the on-screen UI structure to detect which text field currently has focus, so it knows where the toolbar should appear and where your dictated text should go.
• Inserting your text: Blabby writes your transcribed text into that field. If insertion is not possible in a particular app, the text is copied to your clipboard so you can paste it yourself.
• What we never do: Blabby does not read, store, log, or upload the existing contents of your text fields or of the apps you use. Field inspection happens locally on your device and is used only to locate the field and insert your dictation. We do not collect passwords, messages, or any other screen content, and none of this information is sent to our servers or to any third party.
• Turning it off: You can disable the accessibility service at any time in Android Settings, under Accessibility, Installed apps, BlabbyAI.

Data Storage and Protection

• Zero Data Retention (ZDR) for Transcription: Transcription data is processed in real time using Zero Data Retention (ZDR)-enabled AI providers. Transcription content is not stored, logged, or retained after processing and exists only in transient memory for the duration of the request. Once processing is complete, the transcription data is immediately discarded.
• OpenAI GPT Models: For certain modes that involve additional AI capabilities (e.g., correct grammar, translation), BlabbyAI utilizes GPT models. Currently, OpenAI retains data for up to 30 days for service quality and security purposes. We are actively working on securing a BAA (Business Associate Agreement) for HIPAA compliance for these models.
• Meta Llama Model (ZDR): For users requiring strict Zero Data Retention for all AI processing (including modes), we offer the Meta Llama model. While it may not be as highly advanced as GPT models, it is fully ZDR, ensuring your data is never stored.
• Encryption: All traffic between the app and our servers uses HTTPS. Your sign-in tokens are stored encrypted on your device using the Android Keystore.
If you are dictating sensitive or confidential information, we recommend using the transcription without any modes applied to it, or selecting the Meta Llama model, as these options follow our ZDR (Zero Data Retention) policy and ensure your data is not shared with external servers for storage.

Privacy Architecture

We use a "Privacy Proxy" architecture to ensure your identity remains completely hidden from third-party AI providers.

• Identity Protection: All AI processing requests are routed through our BlabbyAI servers. Third-party providers (like OpenAI) only see requests coming from our infrastructure, effectively masking your IP address, location, and device information.
• Tracking Prevention: By eliminating direct connections between your device and external AI services, we prevent third parties from using tracking technologies like cookies or browser fingerprinting to monitor your activity.

Android Permissions

• Microphone (RECORD_AUDIO): To capture your voice while you are dictating. Recording only happens while a dictation is active.
• Accessibility Service: To detect the focused text field, show the dictation toolbar over other apps, and insert your dictated text. See the Accessibility Service section above.
• Foreground Service (microphone): To keep recording reliably while the toolbar is in use, with the Android system indicator visible.
• Internet: To transcribe your dictation and sync your account settings.
• Vibrate: For haptic feedback on the dictation controls.

Deleting Your Account and Data

You can delete your BlabbyAI account and all associated data at any time.

• In the app: Open Blabby, go to the Account section, and choose Delete account.
• On the web: Visit blabby.ai/delete-account and follow the instructions.
• What is deleted: Your account record, your Google account identifier and email, your modes, snippets, custom spellings, language preferences, usage records, and all active sessions. Your dictation audio and transcripts are never retained on our servers in the first place. Data stored on your phone is removed when you delete your account or uninstall the app.
• Timing and retention: Deletion is immediate and cannot be undone. We may retain a minimal record of the deletion, and billing or transaction records where we are legally required to keep them for tax and accounting purposes.
• Active subscriptions: If you have a paid subscription, cancel it before deleting your account, or contact us so we can cancel it for you.