Privacy Policy

Last updated: October 12, 2026 — applies to the Mova Flow desktop app and the Mova Flow Meet Recorder Chrome extension.

Short version: Mova Flow does not have a backend, an account system, or any analytics. Audio you record or upload is sent only to the Mova Flow host you configure, over your own local network; the browser extension hands its recordings to the Mova Flow app on the same computer, which does the rest. Nothing is sent to us or to any third party, because there is no "us" in the data path at all — the code runs entirely on your machines.

What data is processed

Audio — files you drop into the Upload tab, or a call recorded by the extension (Google Meet, Microsoft Teams, Zoom's web client or Jitsi Meet): the call's tab audio, plus your own side of the call taken from the audio the call page itself sends to the other participants (on Zoom's web client, which sends no such audio, the microphone track Zoom itself opened, silenced while Zoom shows you muted). The extension never requests or opens your microphone.
Speaker names — while recording a Google Meet call, the extension reads the display names in Meet's live captions and when each person spoke, so the transcript can say who said what. These go only to the Mova Flow app on your computer along with the recording, and from there to your configured host.
Transcripts — the text Whisper produces from that audio, stored in the app's local History alongside the source audio.
Connection settings — the host's IP/hostname, port, and access secret you enter to connect a client to a host, stored locally in the app's config.json. The extension has no connection settings of its own.

Where it goes

Audio and transcripts travel only between devices you control, over your own local network:

The host (one machine with a GPU) runs Whisper locally via whisper-cli.exe — recognition never calls out to any external API.
A client desktop app sends audio to the host you configured, authenticated with a shared secret exchanged for a short-lived bearer token. See the security model for details.
The Meet Recorder extension hands each recording to the Mova Flow app on the same computer, over 127.0.0.1 (it never leaves the machine on that step); the app files it in its History and transcribes it — itself, or through its host as above. Only Mova Flow's own extension may read the app's History back.
If the app isn't running, the recording is saved to your Downloads folder instead of being discarded — it still never leaves your machine.

No audio, transcript, or setting is ever sent to Mova Flow's developer, to any analytics service, or to any third party. There are no ads, no trackers, and no telemetry.

Chrome extension permissions

Mova Flow Meet Recorder requests the following, each used only for the purpose below:

tabCapture / offscreen — capture the call tab's audio (everyone else on the call) and combine it with your own side of the call into one recording.
Access to the supported call services' pages (meet.google.com, teams.microsoft.com, teams.live.com, teams.cloud.microsoft, *.zoom.us (for Zoom's web client, which can sit inside the Zoom Workplace page), meet.jit.si) — add the Record button to the call page, read speaker names from Meet's live captions (Google Meet only), and record the audio the page sends from you to the other participants (silent while you're muted). Nothing on these pages is read or recorded unless you press Record. No microphone permission is requested.
storage — keep the in-progress recording's status for the browser session, so the popup, side panel and call page agree on it.
activeTab — Chrome's permission to capture the call's tab, granted when you call on the extension there (its icon, its keyboard shortcut, or its context-menu item).
contextMenus — one item, "Record this call with Mova Flow", in the right-click menu on call pages, to start or stop a recording.
sidePanel — show the extension in the browser's side panel next to the call, if you choose to open it there.
downloads — save the recording as a .wav file when the Mova Flow app isn't running.
Connecting to the Mova Flow app at 127.0.0.1 — the only address the extension sends anything to; your browser may ask you to allow it access to apps on this computer.

Data retention and deletion

Audio and transcripts are stored only on the host and/or client devices you run Mova Flow on. Delete an entry from the History tab (or delete the underlying files/folder) to remove it — there is no remote copy to also delete, since none exists.

Changes to this policy

If this policy changes, the "Last updated" date above will change and the new version will be published at this same URL.

Contact

Questions about this policy or the project: open an issue on github.com/f3an/Mova-Flow.