Privacy policy

This policy explains what CoderCue LLC ("we", "us") does with personal data in the CoderCue application and on this website. It is written to be checkable: everything described here is a property of how the software is built, not a promise about future behaviour.

1. Your audio never leaves your device

Speech recognition runs locally using an offline model. Audio from your microphone and from your speakers is processed in memory on your own machine, turned into text, and discarded. No audio is uploaded anywhere, by us or by anyone else, at any point.

This is the single most important difference between CoderCue and a cloud-transcription product, and it is a design decision rather than a setting: the app has no code path that sends audio off the machine.

2. What leaves your machine, and where it goes

Our licence service receives a licence key and a machine fingerprint derived from your hardware. That fingerprint is a hash, not a hardware serial number, and it is used only to enforce one machine per licence. It is never used for advertising or profiling.

3. What is stored on your machine

Everything the app remembers lives in a single folder under your user profile:

• Session history — transcripts, speaker labels and AI answers, if you leave session saving on. You can turn it off, and set a retention period after which old sessions are removed automatically.
• Settings — your device choices, playbook preferences and tuning. No personal data beyond what you type into them.
• AI provider key — encrypted with Windows DPAPI, which means it can only be decrypted by your Windows account on that machine. It is never transmitted to us.
• Knowledge sources — the documents and images you add, and the text extracted from them.
• Speech models — the offline recogniser files you download.

Uninstalling the app leaves this folder in place so you do not lose your history by accident. Delete it whenever you want, and it is gone — we hold no copy.

4. No telemetry, no analytics

The application contains no crash reporting, no usage analytics, no advertising identifiers and no "phone home" behaviour of any kind. It makes network requests for exactly three reasons: to reach your AI provider when you ask a question, to check your licence, and to download a speech model when you ask it to.

This website does not set analytics or advertising cookies, and does not embed third-party tracking scripts, social pixels or fonts loaded from a third-party server.

5. This website

• Server logs. Our hosting provider records standard request data — IP address, user agent, requested path, timestamp — for security and abuse prevention. These logs are retained for a short period and are not used to build profiles.
• Checkout. Payments are handled by SellAuth on their own checkout pages. They collect your email address, billing details and payment information, and they set their own cookies on their domain. We receive your email address and the fact that an order completed — not your card details.
• Analytics. None. We do not use Google Analytics or any equivalent.

6. Why we are allowed to process your data

Where the GDPR or similar law applies, we rely on:

• Performance of a contract — to issue and validate your licence, deliver your key, and provide support you ask for.
• Legitimate interests — to prevent licence abuse and fraud, and to keep the website and licensing service secure.
• Legal obligation — to keep records of transactions for tax and accounting purposes.

We do not sell personal data, and we do not share it for advertising.

7. How long we keep things

• Licence records — for as long as the licence exists, plus a short period afterwards in case you need it restored.
• Support email — as long as needed to resolve the issue, then archived for a limited period.
• Transaction records — for the period required by tax law.
• Everything on your machine — until you delete it. That is the only copy, so we cannot recover it for you.

8. Your rights

Depending on where you live you may have the right to access, correct, delete, restrict or object to our processing of your personal data, and to receive it in a portable format. To exercise any of them, email [email protected].

Because transcripts and settings exist only on your own device, the most common request — "delete my data" — is something you can complete yourself by deleting the app's data folder. We will confirm what we hold, which is usually only a licence record and an email address.

If you are in the EEA or the UK you also have the right to complain to your national data protection authority.

9. Security

• Your AI provider key is encrypted at rest with Windows DPAPI, scoped to your Windows account.
• Licence activation is signed and time-limited so a captured request cannot be replayed.
• We hold no server-side copy of your transcripts, sources or audio, so there is nothing there to breach.
• No system is perfect. Keep your machine account secure, because that account is what protects your local data.

10. Children

CoderCue is a professional and competitive tool and is not directed at children. It is not intended for use by anyone under 16, and we do not knowingly collect personal data from them.

11. International transfers

When you use your AI provider, the text of your conversation is transferred to whichever region that provider processes in, under your own agreement with them. Our licensing service is hosted in a single region. Where data leaves your country, we rely on appropriate safeguards such as standard contractual clauses.

12. Changes to this policy

If this policy changes, the date at the top of the page changes with it. Material changes will be announced on this website before they take effect.

13. Contact

Privacy questions and requests: [email protected].