Is Wispr Flow safe? What it sends to the cloud, and how to limit it
The short answer
Wispr Flow is a cloud service, so using it means sending your voice to its servers: its privacy page says transcription always happens in the cloud. With Context Awareness on, it also sends text from the app you are in. It says data is encrypted, that password fields are never read, and that it holds SOC 2 Type II, ISO 27001 and HIPAA attestations. Two settings limit what is shared: Context awareness, and model training. Whether that is safe enough depends on what you dictate. Flit, a local dictation app for Mac, transcribes on the Mac, so nothing you say is sent anywhere.
How to limit what Wispr Flow shares
- Open Wispr Flow, then Settings → Data and Privacy.
- Turn off Context awareness. This stops the app sending text from the app and text field you are dictating into.
- Turn off the model-training option ("Improve the model for everyone"). Wispr Flow says this is a separate switch: turning it off does not turn off Context awareness.
- For anything you would not put in an email to a stranger, such as client names, health details or credentials, do not dictate it into a cloud tool at all.
Neither setting changes where transcription happens. Your audio still goes to Wispr Flow’s servers for every dictation.
The useful question is not "is it safe" but "what leaves my Mac, and who can read it". The table answers that from Wispr Flow’s own privacy and help pages, and from nowhere else.
What Wispr Flow says about your data
| Question | What Wispr Flow says | Where |
|---|---|---|
| Where is my voice transcribed? | "Transcription always happens in the cloud" | Privacy page |
| What else is sent? | With Context Awareness on: app information, the text before and after your cursor, text on screen, variable and file names in coding apps, conversation history | Help: Context Awareness |
| What is never read? | Password fields. Context reading is skipped in banking and financial apps | Help: Context Awareness |
| Is my data used for training? | Your choice, under Settings → Data and Privacy | Privacy page |
| Who else processes it? | Third-party AI providers, under zero-data-retention agreements, with exceptions for some features. They are not named | Data controls |
| How long is it kept? | Data shared with third-party models is "generally deleted within 30 days" | Privacy policy, 19 August 2026 |
| Which certificates? | SOC 2 Type II, ISO 27001, HIPAA | Privacy page |
What Context Awareness reads
Context Awareness is how the app spells a name the way the thread spells it. To do that it reads the surroundings of your cursor. Wispr Flow’s help page lists what can go with a dictation: information about the app, the contents of the text box before, inside and after your selection, text on the screen, variable and file names in coding apps, and conversation history.
The same page says password fields are never read and that reading is skipped in banking and financial apps. The privacy policy puts it this way: with the feature on, the app may collect limited content from the app you are using, "such as the text on the screen".
The switch is under Settings → Data and Privacy → Context awareness.
Certificates and what they cover
SOC 2 and ISO 27001 are audits of how a company handles the data it holds. They are worth having, and they answer a different question from the one most people are asking. A certificate says the data is handled carefully once it arrives. It does not change the fact that it arrives.
If your work has a confidentiality duty, the question to take to whoever decides is plain: is it acceptable for this audio, and the text on this screen, to be processed by a third party? The guide for lawyers walks through that question.
How to check any dictation app yourself
You do not have to take a privacy page on trust, ours included. Turn Wi-Fi off and dictate: an app that transcribes on your Mac still works, and one that needs a server does not. For more detail, a network monitor such as Little Snitch shows every connection an app makes while you speak.
The best private dictation apps has the full method, in three levels.
Flit sends nothing you say
Flit records, transcribes and formats on your Mac. There is no server that receives your audio or your text, so there is no policy to read about what a server does with them.
- Your voice and your text never leave the Mac. You can verify it with Wi-Fi off.
- No account, no telemetry and no analytics.
- Reading the screen for context is off until you turn it on, and what it reads stays in memory on the Mac for one dictation.
- History is a local file you can cap, clear, or turn off.
- Flit is free for 7 days with every feature on, then $19 once, with no account and no subscription.
Good to know
- Flit does connect to the network for three things: a model download you start, license activation, and the update check if you allow it. None carries anything you dictate. The privacy page lists each one.
- Flit runs on a Mac with Apple silicon and macOS 14 or later. There is no Windows, iPhone or Android app today; Windows is in the works.
- The voice model is a download of about 0.5 to 2.3 GB that you choose once. After that Flit needs no connection.
- Flit holds no SOC 2, ISO 27001 or HIPAA certificate. Nothing you say reaches a server, so there is no server to certify. If your organization requires a certificate, Flit does not have one.
Questions people ask
Does Wispr Flow record everything I say?
It records while you are dictating, and that audio is sent to its servers to be transcribed. Its privacy page says transcription always happens in the cloud.
Does Wispr Flow read my screen?
With Context Awareness on, it reads text from the app you are dictating into, including the text around your cursor and text on screen. It says password fields are never read. You can turn it off under Settings → Data and Privacy.
Is Wispr Flow HIPAA compliant?
Wispr Flow says it supports HIPAA, with HIPAA enforcement on its Growth plan. Whether that meets your obligations is a question for your compliance lead, and it needs a signed agreement, not a web page.
Does turning off model training make Wispr Flow private?
It stops your audio and edits being used to train models. It does not stop the audio being sent for transcription, and it does not turn off Context Awareness, which is a separate switch.
Is there a dictation app that keeps everything on my Mac?
Yes. Flit is a local dictation app for Mac: the voice and formatting models run on the Mac and nothing you say is sent anywhere. Flit is free for 7 days with every feature on, then $19 once, with no account and no subscription.