Privacy

Last updated 21 September 2026. Written to be checked, not to be trusted: everything below can be verified in your browser’s own developer tools.

There is no Handfrai server. This app is a folder of static files. It has no backend, no database, no account and no analytics, so there is nowhere for us to receive your data even by accident. The only computer we could send anything to is one you chose yourself.

Your API key

Stays in this browser. It is encrypted with a key that your browser will not let anybody export — not us, and not a script on this page — and stored in this browser’s own database.

It is sent to the AI provider you chose, directly from this page, and to nobody else. We never log it, never speak it and never put it in a web address.

The honest limit: an encrypted key protects you against someone who copies your disk or your backup. It does not protect you against a browser extension with permission to run code on this page. That is why this page loads no third-party script, no font service and no analytics.

What you said — the text

Stays in this browser. Every capture and every draft is written to this browser’s own database. It is there tomorrow because it never left — until you send it.

A transform sends the draft to your AI. When you press Email, Prompt, Note or Polish, the current text of that draft — not the first capture, not your other drafts, never your key — goes to the provider you set up, under your own account and their terms, and the answer comes back to this browser. Nothing else is ever sent. What it cost is on every result and in the meter in the sidebar; the meter counts what is kept here, so deleting a draft also forgets its turns — your provider’s invoice is the truth.

During the testing phase, every new capture is sent once, automatically. When a capture opens as a draft, its text goes to your AI for a review and the result is shown beside your words — never applied, always with the model, the cost and what the guard found. You can turn this off, or choose the deletion-only clean instead, on the Settings page. Without a key, nothing is sent.

Your voice — the audio

This one can leave your device, and the page always tells you before you speak.

Handfrai does not transcribe anything itself. It asks your browser to do it, and browsers do it in one of two ways:

• On your device. Recent versions of Chrome can recognise speech entirely on your own machine once the language pack for that language has been downloaded. Nothing you say goes anywhere. The chip by the button says “stays on this device”, in green.
• By the browser’s own speech service. If that language pack is not installed — which is the normal state of a new machine, including for German and English — your browser sends the audio to its maker’s speech service and sends back text. That is the browser vendor’s service under the browser vendor’s privacy policy, not ours, and we cannot see it happen. The page says “leaves this device to be recognised”, in amber, before you speak — and the draft records it, so the fact is still there after a reload.

Which one happened is recorded on every single capture and shown beside the draft it became, so you can look back and know. No sentence we write anywhere is allowed to be broader than what that label says.

Your voice — the recording

Since 21 September 2026 the sound of a capture is kept on this device, beside the words, so the quality of what the app makes of your voice can be measured and improved — and so you can hear what was said. It is asked for raw (16 kHz, mono, no echo cancellation, noise suppression or automatic gain) — what the browser actually applied is recorded on every recording and shown beside the draft — written to this browser’s own database, and it is never uploaded: nothing on this page sends audio anywhere, and no transform ever carries it.

• The newest 50 recordings are kept; older ones are deleted automatically after every new capture.
• You can play a recording and download it as a .wav beside the draft it belongs to.
• Delete this draft deletes its recording; Delete everything deletes them all.
• In Chrome the recogniser and the recorder listen to the microphone separately, so the file on your device is not the exact signal the recogniser heard — it is raw, the recogniser’s input is the browser’s processed one. The draft says so.
• The recording is sound for recognition and measurement, nothing else. Nothing here scores your mood, tone, stress or engagement from it, and nothing ever will — that is a line this product does not cross.

Where a browser cannot recognise speech at all, the app still records: you get the sound, kept the same way, and no words. Chrome recognises speech, and so does Safari on the iPhone.

How to delete everything

• One thought: Delete this draft beside the draft. The capture and its recording go with it.
• Everything you have said: Delete everything at the bottom of the sidebar.
• Your key: Forget next to it on the Settings page.
• All of it, including anything we forgot: clear this site’s data in your browser settings. Because there is no server, that leaves nothing behind anywhere.

Deleting your Handfrai data does not reach the AI provider you chose. What they keep, and for how long, is between you and them — it is your account, and that is the point of the design.