Privacy Policy

Last updated: September 21, 2026 — applies to the Mova Flow desktop app and the Mova Flow Meet Recorder Chrome extension.

Short version: Mova Flow does not have a backend, an account system, or any analytics. Audio you record or upload is sent only to the Mova Flow host you configure, over your own local network. Nothing is sent to us or to any third party, because there is no "us" in the data path at all — the code runs entirely on your machines.

What data is processed

Audio — files you drop into the Upload tab, or a Google Meet call recorded by the extension (tab audio + your microphone, mixed into one track).
Transcripts — the text Whisper produces from that audio, stored in the app's local History alongside the source audio.
Connection settings — the host's IP/hostname, port, and access secret you enter to connect a client to a host, stored locally (Electron's config.json or chrome.storage for the extension).

Where it goes

Audio and transcripts travel only between devices you control, over your own local network:

The host (one machine with a GPU) runs Whisper locally via whisper-cli.exe — recognition never calls out to any external API.
A client (desktop app or the Meet Recorder extension) sends audio to the host you configured, authenticated with a shared secret exchanged for a short-lived bearer token. See the security model for details.
If the extension can't reach your configured host (offline, wrong network, etc.), the recording is saved to your Downloads folder instead of being discarded — it still never leaves your machine.

No audio, transcript, or setting is ever sent to Mova Flow's developer, to any analytics service, or to any third party. There are no ads, no trackers, and no telemetry.

Chrome extension permissions

Mova Flow Meet Recorder requests the following, each used only for the purpose below:

tabCapture / offscreen — capture the Meet tab's audio and mix it with your microphone into one recording.
storage — remember your configured host address and secret, and in-progress recording status, locally in the browser.
activeTab — identify the current Meet call's tab when you press Record.
downloads — save the recording as a .wav file when your host can't be reached.
host_permissions (the address you configure) — send the recording to your own Mova Flow host for transcription.

Data retention and deletion

Audio and transcripts are stored only on the host and/or client devices you run Mova Flow on. Delete an entry from the History tab (or delete the underlying files/folder) to remove it — there is no remote copy to also delete, since none exists.

Changes to this policy

If this policy changes, the "Last updated" date above will change and the new version will be published at this same URL.

Contact

Questions about this policy or the project: open an issue on github.com/f3an/Mova-Flow.