Skip to main content
You can get a copy of your data, correct it, delete it, or tell us to stop processing it. Some of that you can do yourself in the app; the rest is one email away. Email support@openwhispr.com for any request you can’t complete in the app. A person handles it — there’s no form to find.

​
Your rights and how to use each one

Deleting individual notes, clearing your local history, and turning off cloud features are all things you can do yourself — see what OpenWhispr stores, and for how long.

​
Getting a full export

You can export your notes yourself as Markdown, mirroring your folder structure. For everything we hold — notes, transcription history and account data together — email support@openwhispr.com and ask for a full export. We’ll put it together and send it to the address on the account.
A formal request doesn’t need special wording. Say what you want in plain language and we’ll treat it as the request it is. Tell us the email address on the account so we can find it.

​
Where your data is processed

OpenWhispr is operated from the United States, and we and our sub-processors process personal data primarily there. For transfers out of the EEA, the UK and Switzerland, our DPA applies the first mechanism that fits: an adequacy decision where the destination has one, and otherwise the Standard Contractual Clauses — Module Two, controller to processor — with the UK Addendum for UK data and the Swiss adaptations for Swiss data. If you’d rather your content never left your machine at all, local and self-hosted modes are the answer: where your voice and text go explains the difference.

​
Training

Your content is never used to train AI models, and our providers are contractually held to the same. That’s its own article because it’s the question we’re asked most.

​
If you’re a business customer

For your own GDPR compliance you’ll usually need three things, and all three are published: We hold a GDPR attestation (2026, through our compliance platform). Answering a security review collects everything a vendor assessment tends to ask for.

​
FAQ

We aim to deal with it well inside the one-month period the GDPR allows, and usually much sooner. If a request is complex we’ll tell you.
No. Deleting the account is the fastest complete route, but you can ask us to erase specific data instead. If you want to stop paying without losing anything, cancelling is a different thing again.
Both, depending on the data. For content you put through the product we act as a processor on your behalf. For your account and billing data we’re the controller. The DPA sets out the split.
Californian users have the right to know what’s collected, to request deletion, and to opt out of sale. We don’t sell personal information. The Privacy Policy covers it.