Privacy Policy

Effective July 29, 2026

Controller: CHO CHI CHO GmbH, Vulkanplatz 7, 8048 Zürich, Switzerland — support@chochicho.ch. The short version: our apps are built to keep your data on your device, and this website doesn’t track you.

1. This website

twirly.ch has no accounts, no advertising, and sets no cookies. To understand roughly how many people visit — and nothing more — we count page views ourselves, first-party, on our own Swiss server. For each view we store only the date and hour, the page path, and the referring site’s domain. No cookies, no IP address, no device or browser fingerprint, nothing that identifies you, and no third-party analytics service. This measurement honours your browser’s Do-Not-Track / Global Privacy Control signal. Separately, our hosting provider processes standard technical server logs (IP address, requested page, timestamp) to deliver the site securely; we don’t use them to identify visitors.

2. Purchases

Mac. Paid orders are processed by Paddle as merchant of record. Paddle collects the data needed for payment, invoices, and tax (e.g. email, billing country, payment details) under Paddle’s privacy policy. We never see your payment details.

Android. The purchase is handled entirely by Google Play. Google is the seller of record and collects the payment data under Google’s privacy policy. We never see your payment details, and Twirly for Android has no accounts and no license server — the app simply asks Google Play whether this Google account owns the unlock.

3. Licensing (Mac only)

This section applies to the Mac app. The Android app has no license server: the unlock is held by Google Play against your Google account, and nothing about it reaches us.

To deliver and enforce Mac licenses, our license server (hosted in Switzerland) stores: your email address, your license key, the Paddle transaction reference, and — per activated device — an anonymised device identifier (a one-way hash) plus the device name you chose. We use this solely to send your key, enforce the device limit, and handle refunds. It is kept for as long as your license exists and then deleted.

4. Twirly for Mac

Twirly processes everything on your Mac: audio, transcription, text transformations, and read-aloud run 100% locally. Your voice and your texts never leave your device, and we cannot see them. The app talks to the internet for exactly two things: license activation/validation (sends your license key and the hashed device identifier) and an optional update check (fetches a version file; no personal data). No telemetry, no crash uploads, no ads.

5. Twirly for Android

Twirly for Android collects nothing and shares nothing. Recording, speech recognition and all text processing run entirely on your phone. Your voice is never uploaded, never stored beyond the moment it is transcribed, and we have no way of seeing it. There are no accounts, no sign-in, no analytics, no advertising and no crash reporting built into the app.

The app uses the internet for exactly one thing: downloading the speech recognition model (about 640 MB) on first use, from our own server or from Hugging Face. That request contains no personal data. After the download, Twirly works with no network connection at all — including in flight mode.

The insertion service. To place the finished text at your cursor, Twirly can use an Android accessibility service. You are asked for this explicitly during setup, and it is optional — without it, the text goes to the clipboard instead. The service does exactly two things: it remembers which text field was active when you started dictating, and it writes the dictated text into that field (optionally pressing the send key). It does not read, log, collect or transmit the contents of your screen or of any app, and nothing it sees leaves the device.

The microphone is used only while a dictation is running — started by you, by shaking, by the keyboard, or by the accessibility button — and the recording is discarded as soon as it has been transcribed.

Independently of the app, Google Play may collect diagnostics such as crash information for apps installed through it; that processing is Google’s and is described in Google’s privacy policy.

6. Email

If you email us, we use your address to reply. License emails are sent from license@chochicho.ch.

7. Your rights

Under the Swiss Data Protection Act (and, where applicable, the GDPR) you can request access, correction, or deletion of your data — email support@chochicho.ch. Note that deleting your licensing data deactivates your license.

8. Changes

We will update this policy here if our practices change.