Bedrock Flow Privacy Policy
Last updated: [date]
The short version
- Your voice and your dictations never leave your computer. Speech is turned into text on your PC, and AI cleanup runs on your PC too. We never receive your recordings or your text.
- Your account holds only what is needed to run it: your email, your name, your profile picture if you add one, a scrambled (hashed) version of your password, and the settings you sync between devices.
- We do not sell your data, show ads, or use tracking or analytics in the app.
- You can download or delete your account data at any time, from the app.
Who we are
Bedrock Flow is made by Made by Bedrock ([company legal name], [registered address]). We are responsible for the personal data described here. Contact us at [email protected].
What stays on your computer
These are stored only on your PC. We cannot see them and they are not part of your account:
- Audio from your microphone. It is only recorded while you dictate, turned into text, and then discarded.
- The text of your dictations and your dictation history.
- Your usage stats (word counts, speaking speed, streaks, which apps you dictate into).
- Settings that belong to this PC: your shortcut keys, microphone, whether AI cleanup is turned on, and start with Windows.
When you use per-app styles, the app reads the name of the app you are dictating into and, for web browsers, the title of the current tab, to choose a writing style. This happens on your PC, and the tab title is never saved or sent anywhere.
Removing the app, or using Reset history and stats in Settings, deletes this data from your PC.
What your account stores on our servers
| Data | Why |
|---|---|
| Email address | To sign you in, and to send account emails (confirming your address, resetting your password) |
| First name, last name | To show on your profile |
| Profile picture (optional) | To show on your profile. We shrink it to 256 by 256 pixels and remove hidden photo data such as location. |
| Password, hashed | To check your password when you sign in. We never store or see your actual password. |
| Synced settings: your vocabulary, word replacements, snippets, writing styles, per-app style choices (app names and the group you put them in), and sound and display choices | So your settings follow you to every device you sign in on. Your dictations are never part of this. |
| Sign-in sessions: when you signed in, your IP address, and your device and app version | To keep you signed in, and so you can see and sign out of your devices |
| Short-term records of sign-in attempts by IP address | To block people trying to guess passwords |
| Which version of these documents you agreed to, and when | To show what you agreed to, and to ask again when they change |
| Minutes of speech per week, per PC (a number only, never the audio or the words) | For the free plan's weekly allowance |
| Your plan, and when your free trial started and ends | To give you the right plan |
| Which achievement badges you have earned, and when | So your badges follow you to every PC |
| A scrambled (hashed) id for each PC you dictate on, made from Windows' machine id | To add up minutes across your PCs, and so each PC gets one free trial |
| Whether you want product news by email, and when you chose | To send product news only if you said yes. You can turn it off at any time in the app. |
The launch waitlist
If you join the waitlist on madebybedrock.com, we store your first name, your email address, when you signed up, which version of these documents you agreed to, and whether you confirmed your email. We use them to email you about Bedrock Flow: the launch, news and updates, and occasional offers. The waitlist is separate from accounts. Every email has a link to leave, and you can also leave with the link on the confirmation page or by emailing us. When you leave, your details are deleted.
We also check new passwords against a public list of passwords known from data breaches (the "Have I Been Pwned" service). Only the first few characters of a scrambled version of the password are sent, never the password itself.
Who helps us run the service
We use these companies to run Bedrock Flow. They only process data on our instructions:
| Company | What for | Where |
|---|---|---|
| Neon | Stores account data | United States (AWS, Ohio) |
| Railway | Runs our account server | [region] |
| Cloudflare | Delivers our website and protects it from attacks | Worldwide |
| Resend | Sends account emails | Ireland (EU) |
Some of these are outside the European Economic Area. Where that is the case, transfers are covered by [the EU Standard Contractual Clauses / the EU-US Data Privacy Framework], as provided in each company's data processing terms.
Downloads from other sites
When you install the speech model or AI cleanup, the app downloads them directly from Hugging Face and GitHub. Those sites see your IP address when you download, as with any download, under their own privacy policies. After that, speech recognition and cleanup work offline.
Our legal basis (for people in the EU and UK)
- To provide your account (sign in, emails, profile): because it is necessary for our agreement with you.
- To keep the service secure (rate limits, breach checks, session records): our legitimate interest in protecting you and the service.
- To run your plan (weekly minutes, trial dates): because it is necessary for our agreement with you. Keeping hashed trial records after an account is deleted: our legitimate interest in offering one free trial per person.
- To email you about Bedrock Flow (waitlist): with your consent, which you give by signing up and confirming your email. You can take it back at any time by leaving the waitlist.
- To send product news by email: only with your consent, which you give by ticking the box when you create your account and can take back at any time in the app.
How long we keep data
- Account data: for as long as you have an account.
- Sign-in sessions: until you sign out, or 30 days after you last used the app.
- Sign-in attempt records: a few minutes.
- Waitlist sign-ups: until you leave the waitlist. Sign-ups never confirmed are deleted after 30 days.
- Weekly speech minutes: for as long as you have an account.
- Free trial records: a scrambled (hashed) version of your email address and of each PC's id that has had a trial are kept after you delete your account, only so the same person or PC cannot start a new free trial. They cannot be turned back into your email address.
- When you delete your account, your account data is deleted straight away. Copies in our database provider's backups are removed within [X days, check Neon's history retention].
Your rights
You can:
- See and download your data: in the app, Profile, Download my data.
- Correct it: change your name, email and picture in the app.
- Delete it: in the app, Profile, Delete account. This cannot be undone.
- Object to or restrict processing, or ask any question: email [email protected].
If you are in the EU or UK and are unhappy with how we handle your data, you can complain to your local data protection authority [for Malta: the Information and Data Protection Commissioner].
Children
Bedrock Flow is not meant for children. You must be at least [16] to create an account.
Changes
If we change this policy in a way that matters, we will tell you in the app or by email before the change takes effect.
Version 2026-09-30-draft