How it works · August 27, 2026

The words we carry, and the copies we bury

There is an old story about the burial of Genghis Khan. When he died, a company of soldiers carried his body to a secret place and buried it. Then, so the location could never be told, everyone who had seen the route was killed, and the soldiers who did the killing were killed in turn. By the time it was finished, no living person knew where he lay. The secret was not guarded by a lock or a map. It was made impossible to tell, because everyone who could tell it was gone.

That is almost exactly what Privt Voice does with your words.

What Privt Voice actually is

Think of it as a courier for your voice. You speak, and it carries what you said across one short, protected stretch: from the moment the words leave your mouth to the moment they arrive inside the app you already trust, whether that is Signal, your notes, or a message to a colleague. It is a private bridge, and its only job is to get your words across it whole and unseen.

The important part is what happens at the far end. Privt Voice places your words into your app and then steps back. It says, in effect, these are yours now, Signal, look after them. From that point your words live where you put them, under that app's own protection, and Privt Voice has no further hold on them.

The usual way, and what it costs you

Carrying your words means making copies of them for a moment. There is the sound of your voice, and there is the text as it is being written out. Both have to exist, however briefly, for any of this to work at all. Every tool that turns speech into text creates copies like these, and what separates one from the next is not whether the copies get made but where they are made and what becomes of them.

The usual answer is to send them away. Most transcription happens in the cloud, which is a polite way of saying that the sound of your voice is uploaded to a company's servers and turned into text there. From that moment your voice and its transcript live on machines you will never touch, under a retention policy you did not write, kept for as long as someone decides is useful, and reachable by anyone who can breach those servers or compel the company to open them. Nothing has to go wrong for this to cost you. Your words are simply no longer yours to account for.

The tools that do keep the work on your own machine, which sounds safer, tend to hand it back through the clipboard. On a Mac the clipboard is a public square: any program that happens to be running can read it, with no permission asked and no prompt shown, and the clipboard-history apps many people install keep their own copy of everything that passes through. So your private words, having never once left your computer, come to rest in the one place on it that everything else can see.

And whichever route the words took, the transcript itself is almost always kept. It is written into a file on your disk, in plain readable text, and simply left there. Some tools go a step further and index every line, so that everything you have ever dictated can be pulled up in an instant by search. The recording of your voice is often kept beside it, in plain audio, until the day you think to go and delete it. What began as a quick way to avoid typing becomes, without anyone quite deciding it should, a permanent and readable record of the things you only meant to say once.

What you said
A company's serversUploaded, transcribed, retained beyond your reach
Your Mac's clipboardAny running app can read it readable by anything
A file on your diskPlaintext, kept, often indexed for search kept indefinitely
Where a single sentence tends to end up the usual way. Every one of them is a place you would have to remember to go back and clean.

What Privt Voice does instead

Privt Voice is built to make the opposite choice at each of those steps. The transcription runs on your Mac, on the machine's own neural hardware, so the sound of your voice never leaves it and never reaches us. There is no server in the path, because there is no server at all.

When the text is ready, it types it into your app the way you would type it yourself, as a stream of keystrokes through a channel macOS keeps behind a permission you granted on purpose, rather than dropping it on the clipboard for anything to read. On the rare occasion there is nowhere to type, it falls back to the clipboard, but marks the entry so that clipboard managers know to skip it. Your words go straight to where you meant them to go, and nowhere else along the way.

Privt Voice writes no readable copy of your words to your disk. When it delivers a dictation into another app, it keeps nothing of its own: no history file, no cache, no plaintext transcript left behind. The notes you deliberately choose to keep are the one thing it stores, and it stores them only as ciphertext, sealed so that no one but you can open them. So the readable copies, the ones made only to carry your words across, exist nowhere but in memory, for the moment it takes to deliver them.

And the instant they are delivered, it overwrites the copies it was holding. The recording of your voice is written over in memory with zeros. The buffer that typed your words in, one small piece at a time, is written over the same way, each piece wiped as soon as it has been handed across. Both use a particular system instruction the compiler is forbidden from quietly skipping the way it may skip an ordinary erase, so that the overwrite genuinely happens rather than being optimised away into a promise. As a last precaution, the app refuses to write a crash report, so that even a sudden failure cannot spill any of this onto the disk.

The funny characters are the point

If you have watched Privt Voice finish a dictation, you have seen it: your words dissolve, left to right, into a scramble of random letters and numbers, shimmer for an instant, and are gone. It looks like something out of a hacker film, and you deserve the plain truth about it.

The scramble on the screen is theatre. The characters flickering across the panel are a picture of what is happening, not the thing itself. We could have left it out, or simply let your words disappear. We put it there on purpose, because the overwrite it stands for happens somewhere you cannot look, in the memory of your own machine, and a cleanup you cannot see is easy to promise and hard to believe. The scramble is how we bring that invisible act into the light.

Where the erasing stops, and why we say so

We are not going to dress this up as magic, because the edges of it matter as much as the middle.

There is one copy we cannot promise to scrub. Once your words exist as ordinary text inside the app, the system holds that text in a way that hands the memory back to be reused without overwriting it first, and no amount of care on our part changes that on its own. It is a known limit, the same one that led 1Password to rebuild its core in another language to escape. We keep that copy alive for as short a time as we possibly can, and we would far rather tell you it exists than pretend it does not. The copies that macOS and the transcription models make for their own use, deeper in the machine than our code can reach, sit beyond us in the same way.

And there is a larger boundary, the one that matters most the instant your words leave our hands. Our protection runs exactly as far as the app we deliver to, and not one step further. Give your words to Signal, which is built from the ground up to guard whatever you put into it, and they are in careful hands. Give them to an app that keeps your text sitting in plain view in memory, or writes it into a log, or quietly syncs it somewhere unprotected, and that is where it is exposed, through no failure of ours and past anything we can do about it. The erasing is only ever as thorough as the place you choose to send your words.

The erasing is only ever as thorough as the place you choose to send your words.

We tell you all of this because the easy thing would be to stay quiet about it, and staying quiet is not what we are here for. The reason Privt Labs exists is to push this line further than anyone has thought it worth pushing, to overwrite what almost no other app bothers to touch, and then to be straight with you about exactly where the line still falls. Good enough has never been the goal.

The shape of the whole thing

You cannot be made to hand over what you do not have. You cannot leak, sell, or lose a copy that no longer exists. By keeping as little as it possibly can, Privt Voice takes itself out of the picture as a place your words could be taken from, and leaves the one copy that matters where you put it, under the care of the app you trusted with it.

That is the whole idea. Carry your words carefully, deliver them to the one place you chose, overwrite everything we are able to overwrite, and stay honest about the rest.

← All posts