Privacy Policy.

Doing Systems, LLC (“we,” “us,” or “our”) operates the Doing application and the doing.tools website. This Privacy Policy explains what data we collect, how we use it, and your rights.

The short version: Doing is designed to keep your data on your device. We do not collect your audio recordings, transcriptions, or personal information through the application.

When you use Doing, the following data stays entirely on your device:

• Audio recordings — captured locally and deleted after transcription
• Transcriptions — stored as local files on your Mac
• API keys — stored in your local configuration file only
• Skills and prompts — stored locally on your device
• Application logs — stored locally on your device

We do not transmit, access, or store any of the above data on our servers. We have no ability to read your transcripts, listen to your recordings, or access your API keys.

When using the default local transcription provider (Parakeet), all audio processing happens entirely on your device. No audio data leaves your Mac. No network calls are made during transcription. This is the most private option and is enabled by default.

If you choose to use a cloud transcription provider (OpenAI Whisper or Google Gemini), your audio is sent to that provider’s API for processing. This is entirely your choice. When using cloud providers:

• Audio is sent directly from your device to the provider’s API
• Audio does not pass through our servers
• You authenticate with your own API keys
• The provider’s privacy policy governs how they handle your audio

We encourage you to review the privacy policies of any cloud provider you choose to use:

• OpenAI Privacy Policy
• Google Privacy Policy

Doing’s Skills feature can send your transcription text to an LLM provider (OpenAI or Google Gemini) for post-processing such as cleanup, formatting, summarization, or custom transformations. This only occurs when you explicitly enable and trigger a Skill.

When a Skill runs using a cloud provider:

• Your transcription text (and the Skill’s prompt) are sent to the provider’s API
• Data is sent directly from your device — it does not pass through our servers
• You authenticate with your own API keys
• The provider’s privacy policy and terms of service govern how they handle your data

You are responsible for reviewing and complying with the terms of any third-party provider you use through Doing. See our Terms of Service (Section 6) for full details on third-party service obligations.

We collect limited data in the following contexts:

Purchase Information

When you purchase Doing, payment is processed by Paddle (paddle.com), our merchant of record. Paddle collects your name, email address, and payment information to process your purchase and provide license fulfillment. See Paddle’s Privacy Policy for details.

Website Analytics

The doing.tools website uses Vercel Analytics, which collects anonymous, aggregated usage data (page views, referrers) without using cookies or tracking individual visitors. No personal information is collected through our website analytics.

Auto-Update Checks

Doing periodically checks for software updates by requesting an appcast file from doing.tools. This request includes standard HTTP headers (IP address, app version) but we do not log or store this information to identify individual users.

Pricing Data

Doing periodically fetches current cloud transcription pricing from doing.tools to display accurate cost estimates. This is a simple data request and does not transmit any personal information.

We make the following commitments:

• No training on your data — your audio and transcriptions are never used to train AI models
• No selling your data — we do not sell, rent, or share personal information with third parties for marketing purposes
• No tracking or telemetry — Doing does not include analytics, telemetry, or usage tracking in the application
• No cookies — the Doing application does not use cookies or similar tracking technologies
• No advertising — we do not serve ads or share data with advertising networks

Because Doing stores data locally on your device, the security of your data is largely determined by the security of your Mac. We recommend:

• Enabling FileVault disk encryption on your Mac
• Using a strong login password
• Keeping macOS up to date

Network communications with our servers (update checks, pricing data) use HTTPS encryption. Communications with cloud transcription providers also use HTTPS.

Our Services are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

Since Doing stores data locally on your device, you have full control over your data at all times. You can:

• View, edit, or delete your transcripts at any time (stored in ~/Documents/Doing/)
• Delete your configuration and API keys (stored in ~/.config/doing/)
• Delete the application and all associated data at any time
• Request deletion of any purchase data by contacting us

For any data held by Paddle (purchase information), you may exercise your rights under applicable privacy laws (including GDPR and CCPA) by contacting us at privacy@doing.tools.

We may update this Privacy Policy from time to time. Material changes will be communicated through the application or posted on this page. The effective date at the top of this page indicates when it was last revised.

Questions about this Privacy Policy? Contact us at privacy@doing.tools.

Doing Systems, LLC
Portland, Oregon