Privacy Statement

This is the short version: your audio, transcripts, and summaries never leave your Mac. Kargoo is built so we don't have access to your meetings — we couldn't read them if we tried, because they don't reach our servers. The longer version follows, in plain language. The capitalised legal version is in our Terms of Service.

1. Scope & who we are

This statement covers the Kargoo Mac app, the Kargoo iPhone companion app (in beta), and the kargoo.com website. The data controller is Kargoo Inc., a Delaware corporation with its principal office at 548 Market St., PMB 88742, San Francisco, CA 94104, United States.

If you have questions about anything in this document, email privacy@kargoo.com and a real human will respond within five business days.

2. What stays on your Mac

Everything that matters. Specifically:

• Audio recordings. Stored as Opus-encoded files in the folder you choose during setup (default ~/Documents/Kargoo). They are written to your filesystem the same way a screenshot is. We have no copy.
• Transcripts. Generated locally by an OpenAI Whisper model that ships with the app and runs on your CPU/Neural Engine. The transcript is written next to the audio file as a plain text file. We have no copy.
• Summaries. Generated locally by a small instruction-tuned model bundled with Kargoo. Same as above — written to disk, never sent.
• Voice profiles. When you train a speaker, Kargoo extracts a 192-dimensional voice embedding (a vector of numbers) and stores it encrypted in the macOS Keychain. The embedding cannot be played back as audio. It is never transmitted.
• Custom vocabulary. The names, acronyms, and jargon you teach Kargoo are stored in a plist in your application support folder. Local only.
• App settings. Window state, sidebar order, theme, hotkeys, etc. — local UserDefaults.

If you sync your Documents folder to iCloud or Dropbox, those services will see encrypted files on their end — but that's your choice and your relationship with them, not ours. Kargoo doesn't push to any cloud on your behalf.

3. What (rarely) leaves your Mac

Three categories — none of them include your audio or transcripts.

3.1 Anonymous crash reports (opt-in)

If Kargoo crashes and you have crash reporting on (off by default; we ask once during onboarding), the app sends a stack trace, OS version, hardware identifier (e.g. "MacBookPro18,3"), Kargoo version, and the elapsed time the app had been running. These reports go to Sentry. They contain no file names, audio data, transcript content, account info, or location. We use them to fix bugs.

3.2 License-check pings (Pro accounts only)

If you upgrade to Pro, the app pings api.kargoo.com/license once per 24 hours to verify your subscription is active. This ping contains your account email, a hash of your machine ID, and the app version. It returns "valid" or "expired". Free users send no pings.

3.3 In-app feedback you explicitly send

When you click "Send feedback" inside the app and review the captured technical attributes (Kargoo version, OS version, hardware, locale, last 200 log lines, current screen), the package is sent to api.kargoo.com/feedback when you press Submit. We never auto-include audio or transcripts. You can review and redact every field before submitting, and you can attach an optional screenshot if you choose. A reference ID like KGO-FB-7421 is generated client-side so we can find your report.

4. Your account

Free users don't have an account. The app works without signing in. The "email address" we ask for during onboarding is optional — it's used only to send you product updates if you opt in, and you can leave it blank.

Pro users have a Kargoo account that stores: email address, hashed password (bcrypt), subscription tier, billing status, the date of last license check, and a list of devices the license is active on. That's it. No usage data, no audio, no transcript content.

5. Payments

Payments for Pro subscriptions are processed by Stripe. We never see your card number, expiration, or CVC — those go straight from your browser/Mac to Stripe and back to us as a token. Stripe sends us: last four digits of the card, brand (Visa/Mastercard/etc.), country, and ZIP for tax purposes.

Stripe's privacy practices: stripe.com/privacy.

6. On-device models

Kargoo bundles three models:

• Whisper Tiny (40 MB) — fast, less accurate, free tier.
• Whisper Base (142 MB) — default, free tier.
• Whisper Medium (768 MB) — Pro tier, downloaded on opt-in.

All three are derivatives of OpenAI's open-source Whisper. They run on your Mac's CPU and Neural Engine. They have no network capability. We do not call OpenAI, Anthropic, Google, or any other AI provider during transcription.

Summarisation uses a small ~3 GB local model (Phi-3.5-mini) that we ship with Kargoo. Same story: local, no network calls.

7. Website cookies

The kargoo.com marketing site uses one cookie — a session token for the Pro signup flow. We do not run Google Analytics, Meta Pixel, or any other behavioural tracker on the site. We use server-side Plausible Analytics for aggregate page-view counts, which is cookie-free and IP-anonymised at the source.

8. Mac permissions we ask for

Kargoo asks for these macOS permissions, with a brief explanation in the consent prompt:

• Microphone. Required. To record your side of the conversation. The first time, macOS itself shows the prompt — Kargoo can't bypass it.
• System Audio Recording. Required for capturing the other side of a meeting (Zoom, Meet, etc). On macOS 13+ this uses the public ScreenCaptureKit API; we never read pixels — only audio.
• Accessibility. Required only if you turn on dictation. Used to insert text at the cursor and to detect the fn fn shortcut. We never read your existing screen contents.
• Notifications. Optional. To tell you when a long transcription finishes.
• Login items. Optional. To launch Kargoo at login if you want.

You can revoke any of these at any time in System Settings → Privacy & Security.

9. Third parties we use

The complete list:

• Stripe — payment processing (Pro only).
• Sentry — anonymous crash reports (opt-in).
• Plausible — cookie-free, IP-anonymised website analytics.
• Apple — code signing, notarization, Sparkle update server.
• Postmark — transactional email (sign-up confirmations, receipts).

That's it. No advertising networks. No data brokers. No "AI partners". The app and the company are deliberately small, and so is this list.

10. Children

Kargoo is not directed at children under 13. We don't knowingly collect personal information from children. If you believe a child has provided us information, contact privacy@kargoo.com and we will delete it.

11. Your rights

If you live in the EU, UK, EEA, Switzerland, or California, you have specific rights regarding your personal data:

• Right to access. Email us — we'll send everything we have. (Spoiler: for free users, that's nothing. For Pro users, your account record.)
• Right to deletion. Email us. We delete your account record within 14 days. The app and your data on your Mac are unaffected — that's yours; delete it whenever you want.
• Right to portability. All your recordings, transcripts, and summaries are already plain files on your Mac. Copy the folder. Done.
• Right to correct. Email us with the change.
• Right to object. You can opt out of crash reporting in Settings → Privacy at any time.
• Right to non-discrimination (CCPA). We don't sell data; there's nothing to opt out of. If you exercise any other right above, we won't degrade your service.

To exercise any of these rights, email privacy@kargoo.com. We respond within 30 days.

12. Changes to this statement

If we make material changes, we'll show a banner inside the Mac app the next time you launch it, and we'll email Pro users. The "Last updated" date at the top always reflects the most recent revision. We keep the full version history at kargoo.com/privacy/history.

13. Contact

Privacy questions: privacy@kargoo.com
General support: hello@kargoo.com
Postal mail: Kargoo Inc., 548 Market St., PMB 88742, San Francisco, CA 94104, USA

EU representative under Article 27 GDPR: Prighter Group, Schellinggasse 3/10, 1010 Vienna, Austria. prighter.com.