Privacy Policy

Effective July 2026

VybeScript is built by Box Creative Studio, a product of Box Creative International, Inc. (“we,” “us,” “our”), and is designed to be private by default. This policy covers two separate things: (1) the VybeScript app itself, and (2) this website, including purchases. We keep these separate on purpose — the app processes none of your data, but buying a license necessarily involves a payment provider that does.

The short version

• The app does all of its work — recording, transcription, and writing cleanup — entirely on your Mac. We do not collect your audio or your transcripts, and we never will — that’s a permanent design commitment, not a setting that could change.
• The website uses Google Analytics to understand traffic (pages visited, general location, device type) — you’ll see a cookie notice on your first visit and can decline it. We do not run ad trackers or retargeting pixels.
• Buying a license goes through Lemon Squeezy, our payment processor, who collects your email and payment details to process the sale and email you a license key. We receive your email and purchase record from them, but never your card details.
• We don’t yet collect app crash reports, and we’re only beginning to think about a future, opt-in way to connect your own third-party AI API key for faster processing. Both are covered below.

Part 1 — The VybeScript app

• Microphone audio. When you record, audio is captured locally and held only long enough to transcribe it. The audio file is deleted immediately after transcription. It is never uploaded anywhere.
• Transcription. Speech is converted to text on-device using a bundled local Whisper model. No audio or text is sent to any server.
• Writing styles (Clean, Polish, Formal). Optional cleanup is performed on-device by Apple’s Foundation Models, which run locally on supported Macs. Your text is not sent to Apple or anyone else.
• Transcript history. If you keep history enabled, transcripts are stored only on your Mac, in the app’s Application Support folder. You can disable history or clear it at any time in Settings.
• Vocabulary and corrections. Custom words and correction rules you add are stored only on your Mac.
• Clipboard. When “Learn from my corrections” is enabled, VybeScript briefly reads the macOS clipboard after you paste, only to notice if you corrected a word. This happens entirely on-device and reads nothing from other apps. You can turn it off in Settings.
• License check. To verify your license key, the app contacts Lemon Squeezy’s license-verification API and sends the key itself (not your audio, text, or any personal information beyond what you entered at checkout). See Part 3.

Permissions the app requests

• Microphone — required to record your dictation.
• Accessibility (optional) — used only to paste transcribed text into the app you’re typing in. If declined, text is placed on your clipboard for you to paste manually.

We use these permissions solely for the features described above. The app currently includes no analytics SDK and no advertising SDK.

Your transcripts: a permanent commitment

We do not collect, receive, or have access to your audio or your dictated text — today, or ever. This isn’t a feature that could be toggled off in a future update; the app has no server to send that data to, and we’ve designed it that way on purpose. Nothing below changes this.

Crash reporting (not yet enabled)

The app does not currently include a crash reporter. We may add an opt-in crash reporting feature in a future update, to help us fix bugs. If we do:

• It will be off by default, or clearly disclosed and consented to during onboarding — not silently enabled in an update.
• It will be limited to anonymized technical data (macOS version, hardware type, the crashing code path) — never your audio, transcripts, or vocabulary.
• We’ll update this policy, with a new effective date, before turning it on.

Optional third-party AI processing (future, not yet available)

We’re exploring a future feature that would let you connect your own API key from a third-party AI provider (for example, OpenAI or Anthropic) as an alternative to Apple’s on-device Foundation Models, for faster text cleanup. If we build this:

• It will be off by default and require you to explicitly opt in and supply your own API key — we won’t send anything to a third-party AI provider without your affirmative choice to enable it.
• Only your already-transcribed text would be sent, and only for the specific request you choose to run through that provider — never your raw audio.
• That text would go directly from your Mac to the provider you configured, not through VybeScript’s or Box Creative Studio’s servers, and would be governed by that provider’s own privacy policy and terms, not this one.
• We’ll update this policy with specifics — including which providers are supported — before this feature ships.

Part 2 — This website

When you visit VybeScript’s website:

• Google Analytics. We use Google Analytics to understand site traffic — which pages are visited, how visitors arrived, approximate location (city/country level, derived from IP), device and browser type, and time on page. Google Analytics uses cookies and may process this data under its own privacy practices; see Google’s Privacy Policy. We use it in aggregate to understand traffic — we do not combine it with your name, email, or purchase records.
• Cookie notice. On your first visit, you’ll see a notice asking whether to allow analytics cookies. Google Analytics’ code loads either way (using Google’s “Consent Mode”), but starts in a restricted state with no cookies set and no way to identify you individually. If you accept, we switch it to full measurement (with cookies) for traffic analysis. If you decline — or don’t respond — it stays restricted: Google may still receive a minimal, cookieless signal used only for aggregate traffic modeling, never tied to you personally, and no analytics cookie is ever set on your device.
• Opting out. You can decline the cookie notice at any time, or use Google’s Analytics opt-out browser add-on for a browser-wide opt-out.
• Server logs. Separately, our hosting provider may keep standard server access logs (IP address, browser type, page requested, timestamp) for security and abuse prevention, as essentially all web hosts do. These are not used to build a profile of you and are not sold.
• No advertising trackers. We do not run ad networks, retargeting pixels, or cross-site ad trackers on the site.

Part 3 — Purchases (via Lemon Squeezy)

VybeScript is sold through Lemon Squeezy, Inc., who acts as the Merchant of Record for all purchases. This means:

• When you buy a Lifetime license or Yearly Pass, you’re taken to a Lemon Squeezy checkout page (on their domain), which collects your email address and payment details to process the transaction. We never see or store your card/payment details — Lemon Squeezy handles that entirely.
• Lemon Squeezy sends us your email address and purchase record (plan, date, license key) so we can provide support and honor your license.
• Lemon Squeezy emails your license key to you directly after purchase.
• Lemon Squeezy’s own privacy policy governs the data they collect during checkout: see lemonsqueezy.com/privacy.

We use your email only to: deliver support you request, send transactional messages (e.g. a purchase receipt or license issue), and — if we ever add one — a low-volume product update list you can opt out of. We do not sell your email or purchase history to anyone.

Data we collect directly

Your email and purchase record (received from Lemon Squeezy when you buy, see Part 3); aggregate website traffic data via Google Analytics (see Part 2); and anything you voluntarily send us, like a support email. We do not collect app usage data, audio, or transcripts — and we never will.

Data sharing and sale

We do not sell your data. We share the minimum necessary with Lemon Squeezy to process a purchase, with Google to provide website analytics (see Part 2), and with our license-verification API interaction described in Part 1. We do not share data with anyone else — and if we ever ship the optional third-party AI feature described in Part 1, that would only involve a provider you explicitly chose and connected yourself.

Your choices

• You can decline analytics cookies via the cookie notice on the website, or use Google’s opt-out add-on at any time.
• You can ask us to delete your purchase/support records by emailing hello@boxcreativestudio.com.
• You can disable transcript history, vocabulary storage, and clipboard learning at any time in the app’s Settings — all local, no account needed.
• You can deactivate a license on a given Mac from the app’s License window at any time.

Children

VybeScript is not directed to children under 13 and we do not knowingly collect information from them.

Changes to this policy

If we change this policy, we’ll update the effective date above and publish the new version on this page and in the app.

Contact

Questions about privacy? Email hello@boxcreativestudio.com.

© 2026 Box Creative International, Inc. (d/b/a Box Creative Studio). All rights reserved.