Skip to main content

Amlin's privacy model

The short version of what Amlin does and doesn't do with your audio, notes, and screen.

J
Written by Junan Pang

Amlin is local-first: your notes live on your own Mac, in a database only you can read.

The commitments

  • No bot ever joins your calls. Capture is OS-level audio only. Nothing appears in the participant list.

  • Amlin never auto-records. Capture arms only when you open a note or accept an offer.

  • Audio is never written to disk. Meeting audio streams to transcription and is discarded in flight. Only text persists.

  • No video, ever. Amlin never records or reads your screen. The screen-recording permission exists only because macOS bundles system-audio capture under it.

  • Dictation is fully on-device. Speech recognition and cleanup run locally. No audio and no text leaves your Mac for dictation, and dictation history never syncs.

  • Any calendar you connect is read-only. Amlin can list events; it cannot create, edit, or delete them.

  • No ads and no data selling, ever.

  • Usage statistics can never contain your content. Amlin counts things like feature use and durations against a fixed list of event types with no free-text field, so notes, transcripts, and dictated words cannot end up in analytics. It's disclosed during setup, and you can turn it off anytime in Settings → General → Share anonymous usage statistics.

  • Transcripts never leave your Mac, even with sync on.

The honest part: what does leave your Mac

When you're signed in and using meeting features, a few things go to Amlin's servers:

  1. Meeting audio → transcription. Streamed live to the transcription provider, transcribed, and discarded. Not stored.

  2. Your notes + transcript → enhancement. Sent to the language model that writes your enhanced note, and returned. Same for Ask, briefings, and drafts.

  3. Notes, folders, action items, and dictionary → sync, if you're signed in, so your devices agree.

  4. Anonymous usage statistics → product decisions, unless you've turned them off. Event names, counts, and durations tied to a pseudonymous id. Never your content.

Problem reports are different: they can include diagnostic detail, and each one is sent only when you explicitly choose to send it.

Everything else, including all of dictation, stays on your machine.

For the full legal detail, see the Privacy Policy.

Did this answer your question?