Privacy
Updated October 18, 2026 · Team Nebula · Blurt for Mac
Blurt can transcribe and process speech on your Mac. Choosing a cloud provider sends the content needed for that feature to the provider. Account features, sync and diagnostics have separate behaviors described below.
For local dictation: use the built-in on-device engine with a blank endpoint, keep Style off or use its on-device model, and stay signed out. Model downloads, update checks and the install count described below can still use the network.
Speech, writing and voice
- On-device transcription processes audio on your Mac. A custom remote transcription endpoint receives audio even if the provider is labelled Local.
- Cloud transcription sends audio directly to the provider you select, using your provider key. Dictionary spellings can also be sent as recognition hints; this has a separate setting.
- Style and writing assistance use the content and instructions needed for the requested action. With an on-device model, processing stays on your Mac. With a cloud model, that text goes to the configured provider.
- Live Blurt and agent voice can speak text with an on-device voice. Selecting a cloud voice sends the text to that voice provider.
- Provider keys are encrypted at rest with macOS Keychain-backed storage. A saved key authenticates requests to its provider; it is not included in prompts or transcript payload fields.
Notes, meetings and local storage
Blurt stores dictation history, notes, meeting documents and agent conversations locally. Notes you write are kept until you delete them. Privacy & storage contains retention controls for history and agent sessions.
Meeting capture uses your microphone and, when authorized, system audio. Audio files can be kept temporarily for processing and recovery. Keep meeting audio is off by default; successful processing removes unneeded recordings when this is off. Failed processing and pending sync can delay cleanup. If you enable retention, recordings are subject to the configured age limit and a 500 MB cap for eligible files.
Automatic meeting recording is off by default. Optional calendar access helps show upcoming meetings. Optional model-based meeting artwork selection sends limited meeting metadata to the configured model only after consent; it does not send the transcript for decoration.
Accounts and cloud features
An account is optional. Mac sign-in uses Google in your browser. The identity service also supports Apple credentials for compatible clients. Google and Apple sign-ins are separate accounts unless an explicit linking flow is provided.
The identity service derives an account identifier from the provider subject. It supports learning profiles and the leaderboard. It does not store transcript history or notes. Content sync requires a separately configured compatible Blurt content service; signing in does not establish that every sync feature is available.
- Learning profiles: while signed in to a supporting service, the Mac can sync dictionary correction pairs and snippets automatically. New recognition-only hints are excluded from profile sync. This is separate from transcript delivery.
- Ordinary notes: sync follows sign-in when the configured content service supports it. There is no separate ordinary-note sync switch.
- Meeting notes: syncing their text requires the separate meeting-note sync opt-in.
- Transcript delivery: starts off. When enabled while signed in, eligible non-Local transcript text is sent to the configured content service. Local-provider entries are excluded. Delivery does not provide a remote history browser or send audio.
- Welcome email: when enabled by the service, the email claim from your first provider sign-in is used to send a transactional welcome message through Resend. The identity service stores an account-keyed delivery ledger, rather than the email address.
Leaderboard and install count
The leaderboard is on by default for signed-in users. It sends your nickname, total word count, speaking speed and vocabulary ratio to the identity service. Other signed-in users can see your nickname, score, word count, speed and rank. Turning it off removes your entry.
For the leaderboard's install count, Blurt can send a randomly generated install identifier at most once a day, including while signed out. The service records its first and last activity dates and counts installs seen within 90 days. This identifier is separate from your account and is not derived from your hardware. This report is separate from the anonymous usage data switch.
Anonymous usage data
Blurt shares anonymous usage data by default. It helps us see which features people use and what breaks. You can turn it off any time in Settings › Privacy & storage › Share anonymous usage data. Turning it off stops sending at once and deletes anything not yet sent.
What is sent. Only numbers, on/off values, ranges and items from fixed lists:
- When Blurt opens, closes, stays running (once a minute) or crashes, as a short reason code.
- Each dictation: how long it took, a word-count range (such as 10–24), hold-to-talk or continuous, which provider, model, Style and language setting, and whether it worked.
- Which features you use (notes, meetings, Style, Dictionary, snippets, history, agent voice), which setup steps you reach, update checks, and the names of settings you change.
- Whether Microphone, Accessibility and Input Monitoring are granted.
- Error categories (such as “dictation_recording”), never the error message.
- Blurt's own CPU and memory use during a dictation.
- About your Mac: app version, macOS major version (such as 15), chip family (such as Apple M3), a memory range (such as 16 GB) and your system language (such as English).
What is never sent. Audio, transcripts, notes, meeting content, clipboard contents, Dictionary words, keys, file names or paths, app or window names, your Mac's name, your username, your email, or your account.
How it stays anonymous. Events carry a random telemetry ID made on your Mac. It is not your account ID and is never sent with account data. Signing in does not change it. The service checks every event against a fixed list and refuses anything else. It does not store your IP address. Our hosting provider (Google Cloud Run) keeps its own request logs for up to 30 days, and those include IP addresses; we exclude this route from them.
How long it is kept. 13 months, then it is deleted.
Configured Sentry crash reporting is separate and stricter: it can include error text, so it only runs if you turn usage data on yourself in Settings. Its payloads are filtered to exclude audio, transcript and note contents, clipboard contents, credentials, window titles and private file paths.
Waitlist and invites
While the beta is invite-only, you can join the waitlist from this website or from the app. We keep the email address you enter, where you joined from (website, Mac or iPhone) and when, so we can send you an invite when your spot comes up. We use it only for that invite, never for marketing, and never share it except with Resend, the service that delivers the email.
The service stores your entry under a keyed code made from the address, not under the address itself, and it does not store your IP address. Your network address is held in memory for up to an hour, only to limit repeated sign-ups. To be removed from the waitlist, email support@teamnebula.ai from that address.
An invite link (tmn-blurt.web.app/i/…) opens a page that reads the invite from the link in your browser. The page does not send the link anywhere; Open in Blurt hands it to the app.
Ratings
After you have used Blurt for a while, it may ask you to rate it from 1 to 5 stars, with an optional comment of up to 1,000 characters. You can choose Not now. A rating sends the stars, your comment, which app (Mac or iPhone) and the app version. It is not linked to your account, even when you are signed in, and the service does not store your IP address. Comments are read by the Blurt team to improve the product and are kept for 13 months, then deleted. Do not put personal or confidential information in a comment.
If you give 4 or 5 stars, the app may also invite you to leave a public review. On iPhone that uses Apple's own review prompt, which Apple limits to a few times a year.
Your controls and deletion
You can choose local providers, sign out, turn off transcript delivery, meeting-note sync, anonymous usage data and leaderboard participation, and delete local content from the app. Signing out does not delete copies already held by a service.
For an account-data request, email support@teamnebula.ai. The current Mac Account screen offers sign-out; do not rely on it as an account-deletion action. Removal depends on the service holding the data. Deleting a synced note propagates when sync succeeds; a content-free deletion marker may remain to keep other devices consistent. The random install-count record is not linked to an account-deletion request.
Other services and platforms
Model downloads and update checks contact their distribution services. Licence activation sends your licence key to Blurt's validation service; Mac checkout opens Whop in your browser. Cloud speech, writing, voice, authentication, email and diagnostics providers handle the data they receive under their own policies. Blurt does not sell your data or use it for advertising.
This page describes the current Mac implementation. Blurt for iPhone has a different storage and permission model; consult the privacy information supplied with that release or contact support for details.
Questions
Contact support@teamnebula.ai for privacy questions or requests. Material changes to these practices will be reflected here and in release information.