Privacy & security
Souffleuse only works because it reads what you write. So we made sure it has no way to tell anyone: no account, no cloud, no "we anonymize it." There simply is no way out.
Last updated: 14 June 2026 · beta.
Everything happens on your Mac
Generating the whispered text, translation, tone rewriting, learning your style — it all runs locally, on your Mac's Apple chip. None of your text is sent to a server to be processed, not ours, not a third party's. Once installed, the app works fully offline.
The rule, in one line: your text never leaves your Mac. Souffleuse's only network connection is to download the language model, once, at install — never to send what you write.
What connects to the internet — and when
Souffleuse uses the network in only two cases, both explicit:
- Downloading the model, once, on first run (from Hugging Face). That is the only time bytes come in.
- Checking for app updates, which you can switch off. It fetches a simple version file; it sends no data about you.
Beyond that: no telemetry, no "ping," no analytics, no cookies, no tracking pixels. No account to create, no email required to use the app.
Sensitive fields — it doesn't see them
macOS marks secure fields — passwords, codes, card numbers. Souffleuse turns away from them: no reading, no suggestion, no trace. And you can tell it to stay silent entirely in specific apps, one by one, from its settings.
What it remembers about you is encrypted
To whisper in your voice, Souffleuse keeps a record of phrasings you accept. That memory lives in a single folder on your Mac, in an encrypted (AES-256) store whose key is held in the macOS Keychain — so it's protected by your login. No one else, not even us, can read it: there is no copy anywhere else, by design.
The clipboard and the screen
If a feature needs the clipboard to understand context better, you stay in control: a blocklist lets you exclude any apps you choose. Screen capture (to locate the cursor in a few rare apps) is off by default and only turns on if you explicitly allow it. Here too, everything is processed on the spot.
The macOS permissions it asks for
- Accessibility — to read the field you're writing in and slip the whisper in. This is the core of how it works.
- Apple Events — to talk cleanly to the active app.
- Screen Recording — optional, off by default, only to locate the cursor when accessibility isn't enough.
You grant, and revoke, each of these at any time in System Settings > Privacy & Security.
The download counter, in full transparency
The website (not the app) counts how many times the installer is downloaded, to show an honest total. That counter records only aggregate totals: no IP address, no cookie, no personal data is kept. That's where it stops, and it only concerns the download page.
Uninstalling leaves nothing behind
Like any Mac app: drag it from Applications to the Trash. What it had learned of your style lives in that one encrypted folder; delete it too and nothing remains. No copy survives anywhere else, because there never was an "anywhere else."
A question?
Write to the prompter: contact@souffleuse.app. We reply, and we keep it plain.