Privacy Policy

Taper Labs, Inc. (Taper Labs, we, us, or our) provides the Cakie macOS application, also known as Cakie AI, and its related services. This policy explains how information is handled when you capture spoken input and screen content, work with saved sessions, and use Cakie's related features. The product domain is cakie.ai.

Effective: September 14, 2026

Last updated: September 14, 2026

Information Handled by Cakie

Your Session Content

Depending on the capture options you use, a session may contain microphone audio, screen images, pointer coordinates, visual annotations, timestamps, transcripts, generated output and video, and session metadata. This material may include personal information about you or other people.

Core capture and transcription take place on your device. Starting or saving a local session does not by itself upload its content to us. Capture starts when you begin a session and grant the relevant macOS permissions.

Preferences and Local App Data

Cakie stores information needed to operate the application, such as capture and shortcut preferences, retention settings, saved-session records, and the version and date of your legal acceptance. These settings and records are stored on your device. Product analytics also includes saved shortcut combinations and changes to them, represented as standardized key identifiers. This does not include typed text or a history of key presses.

App Operation and Usage Information

When enabled, our operational services process app-instance or diagnostic identifiers, timestamps, app and device information, IP addresses, usage events, performance measurements, and sanitized technical diagnostics. We use this information to operate, maintain, secure, and improve Cakie, including troubleshooting, understanding app performance and usage, and delivering configuration and updates.

Analytics and diagnostics process technical and usage information, not session content. They exclude recordings, transcripts, screenshots, session titles, file paths, credentials, account identities, and raw content-bearing errors. Advertising tracking and session replay are not part of these app integrations. We provide any legally required notice, choice, or consent before the relevant processing begins; first-run policy acceptance is not a substitute for separate consent where required.

Support Information

If you contact us, we receive your email address and the message, attachments, or troubleshooting information you choose to send. Share only what is needed to resolve your request, and remove unnecessary sensitive information from screenshots or other attachments.

Accounts and Payments

The current application does not require an account or collect payment details. If account features are offered and you use them, we may process the name, email address, sign-in information, and account preferences you provide or authorize.

If paid plans, subscriptions, or other purchases become available, we and payment providers selected by us, including providers not named in this policy, may process billing contact details, transaction records, and subscription or entitlement status to handle payments, access, refunds, and legal obligations. Payment handling, providers, and the information collected will be disclosed before payment.

How Information Is Used

Information is processed as needed to:

• Capture spoken input and screen context, create the output you request, and let you review, copy, export, or delete saved sessions.
• Apply your capture choices, shortcuts, and retention preferences.
• Provide optional online features you choose.
• Diagnose errors, protect the Service, understand app performance and usage, and deliver configuration and updates.
• Respond to support requests and communicate about the Service.
• Manage accounts, paid access, billing, cancellations, and refunds where those features are used.
• Comply with applicable legal obligations and address disputes.

When you submit in-app feedback, we receive your message, the reply email you provide (if any), and app version. The feedback form offers an optional diagnostic attachment, selected by default and sent only when you submit. You can uncheck it before sending. These attachments contain limited recent technical events, sanitized error categories, and app/device information, excluding recordings, screenshots, transcripts, file paths, credentials, and raw content-bearing errors. Feedback is stored through Cakie’s backend; diagnostic attachments use private cloud storage configured for expiration after 30 days, subject to processing delays. Feedback messages follow the support-record retention described below.

Product improvement and analytics use the device, usage, and feedback information described in this policy. These purposes do not by themselves authorize uploading local session content or reusing it for unrelated purposes.

Optional Online and AI Features

To enable AI-powered features, transcripts, screenshots, annotations, and related context required to deliver the feature you choose may be sent via our servers to third-party AI providers. Online requests may be processed on servers operated by us or our service providers. A request is not necessarily sent to every listed provider.

Processing and retention depend on the feature, provider terms, and service configuration. Applicable feature notices describe the content sent and relevant data handling before online processing is enabled. Any use of your content for unrelated purposes or model training requires a separately disclosed lawful basis and any consent required by law.

