Privacy

What stays on your Mac, what goes to our servers when you use Tora Cloud, and who else handles it.

Updated

This page says what data Tora and usetora.com handle, where it goes, and how you can ask us about it. We wrote it in plain words. If a point is not clear, email hello@usetora.com.

Who we are

Tora is made by Ten Miracle (“we”, “us”). We decide how the data on this page is used. You can reach us at hello@usetora.com.

Tora Free: your Mac does the work

On Free, the speech and writing models run on your Mac.

  • Your audio, transcripts, meeting notes, and models stay on your Mac.
  • You do not need an account.
  • We do not receive what you say or write.
  • Tora’s own logs hold codes and counts, not your words.

Free still makes some requests. These are all of them:

  • Model downloads from Hugging Face, and the model catalog from updates.usetora.com. See “Model downloads”.
  • Update checks. See “Updates”.
  • The current Tora Cloud price, from api.usetora.com. It sends no personal data.
  • The Google or Microsoft calendar service, only if you connect that calendar. See “Calendars”.
  • Usage counts, unless you turn them off. See “Usage counts”.

Tora Cloud: what goes to our servers

Tora Cloud is an optional paid plan. When you use it, Tora sends audio and text to our gateway, which runs on Cloudflare. The gateway passes the data to AI providers so they can process it.

Provider What it does for Tora Cloud
AssemblyAI Speech to text: dictation, and a backup for meetings
Soniox Speech to text: meetings, a backup for dictation, and languages that AssemblyAI does not serve
DeepInfra Speaker detection in meetings
Anthropic (Claude) Text: dictation clean-up, Writer, meeting notes, answers, recaps, and Live suggestions
Groq Text: a backup for the jobs above, and the quick checks for Live suggestions
Baseten Text: a backup for the quick checks for Live suggestions

What to know:

  • The gateway logs codes, counts, and durations. It does not log your audio or text.
  • Each provider handles the data under its own terms and privacy policy. Providers can keep a request for a limited time, for example to check for abuse or to meet the law. We do not control how long a provider keeps data.
  • We do not sell your audio or text, and we do not use it to train models. Our AI providers process it to give you the result, and their own terms say how long they keep it.
  • If you do not want your audio or text to leave your Mac, do not use Tora Cloud features. Free stays on your Mac.

Accounts

You need an account only for Tora Cloud. We store these details in Cloudflare D1:

  • your email address and name
  • the sign-in provider you chose (Apple, Google, Microsoft, or email)
  • your plan and its dates
  • the IP address and the browser of each sign-in
  • the name and the model of each Mac on your plan, such as “Ada’s MacBook Pro”

When you sign in with email, Resend sends you the code or link. If you sign in with Apple, Google, or Microsoft, that provider tells us your email address and name. We do not receive your password for that provider.

Payments

Polar is the merchant of record for Tora Cloud. Polar handles your card, tax, and invoices. We do not see or store your card number. We receive from Polar the status of your subscription, such as the plan, the price, and the renewal date.

Usage counts

Tora sends usage counts to PostHog (US). We use them to see which versions run and which agents people use.

What is sent:

  • an install ID, a random number that Tora makes for each install
  • the Tora version and the macOS version
  • the memory class of your Mac
  • your plan (Free or Tora Cloud)
  • these events: the app opened, each onboarding step, onboarding finished, the plan changed, the model you installed, sign-in, the upgrade screen opened, the app you connected, and which action you used in each agent

What is not sent: your text, your audio, meeting titles, or the names of people. PostHog also receives the IP address of every request, as any web service does.

After you sign in to Tora Cloud, Tora links the counts to your account ID. From then on they are not anonymous.

To turn this off, open Settings, then General, and turn off “Share anonymous usage”. Debug builds send nothing.

The switch does not stop the plan events. If you have a Tora Cloud account, our servers also send events about your plan, such as when a subscription starts, renews, or ends. These events hold an account ID and fixed words and numbers, not your email address or name.

Calendars

Tora reads your calendars on your Mac so it can name your meeting notes with the title and the people. For Apple Calendar, Tora uses the calendars you set up in macOS. For Google Calendar and Outlook, the sign-in tokens stay in the Keychain on your Mac. On Free, calendar data stays on your Mac. With Tora Cloud, the meeting title, the names of the people, and the agenda can go with the audio and text of a call to our gateway and our AI providers.

Connectors

Connectors are optional and need Tora Cloud. Composio handles the sign-in to apps such as Notion, Slack, Linear, and Gmail. When you send notes, Tora sends their title and text through our gateway and Composio to the app you chose. For Gmail, Tora makes a draft, and your own email address is the default recipient. Tora sends only what you choose to send. Each app then handles that data under its own policy. You can disconnect an app at any time.

Model downloads

Tora downloads models from Hugging Face (huggingface.co). Tora checks each file against a signed catalog from updates.usetora.com, so it knows the file is the right one. Hugging Face sees your IP address, as any web host does. The models are large, often several GB.

Updates

Tora checks for updates with Sparkle. It reads a file called an appcast from updates.usetora.com. That request shows your IP address and your Tora and macOS versions to our host.

This website

usetora.com is a static site. Here is what it loads:

  • Its own pages and images, from our host on Cloudflare. Cloudflare may log your IP address and the page you ask for, as any web host does.
  • One request to api.usetora.com for the current Tora Cloud price. It sends no personal data.
  • No ads and no third-party trackers. The pages of usetora.com set no cookies.

The sign-in and account pages at account.usetora.com work with your account details as described above. When you sign in, they set a sign-in cookie for usetora.com. We need it to keep you signed in.

Your rights

You can ask us to:

  • show you the data we hold about you
  • fix it
  • delete your account and its data

Email hello@usetora.com from the address on your account. We answer within 30 days. Depending on where you live, the law may give you more rights, such as the right to object or to move your data. We respect those rights too. You can see and remove the Macs on your plan in Tora, in Settings › Tora Cloud.

If we must keep some data, for example invoice records that the law requires, we tell you.

Children

Tora is not for children under 13. We do not knowingly collect data from them. If you think a child gave us data, email us and we delete it.

Changes

If we change this page, we change the date at the top. If a change matters for your data, we tell you in the app or by email before it starts.

Contact

Ten Miracle, hello@usetora.com.