Waffler for iPhone: privacy policy

While a session is on, Waffler keeps the microphone ready so the keyboard can start instantly, and iOS shows its orange microphone dot. It only records while you are dictating: from when you tap the waffle until you tap it again. The recording is saved temporarily on your device and sent to the provider you chose. It is deleted as soon as the transcription is done. If sending fails, it is kept so you can retry once, and deleted after that retry, when you start a new dictation, or the next time Waffler starts.

The provider returns the text of your recording. If Polish text is on, that text is also sent to the same provider’s language model to remove filler words and fix punctuation. The finished text is inserted where you are typing and saved in Waffler’s history on your device. You can delete single dictations, or clear all history in Settings.

Your API key is stored in your device’s Keychain and used only to call your chosen provider. When you save a key, Waffler makes one request to that provider to check the key works. Keychain items can survive deleting the app: paste a new key in Settings to replace it, and revoke old keys in your provider’s console.

The Waffler keyboard does not record audio, does not log or send what you type, and makes no network requests. It asks for Allow Full Access only so it can talk to the Waffler app on your device (which does the recording and transcription), follow your appearance and haptics settings, and open the app when the session needs starting.

Only the provider you select: Waffler calls api.groq.com or api.openai.com and nothing else. Your recordings and transcripts are sent under your own account with that provider, so their terms apply:

• Groq

  Groq states that it does not use API input data to train its models. Check their current terms for how long API data is kept and where it is processed.

  How Groq handles API data

• OpenAI

  OpenAI states that data sent through its API is not used for model training by default, and that it may be kept for up to 30 days for abuse monitoring. Retention varies by plan and API tier, so check their current terms.

  How OpenAI handles API data

• Advertising or tracking
• Analytics or crash-reporting services
• A Waffler account
• Waffler servers that see your audio, text or key
• Selling or sharing your data

Waffler is not directed at children under 13.

If this policy changes, the new version will be posted here with a new date at the top of the page.

Questions about this policy? Open an issue on GitHub. The desktop app has its own privacy policy.