Privacy, specifically

Deiko watches your screen and listens to you. That only works on trust, so this page is specific about what is captured, where it goes, and what never moves.

Last updated 24 September 2026

$ deiko audit --what-leaves-this-mac

screenshots ........... stays here
on-screen text ........ stays here
accessibility text .... stays here
your voice ............ leaves, then deleted
what you said ......... sent to file, not kept
window titles ......... sent to file, not kept
accounts .............. none

The short version

  • Nothing is captured unless you start a session. A red bar sits at the top of the screen the whole time one is running, and does not fade or auto-hide.
  • Two things leave your Mac: your narration audio, to be transcribed, and a short filing note, so each brief lands in the right task. Deiko keeps neither.
  • Screenshots, OCR text and accessibility text have never left the device, and no setting makes them.
  • There is no account. No email, no password, no profile.

What the app captures

While a session runs, Deiko records what you point at and what you say: a cropped screenshot of the element under your cursor, that element's accessibility label and visible text, the title of its window, and your microphone audio. All of it is written to a session folder on your Mac, and the brief is assembled there.

If a credential is detected in a screenshot, that screenshot is withheld from the brief, and the brief says so.

What travels: transcription, and filing

Two steps can involve a network: turning your narration into text, and filing each brief in the right task. For the text, Deiko uses the first route available to you:

  1. Your own Groq API key. Audio goes straight to Groq under your key. Deiko's servers never see it, and your agreement with Groq governs it.
  2. Deiko's transcription service. Your Mac uploads the audio to our relay, which forwards it to Groq and returns text. The relay stores no audio and keeps no transcript.
  3. This Mac alone. Apple's on-device recogniser, no upload at all — what runs once included minutes are gone, offline and forever.

The recording is deleted the moment your brief is made. It has one use and no reader after that.

Filing. To file each brief in the right task, Deiko sends what you said, a one-line summary of it, your window titles (with anything that looks like a key stripped) and a few lines about your earlier tasks through its relay to a sorting model (Jev, by TypeSafe). Deiko keeps none of it. This goes through the relay even when you use your own Groq key. Screenshots and the text read off your screen are never part of it.

The four permissions

Each is used for that one purpose. Without all four, the hotkey does nothing.

Payment

Deiko Pro is sold through Polar as merchant of record. Your card details go to Polar and are never seen by Deiko, under Polar's buyer terms and privacy policy. Polar emails you a licence key, which lives in your Mac's Keychain. We hold the key and the fact of a purchase — not a customer account.

This website

No analytics, no ads, no cookies. Nothing on this site counts page views, tracks scrolling or clicks, or builds a profile of you. There is no signup form and no consent banner, because there is nothing to consent to.

The playground. The home page has a playground you can point at and talk to. When you use it, your microphone audio goes to Deiko's relay and on to Groq's Whisper model to be turned into text, and the sentence goes to a Groq language model that works out the edit. The relay keeps a daily count per visitor, keyed by a hashed IP address, so the free minutes can be capped. It keeps no audio and no transcript. Your browser holds a fifteen-minute ticket in its local storage, so a reload does not spend another. Nothing else is stored.

If the relay cannot be reached, or the day's minutes are used up, the playground falls back to your browser's own speech recogniser. That one belongs to your browser, not to Deiko: Chrome sends the audio to Google, and Safari may use Apple's servers.

No session recording. Screenshots and briefs are not part of this website at all. This site never receives them, whatever you allow here.

These third parties see a request when a page loads: Cloudflare, which serves the site and processes every request, including your IP; Google Fonts, which serves the typefaces and so receives your IP when your browser fetches them; and unpkg, which serves the React and three.js code the page runs on. Amazon Web Services hosts Deiko's relay, so it handles the playground's requests.

How long things are kept

Your choices

Contact

Questions, deletion requests, or anything here that does not match what you observe — [email protected]. If this policy changes in a way that affects what is captured or where it goes, the date at the top changes with it.