Privacy
Last updated 20 September 2026.
This page describes what we actually do with your data. It was written from the service's source code, not from a template. If a sentence here contradicts a sales page, this page is the one that is true.
In one line
Our servers keep no audio, no transcript, no conversation, no answer. They hold what is needed to run an account and to count what is billed, nothing more.
What is stored on your Mac
Your history, profile, dictionary and settings are stored on your computer. To answer or carry out a request, hosted features send the necessary content and context to the providers listed below. Local storage does not mean every feature works offline.
The detail, one processing activity at a time
| What we process | Why | Legal basis | How long |
|---|---|---|---|
| Waiting list: your email address, the site language, the date | To send you one message, on release day | Your consent | Until that message is sent, or until you ask us to erase it |
| Account: email address, creation date, current plan | To give you the service you asked for | Performance of the contract | As long as the account exists, then at most three months after it is closed |
| Sign-in: single-use link sent to your address | To sign you in without a password | Performance of the contract | The link expires quickly and the row is deleted as soon as it is used |
| Devices: name and model of the Macs linked to the account, fingerprint of the serial number | To limit the licence to one Mac and disconnect the old one when you sign in on a new one | Performance of the contract | As long as the device is linked to the account |
| Rate limiting: fingerprint of the IP address | To stop a robot from flooding the service or the waiting list | Legitimate interest (security) | 24 hours |
| Billable usage: number of requests, tokens, cost | To apply your plan's limits and bill accurately | Performance of the contract | thirty-six months, for as long as an invoice can be disputed |
| Payment: customer and subscription identifiers at our payment provider, status | To know whether your subscription is active | Contract, then accounting obligation | Ten years for accounting records |
| Service log: path called, response code, counters | To run the service and detect attacks | Legitimate interest (security) | thirty days |
Two points that matter
Your IP address is never stored in the clear. It is replaced by a fingerprint computed with a secret drawn at random each month; that secret is destroyed after three months, after which the fingerprint can no longer be tied to any address.
Nor is your Mac's serial number. Only a fingerprint of the same kind is kept. It serves to recognise "the same Mac", never to identify the machine elsewhere.
There is no password in our database, because there is no password: you sign in through a link sent to your address.
What goes to other companies, and why
| Who | What they receive | Why | Where |
|---|---|---|---|
| Hetzner Online GmbH | Everything the service stores, since it hosts the machine | Hosting the server | European Union (Finland) |
| Resend | Your email address and the message sent | Sending your sign-in link and the release message | United States |
| Google (Gemini) | Your voice and the context needed to reply only if hosted online conversation is reactivated; never audio from local dictation or speech on this Mac | Understanding what you say and answering you if that mode is reactivated | United States |
| Anthropic (Claude) | The text of the request you ask it to carry out | Doing what you ask on your Mac | United States |
| Creem (creem.io) | Your payment and billing details | Taking payment and issuing your invoice | Estonia (EU); standard contractual clauses for its providers outside the EU |
These companies act on our behalf and may not use this data for their own purposes, in particular to train their models. Transfers outside the European Union rely on the European Commission's standard contractual clauses and, where the provider is certified under it, on the EU-US Data Privacy Framework.
Dictation, precisely
Dictation is transcribed on your Mac, without sending audio to a transcription service. App setup downloads the required models. When speech runs on this Mac, transcription and speech synthesis stay local; request text and the necessary context are sent to the hosted service that prepares responses and actions. Hosted online conversation is currently suspended; if it is reactivated, it will also send voice audio.
Rimay keeps the dictated text and the prepared text locally so you can recover them if insertion fails. The Notebook opens their folder, where you can delete these files. Review your dictations, especially when mixing languages.
Cookies and local storage
This site sets no cookies, uses no analytics and no advertising tracker. Only two values are written into your browser's memory, and they never leave it:
rimay-langue: the language you chose, so we do not ask again;rimay-vu: the fact that you have already seen the opening screen.
These two values only serve to show the site the way you asked for it. They cannot be used to track you and are sent to nobody, which is why there is no banner to click on this site. You can clear them by clearing your browser's site data.
Your rights
You have the right to access, rectify, erase and port your data, to object to processing and to have it restricted. Where processing rests on your consent, you may withdraw it at any time, as easily as you gave it, without affecting what was done before. You may also leave instructions about what happens to your data after your death.
To exercise these rights: hello@rimay.me. We answer within one month. Deleting your account deletes the rows described above; only accounting records are kept, because the law requires it.
If our answer does not satisfy you, you may lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr, or with the supervisory authority of the country where you live.
Data controller
SASU RESPONIA, 63 montée de l'Observance, 69009 Lyon, France. Contact: hello@rimay.me.
This processing does not require a data protection officer: it involves neither large-scale monitoring nor sensitive data.