Clipboard, Exports, and Other Applications

Cakie can prepare text and visual material for you to copy or export. Copying output does not automatically paste or upload it to another application. You control where you paste, upload, or send it.

Clipboard contents and exported files may be accessible to other software or device features you enable. Once you transfer material to another application or service, that destination handles it under its own terms and privacy policy. Cakie cannot recall those copies or control their retention.

Information We Disclose

We do not sell your personal information.

We may disclose information we receive to:

• Technical service providers: Providers supporting app operations, analytics, diagnostics, configuration, and updates receive the technical information described above. These requests do not include core session content.
• Providers for features you choose: Providers for optional online processing, accounts, or payments may receive the information needed for those features, as described in this policy and the applicable notices.
• People supporting our operations: Authorized employees, contractors, and professional advisers may access information as needed for support, security, administration, or legal matters.
• Legal recipients: Courts, regulators, or other parties may receive information where required by law or necessary to establish, exercise, or defend legal rights.
• A successor business: Information we hold may be transferred as part of a merger, acquisition, or similar transaction, subject to applicable law and notice requirements.

These disclosures concern information we actually receive. They do not independently authorize us to retrieve recordings stored only on your device.

Third-Party Service Providers

We use third-party service providers to provide, maintain, secure, and improve the Service. This includes AI processing, IT services, data storage, hosting, analytics, error reporting, maintenance, support, and, where offered, authentication and payments.

AI providers used or planned for use include, but are not limited to:

• Google
• OpenAI
• Anthropic

Other providers used or planned for use include, but are not limited to:

• Google
• PostHog
• Sentry
• Amazon Web Services

These lists are not exhaustive and may change as we add or remove partners to enhance our services. We may, at our discretion, add, replace, combine, or discontinue providers, including providers not named here. Listing a provider does not mean it is active for every feature or release or promise its continued use.

Providers receive information for the purposes described in this policy and are subject to applicable contractual and data-protection obligations. We provide provider details, notices, and any required consent or objection process as required by applicable law or an agreement with you. Provider changes do not independently authorize new uses of your content.

Retention and Deletion

Saved sessions. App-owned sessions are retained for three days by default, adjustable in Settings. Selecting Never disables automatic expiration for new sessions; existing sessions keep their recorded retention setting. Retention and deletion cover the app-owned session and its tracked output folder. While the app is running, expiration cleanup removes app-owned session content and history. Files that cannot be accessed or deleted may require you to remove them manually; removing a session from the app does not guarantee removal of those files. You can delete sessions earlier in Cakie.

Local app data. Preferences, acceptance records, and SDK identifiers may persist in app storage or the macOS Keychain until removed. Uninstalling alone may leave local data behind.

Information we or providers receive. We keep your personal information only for as long as we need to for the purposes described in this policy, including providing the Service, support, security, billing, and resolving disputes. Retention depends on the information, purpose, applicable provider arrangements, and legal requirements. When no longer needed, information we hold is deleted or anonymized, unless retention is required or permitted for a specific continuing legal, accounting, or reporting purpose.

Copies and recovery. The app does not provide recovery of deleted sessions. Independent copies you make, device backups, copies created by synchronization services, and copies held by other services are outside the app's deletion control and may need to be removed separately. A local session's expiry does not set a provider's retention period or automatically submit a deletion request to an external service.

You may request deletion of account details, support records, or other personal information we hold by contacting support@cakie.ai, subject to applicable legal exceptions.

Your Capture and Privacy Choices

You can choose when to start and stop capture, adjust available capture options, manage macOS permissions, review material before transferring it, and change local retention settings. You may choose not to use optional online features or provide optional information. A feature may require particular information or permissions to work.

