Back to Timbre

Privacy Policy

Last updated: May 7, 2026

Overview

Timbre is a macOS application for voice-to-text and text-to-speech. This privacy policy explains what data we collect, why we collect it, how we use it, and your rights regarding that data.

Timbre is operated by Weiss Solutions LLC ("we", "us", "our").

Data We Collect

Email Address

We collect your email address when you create an account. It is used solely for authentication (sending sign-in codes) and to identify your account.

Audio Data

When you use speech-to-text, your microphone audio is sent through our proxy server to a third-party transcription provider for processing. We do not store your audio on our servers. Audio recordings and transcription history are stored locally on your Mac in the app's Application Support directory and are never uploaded to us.

Text Data

When you use text-to-speech, the text you submit is sent through our proxy server to a third-party speech synthesis provider. We do not store the text content on our servers beyond the duration of the request.

Usage Data

We track aggregate usage metrics per account per monthly period, specifically: speech-to-text duration and text-to-speech character counts. This is used to enforce usage limits. We do not track the content of your requests.

Local Data

Timbre stores the following data locally on your Mac:

  • Your keyboard shortcut preferences
  • Your selected voice and settings
  • Transcription and speech history (text and audio files)
  • Your session token (stored in the macOS Keychain)

This data never leaves your device unless you initiate a speech-to-text or text-to-speech request.

Third-Party Services

Timbre relies on the following third-party services to function:

  • ElevenLabs — Provides speech-to-text transcription. Audio data is sent to ElevenLabs' API through our proxy server. Their privacy policy is available at elevenlabs.io/privacy-policy.
  • xAI — Provides text-to-speech synthesis. Text data is sent to xAI's API through our proxy server. Their privacy policy is available at x.ai/legal/privacy-policy.
  • Resend — Sends sign-in code emails on our behalf. Your email address is shared with Resend for this purpose only.
  • Cloudflare — Our backend runs on Cloudflare Workers with D1 database and KV storage. Account data (email, user ID, usage metrics) is stored in Cloudflare's infrastructure.
  • Sparkle — Used for automatic update checks. Sparkle may send your macOS version and app version to check for updates. No personal data is transmitted.

How We Use Your Data

  • To authenticate your account via email-based one-time codes
  • To provide speech-to-text and text-to-speech functionality
  • To send you transactional emails (sign-in codes only)
  • To enforce usage limits

We do not use your data for advertising, analytics, profiling, or any purpose beyond providing the Timbre service.

Data Retention

  • Account data (email, user ID) is retained as long as your account exists.
  • Usage data is retained on a per-month basis for billing enforcement.
  • OTP codes are automatically deleted after verification or expiration (10 minutes).
  • Local history (audio files, transcriptions) is stored on your device and can be deleted at any time from within the app.

Data Security

We take reasonable measures to protect your data:

  • All communication between the app and our servers uses HTTPS/TLS encryption
  • Session tokens are signed JWTs with 30-day expiration
  • OTP codes are hashed (SHA-256) before storage and rate-limited
  • Your session token is stored in the macOS Keychain

Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access — Request a copy of the personal data we hold about you
  • Deletion — Request that we delete your account and associated data
  • Correction — Request correction of inaccurate personal data
  • Portability — Request your data in a portable format
  • Opt-out — We do not sell your personal data. There is nothing to opt out of.

To exercise any of these rights, contact us at the email below.

Children's Privacy

Timbre is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to This Policy

We may update this privacy policy from time to time by updating this page. Continued use of Timbre after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this privacy policy or your data, contact us at:

support@weisssolutions.org