Privacy
Last updated October 14, 2026. This page explains what Skeleton Fingers collects, where it goes, how long we keep it, and how to delete it.
The short version
- The free "In your browser" lane transcribes on your own device. Your audio never leaves it.
- The "Fast" lane uploads your recording to our servers. We keep the converted audio, the transcript and, when it was saved, the original file you uploaded with your account. The converted audio is deleted automatically 90 days after it was uploaded; the transcript and the original file stay until you delete that transcript or your account.
- We do not sell your personal information.
- Questions or requests: brian@skeletonfingers.com.
The browser lane
The browser lane runs the Whisper speech recognition model in your web browser. The first time you use it, your browser downloads the model files from Hugging Face (huggingface.co and its content delivery network at hf.co) and keeps them in its cache. Your audio is then read and transcribed on your device and is never sent to us. The transcript stays in your browser. If you are signed in and choose to save it, we store the transcript text (not the audio) with your account.
We do record anonymous usage details for browser lane jobs, such as that a transcription ran, the length of the audio, how long it took, the length of the resulting text and whether it succeeded. These never include the audio or the transcript text.
The fast lane
The fast lane needs a free account. When you use it:
- Your browser converts the audio to a compact audio file and uploads it to our servers, which send it to Deepgram for transcription. If your browser can read a file but cannot decode it and you choose the fast lane for it, your browser uploads the original file instead; our servers convert it and keep only the converted audio.
- We save the transcript, including timestamps, to your account automatically. We also save a copy of the converted audio with your account. That copy is saved in the background, and in rare cases the save can fail without affecting the transcript.
- If you picked a file from your device that your browser could decode, and it is under our size limit, your browser also uploads the original file (for example the full video) to our storage in the background after the transcript is ready. It is a separate stored file from the converted audio. If that upload fails, your transcript is not affected.
- We also store details about the file: its name, size, type, length and whether it was a video.
The converted audio is deleted automatically 90 days after it was uploaded; the transcript and the original file stay until you delete that transcript or your account. The file details stay with the transcript.
Other information we collect
- Account: your email address and your password, which we store only as a one-way hash, never in plain text. We also keep your plan, your usage (fast minutes, free fast files and AI documents used) and, if you pay, your Stripe customer and subscription identifiers.
- How you found us: on your first visit your browser remembers the referring website, the page you landed on and any campaign tags in the link. If you sign up, that is stored with your account.
- AI documents and templates: if you turn a transcript into a document, the transcript text and the template instructions are sent to Anthropic to write it, and the result is saved with the transcript. Templates you create are stored with your account.
- Usage events: actions in the app, such as starting a transcription, saving or exporting a transcript, or seeing an upgrade prompt, are recorded with a random identifier stored in your browser and, when you are signed in, your account ID. They never contain audio or transcript text.
- Feedback: if you use the feedback form or rating in the app, we receive what you enter, including an email address if you give one. It is delivered to our team's Slack.
- Server logs: our servers keep standard technical logs, such as which request was made and whether it succeeded, for a limited time.
What is stored in your browser
The app uses your browser's local storage for your sign-in token and basic account details, the random usage identifier, and the first-visit information described above. The browser lane also caches the speech model. Google Analytics sets its own cookies.
Who processes your data
| Provider | What for | What it receives |
|---|---|---|
| Deepgram | Fast lane transcription | Fast lane audio |
| Hugging Face | Hosting the browser lane's speech model | A standard web request (including your IP address) when your browser downloads the model files. Never your audio or transcripts. |
| Anthropic | AI documents | Transcript text and template instructions, when you create a document |
| Amazon Web Services | Hosting, file storage and account email | Stored audio and original files, and your email address for account emails such as the welcome email |
| MongoDB Atlas | Database | Account, transcript and usage records |
| Stripe | Payments | Your payment details, entered on Stripe's own checkout page. We never see your full card number. |
| Google Analytics | Site analytics | Page views and product events from your browser |
| Slack | Internal team notifications | Your email address when you sign up (with how you found us) or delete your account, and feedback you send |
How deletion works
Deleting a transcript
You can delete any saved transcript in the app. That removes the transcript record, including its text, timestamps and any AI documents made from it, and deletes its stored audio file and original file. If a storage deletion fails, a file can remain until we clean it up, so email us and we will confirm it is gone.
Deleting your account
There is no delete-account button in the app yet. Email brian@skeletonfingers.com from the address on your account. When we process the request, we cancel any active subscription with Stripe, delete your account, your plan and usage records, all of your transcripts and their documents, and your stored audio and original files, and check that each step succeeded. We email you once it is done, after fixing any step that failed.
What deletion does not remove
- Templates you created, which are currently kept after account deletion. Ask us in the same email and we will remove them.
- Usage events and transcription logs. They contain no audio or transcript text; the ones from your account keep an internal account ID.
- Records Stripe keeps about your payments, under Stripe's own policies.
- Copies in our database backups, which expire on their own schedule.
- Team notifications already posted to Slack.
Security
The site and our servers use HTTPS. Passwords are hashed. Transcripts and files are only returned to the signed-in account that owns them, and a sign-in lasts up to 30 days before you need to sign in again.
Changes and contact
If we change how we handle data, we will update this page and the date at the top. For questions, access or deletion requests, email brian@skeletonfingers.com.