If you provide personal information about somebody else, including your customers, you represent and warrant that you have the rights and authorizations, and any consent required by law, to capture, process, and disclose that information to us and our providers. You are responsible for providing required notices and removing or redacting information you are not authorized to share before capture or online processing. Do not rely on Cakie to automatically detect or remove personal, confidential, or sensitive information. If you cannot meet these requirements, do not capture or submit that information.

Security

We use reasonable technical and organizational measures to protect information we handle from unauthorized access, disclosure, alteration, and loss. No transmission or storage method is completely secure. Local session files depend on your device security; Cakie does not promise separate application-level encryption at rest. Protect your device, account credentials where applicable, and any backups or exports you control.

We will provide notifications of personal-data breaches as required by applicable law.

Our Role and Legal Bases

Taper Labs, Inc. is the controller for personal information whose purposes and means of processing we determine, including support, service operations, and any accounts or billing we administer. Where we process personal information solely on behalf of a business customer under an applicable data processing agreement, our processor obligations are governed by that agreement.

Where the GDPR applies, our legal basis depends on the activity:

• Contract: Processing needed to provide a feature or purchase you request, including applicable account and payment administration.
• Legitimate interests: Necessary service security, troubleshooting, support, and performance analysis, where those interests are not overridden by your rights and freedoms.
• Consent: Processing for which we request consent or applicable law requires it. You may withdraw consent without affecting processing that was lawful before withdrawal.
• Legal obligations: Processing or retention required by applicable law.

Accepting this policy does not replace any separate consent required for a particular activity.

International Processing

Information may be stored or processed in the United States, South Korea, or other countries where we or our providers maintain facilities. Those countries may have different data protection laws.

We make international transfers in accordance with applicable law and this policy, using a legally permitted transfer mechanism and any required safeguards, such as an adequacy decision or appropriate contractual safeguards where the GDPR applies. We provide required transfer details and obtain separate consent where required. Contact us for information about safeguards relevant to your information.

Your Privacy Rights

Depending on applicable law, you may have rights to access or obtain a copy of personal information we hold, correct it, request deletion, restrict or object to processing, withdraw consent, and receive data in a portable format. You may also complain to the relevant data protection authority.

Contact support@cakie.ai to exercise your rights or raise a privacy concern. We may request information reasonably necessary to verify your identity or authority. We will explain any applicable exception or limitation when responding. We will not unlawfully discriminate against you for exercising your rights.

For information stored only on your device, use Cakie's session and storage controls. For information sent to us or our providers, use the request process above. Copies independently sent to other applications may require a request to those services.

California Residents

Where California privacy law applies, the categories relevant to Cakie include identifiers and contact details, app and network activity, audio and visual content you choose to provide, and account or transaction information where applicable. The sources, purposes, recipients, and retention criteria are described above; local-only session content is not received by us merely because it is captured.

You may request information about the categories and specific pieces of personal information we collect, their sources, purposes, and disclosures, and exercise applicable rights to access, correct, or delete that information. Applicable rights may also include opting out of sale or sharing and limiting certain uses of sensitive personal information. We do not sell personal information. Contact us using the details above to exercise applicable rights or request information about disclosures for direct marketing under California's Shine the Light law.

Children's Privacy

Cakie is intended for users aged 18 or older. We do not knowingly solicit accounts or personal information directly from children under 18. Captured content may include information about other people, including children; users must have the rights and permissions required to handle it. If you believe a child has provided personal information to us in violation of this policy, contact us so we can investigate and take appropriate action, including deletion where required.

Local Storage and Cookies

The bundled application pages use local storage for app preferences and do not use advertising or web tracking cookies. Other applications or sites you choose to use have their own storage and cookie practices.

Changes to This Policy

We may update this policy to reflect changes to our services, providers, practices, or applicable law. We will make the revised policy available through the Service and notify you of material changes. We will provide any legally required notice, choice, or consent before introducing new processing.

Contact Us

For questions or requests about Cakie's handling of personal information, contact Taper Labs, Inc.:

Support and privacy requests: support@cakie.ai

Jay Song: jay@cakie.ai

Product domain: cakie.ai