Dilo Privacy Policy
Last updated: 2026-10-27
Short version: Dilo runs on your Mac. Your recordings, transcripts and notes stay there. We do not have access to them, and we do not run accounts or analytics.
1. Who we are
The controller of personal data described here is Jetforge Labs OÜ, an Estonian private limited company, registry code 17116764, Tornimäe tn 5, 10145 Tallinn, Harju County, Estonia. Contact: hello@jetforgelabs.com or https://jetforgelabs.com/#contact. This policy covers the Dilo app for macOS and the website getdilo.co. It follows the EU General Data Protection Regulation (GDPR).
2. What stays on your Mac
Dilo’s default mode processes everything locally, with on-device speech recognition and on-device AI. This includes your dictated text, meeting audio, transcripts, summaries and notes. Meetings and notes are stored as Markdown files on your Mac, and recordings may be kept as audio files alongside them. You can delete them at any time, or keep only the text. Jetforge has no access to them, does not receive them, and cannot recover them for you. Dilo works offline and needs no account.
3. What we do collect, and why
| Situation | Data | Purpose | Legal basis (GDPR Art. 6) |
|---|---|---|---|
| You buy Pro on Gumroad | Name, email, payment and billing data, handled by Gumroad as Merchant of Record. We receive limited order information such as your email and licence key. | Take payment, issue receipt and licence key, handle support and refunds | Contract (6(1)(b)), legal obligations (6(1)(c)) |
| You activate a Pro licence | Your licence key and the product identifier are sent from your Mac to Gumroad’s licence API to confirm it is valid. No device information is sent. The key is stored in your Mac’s Keychain. | Check your licence | Contract (6(1)(b)) |
| Dilo checks for updates | Your IP address and standard request data reach the update server (GitHub Pages hosts the appcast at updates.jetforgelabs.com) and, when you download an update, GitHub Releases. Sparkle’s optional system profiling is not enabled. | Deliver updates and security fixes | Legitimate interests (6(1)(f)): keeping the app secure and up to date |
| Dilo downloads its on-device models | The first time a local model is needed, your Mac downloads it from Hugging Face, which receives your IP address and standard request data. Nothing you dictate or record is sent. | Install the on-device models | Legitimate interests (6(1)(f)) |
| You contact us | Your name, email and message | Reply to you | Legitimate interests (6(1)(f)) or contract |
| You visit getdilo.co | IP address and request data in the host’s server logs (GitHub Pages). We do not set cookies and do not use analytics. | Serve the site | Legitimate interests (6(1)(f)) |
Dilo does not collect usage analytics, telemetry or crash reports. We do not sell personal data and do not use it for advertising or profiling. There is no automated decision-making.
4. Optional cloud AI providers
If you choose to connect OpenAI, Anthropic, OpenRouter or a self-hosted Ollama, using your own API key, the text you select is sent directly from your Mac to that provider. Dilo asks before sending and marks what was sent. We do not proxy, see or store it. The provider acts under its own terms and privacy policy and is responsible for its processing; you are the one who decides to send. With Ollama on your own server, the data goes only where you host it. Your API key is stored in your Mac’s Keychain and is not sent to us.
5. Recording other people
When you record a meeting, you are responsible for informing participants and obtaining any consent the law requires. See the Terms of Use. We do not receive these recordings.
6. Who receives data
- Gumroad (payment, Merchant of Record, licence API). It acts under its own privacy policy, and for buyer data collected on behalf of sellers, describes the seller as controller and itself as processor. https://gumroad.com/privacy
- GitHub (hosting for the website, appcast and downloads). It receives IP addresses in its server logs. https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement
- Hugging Face (hosts the on-device model files Dilo downloads). It receives IP addresses in its server logs. https://huggingface.co/privacy
- Google Workspace (our email, used only when you write to us). https://policies.google.com/privacy
- Your chosen AI provider, only if you connect one (section 4).
We do not use other processors for Dilo. Contact messages are stored in our email, hosted by Google Workspace (Google Ireland Ltd.).
7. International transfers
Gumroad and GitHub are based in, or use infrastructure in, the United States. Transfers rely on the safeguards those companies use, such as the EU-US Data Privacy Framework or Standard Contractual Clauses. Ask us for details at hello@jetforgelabs.com. Cloud AI providers you connect may also process data outside the EU.
8. How long we keep data
- Purchase and tax records: as long as the law requires accounting records to be kept (in Estonia, generally seven years), mainly held by Gumroad.
- Support messages: until your issue is resolved and for up to 24 months afterwards.
- Server logs at GitHub: as GitHub’s policy states.
- Files on your Mac: until you delete them. We cannot delete what we do not have.
9. Your rights
Under the GDPR you can ask us for access, rectification, erasure, restriction, objection and portability of your personal data, and withdraw any consent you gave. Write to hello@jetforgelabs.com. We reply within one month. For data held by Gumroad or GitHub, you can also contact them. We hold very little data about you, and we cannot identify you in data we never receive.
10. Complaints
You can complain to us first. You also have the right to lodge a complaint with a supervisory authority, in particular the one in your country, or the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, info@aki.ee, https://www.aki.ee/en.
11. Providing data is optional
You do not need to give us personal data to use Dilo Basic. To buy Pro you need to provide payment details to Gumroad, and to activate it, your licence key must be checkable. If you do not, we cannot issue or verify Pro.
12. Children
Dilo is not directed at children under 16, and we do not knowingly collect their data.
13. Security
Data stays on your Mac, protected by your Mac’s own security (use FileVault). Updates are signed. Communications with Gumroad, GitHub and update servers use HTTPS.
14. Open-source acknowledgements
Dilo uses third-party software and models that need attribution, for example speech models and libraries under CC-BY-4.0. See the Open-source acknowledgements in the app.
15. Changes
When this policy changes, we update the date above and, for material changes, tell you in the app or on getdilo.co.