Privacy Policy

txt2mp3 is a Mac app that turns text into speech on your own machine, plus this website. There is no account to create. The app sends us nothing at all — not your text, not your audio, not your voice recordings, and not a single usage statistic. The only data we ever hold is aggregate visitor counts for this website.

The controller for the processing described here is the operator of txt2mp3, named in the Imprint. For any privacy question, or to exercise the rights below, email hello@txt2mp3.app.

Everything you put into txt2mp3 is processed on your Mac by a speech engine that runs locally. The text you type, the MP3s it produces, the recordings you supply to clone a voice, and the voices you design all stay in your own file system and in the app's local storage. None of it is uploaded to us — we run no server that could receive it. Deleting it is a matter of deleting the files; there is no copy anywhere else.

The app contains no analytics, no crash reporting, and no usage tracking of any kind. It does not phone home to report what you generated, which voices you used, or that you launched it. There is no setting to switch off, because there is nothing running.

Four things need the network, and none of them carries any information about what you do in the app.

• Setup — on first run the app downloads its speech model and a self-contained Python runtime from huggingface.co, and a small captioning model from Microsoft Azure's CDN (openaipublic.azureedge.net), which is where its publisher hosts it. These are third-party hosts: like any download, they see your IP address and process it under their own privacy policies. We receive nothing from them.
• Updates — the app periodically asks our content delivery network (cdn.txt2mp3.app) whether a newer version exists, and downloads it if so. The request contains the platform and the version you are on, and nothing else.
• Activation — when you enter a license key, the app makes one request to our payment provider, Polar (api.polar.sh), to check the key and register this Mac. It sends the key and a random six-character label, and nothing else. It happens once, at activation: the app does not check again afterwards and never phones home to confirm that your license is still good.
• This website — where you downloaded the app in the first place.

Once Setup has finished, the app generates speech with no network access at all. You can verify that by pulling the plug.

txt2mp3 can expose a local MCP server so an AI assistant on your Mac can drive it. It is off by default, and when you switch it on it binds to 127.0.0.1 only — the loopback interface, which is not reachable from your network or from the internet. Whatever an assistant sends it stays on your machine, and we never see any of it.

This site counts page views using Umami, a privacy-friendly analytics tool we host ourselves on our own server in the EU. It sets no cookies, stores no IP address, and does not track you across other sites; it derives a short-lived, daily-rotating hash purely to tell one visit from another, then discards it. Nothing is shared with third parties and nothing is sold.

This site loads two typefaces from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). Your browser requests them directly from Google, which means Google receives your IP address and processes it under its own privacy policy. No cookies are set by these requests.

Our web server and CDN briefly log the technical information every web request carries — IP address, time, the file requested, the referrer, and the browser's user agent — to deliver the file, keep the service up, and spot abuse. These logs are short-lived and are never used to build a profile of you.

txt2mp3 is sold as a one-time purchase. When checkout is available, it is handled by a third-party payment provider acting as the merchant of record: it collects what the sale requires — such as your email address, payment details, and the country needed to charge the right tax — under its own privacy policy, and we never receive your payment details. We receive only what is needed to issue and honour your license, such as the license key, an order reference, and the email address you bought with.

Where this involves personal data under the GDPR, we rely on our legitimate interest (Art. 6 (1) (f) GDPR) in operating, securing, and improving txt2mp3, and — for a purchase — on performance of a contract (Art. 6 (1) (b) GDPR). Visitor statistics are kept only in aggregate, for as long as they inform product decisions. Server logs are kept for a short period and then deleted or anonymised. Records relating to a purchase are kept for as long as German commercial and tax law requires. We do not use any of it for advertising or automated decision-making.

If the GDPR applies to you, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected or incomplete data completed;
• have your data erased, or its processing restricted;
• object to processing based on legitimate interest;
• receive your data in a portable format; and
• lodge a complaint with a data protection supervisory authority.

To exercise any of these, email hello@txt2mp3.app. In practice there is very little to ask for: outside a purchase, we hold no data that identifies you.

txt2mp3 is a general-purpose creative tool, is not directed at children under 16, and we do not knowingly collect their data.

We will update this policy as the app changes — in particular if it ever gains a new outbound connection. Material changes appear here with a new “last updated” date above.

Questions about privacy? Email hello@txt2mp3.app.