Security
Your meetings stay on your computer.
Unidesk is built local-first. No bot joins your calls, nothing syncs to the cloud, and cloud AI is off until you switch it on. Here's exactly what stays, what leaves, and how it's protected.
Your data
Stored on your computer
Recordings, transcripts, summaries and notes live in a database and folder on your computer. Nothing syncs to the cloud.
Not used for training
We don't use your meetings to train AI models. Cloud requests go only to the AI providers that process them.
Delete anytime
Delete a meeting and it's gone from your computer. Ask us to delete your account and we remove it within 30 days.
Data flow
What leaves your computer
Nothing, unless you turn on a cloud feature, and then only what that feature needs.
- On-device AI (Free)
- Nothing leaves your computer. Transcripts and summaries are made by models running on your machine.
- Dictation
- Always on your computer, on every plan. Your voice is never sent anywhere.
- Cloud transcripts (Pro and Max)
- Audio is cut into short chunks and sent over an encrypted connection to our cloud service, then to the speech model. The transcript comes back; the audio is not kept on our servers.
- Cloud summaries (Pro and Max)
- Only the transcript text is sent, never the audio. Requests through OpenRouter go only to providers that keep no data.
- AI apps you connect (MCP)
- Off until you turn it on. An AI app you allow reads just what it asks for, on your computer, never through our servers. That app's own terms then apply.
- Sign-in
- Your email, to send a one-time code. Handled by Amazon Web Services in India.
- Payments
- Handled by Razorpay (orders outside the United States) and Paddle.com (US orders). We never see or store your card or UPI details.
- What we keep
- Your email, plan and usage counts while your account is active. That's it.
Protection
How we protect it
The safeguards built into the app and our servers.
Encrypted in transit
Everything the app sends to the cloud travels over HTTPS.
Keys locked in your system keychain
Sign-in tokens are encrypted with your computer's own keychain before they're saved.
No passwords to leak
You sign in with a one-time code sent to your email. There's no password for anyone to steal.
Signed and notarised app
The Mac app is signed with an Apple Developer ID and notarised by Apple. Updates come from our own download server.
Locked-down app
The app's interface runs isolated from your system, and debugging hooks are switched off in release builds.
Guarded cloud
Every cloud request is checked against your sign-in, with per-account limits that stop abuse.
AI apps
AI app connections (MCP)
Let Claude, Codex, Cursor and other AI apps use your Unidesk data, with guardrails you control.
- AI apps connect through a private socket or pipe on your computer, with a secret token, never a network port.
- You allow each AI app, and approve its changes unless you turn on Always allow changes for it.
- Unidesk gives AI apps no delete tool.
- Transcripts stay off until you allow them.
- Meeting text is marked untrusted, so AI apps are told never to follow instructions inside it.
- Rate limits cap every app, and Pause all AI access stops them all at once.
Your part
Four habits that keep it safe
A few settings on your side close the remaining gaps.
- 1Turn on FileVault (Mac) or BitLocker (Windows). Unidesk doesn't encrypt its local database itself, so disk encryption protects it.
- 2Lock your screen when you step away, and back up your computer.
- 3Keep your email account secure. Never share your one-time code.
- 4Tell everyone on a call before you record and get their agreement.
Found a security issue?
Email us with the details and steps to reproduce. We read every report, and we never take legal action against good-faith research.
The full details are in our Privacy Policy.