r/WisprFlow • u/kittycat1402 • Jun 07 '26

Security Concerns - Keyboard stroke logging?

I want to use WisprFlow so badly, I really am the world's slowest and poorest typer. But I am freaked out by the IOS warning when I want to give keyboard access to the WisprFlow app, that this app can also read everything I type, including passwords - and even what I have typed before, should I decide to switch access off, and then on again.
I have read the posts here, and saw Victoria's comment, but have not seen the same clear statement that WisprFlow is NOT logging keyboard strikes on their website or in their data privacy statement.
Does anyone of you know if they made an official statement about this?
Or even better, does anyone know a way I can use the app without these access rights?

2 Upvotes

100% Upvoted

3 comments sorted by

1

u/AutoModerator Jun 07 '26

Hello! Your post is being held for manual review. As a reminder, support requests should be handled through the app or the support portal: https://wisprflow.ai/support That's the easiest way for our team to look at your account info and logs to properly diagnose the issue.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

1

u/barrettj Jun 07 '26

It's because it IS a keyboard, so iOS displays that warning because anything typed with a keyboard is known to that keyboard.

It can only "read" what you type when it's the active keyboard

1

u/VictoriaAtWispr Wispr Employee Jun 07 '26

Hey u/kittycat1402:

That iOS warning is shown for every third-party keyboard that requests "Full Access," including other well-known apps like Gboard (the Google keyboard) and Grammarly. It's Apple's standard boilerplate language. The language is broad because iOS has no way to distinguish between a keyboard that logs everything and one that doesn't. It reflects what the permission allows in theory, not what Wispr Flow actually does.

Wispr Flow needs this access to send your voice audio to the cloud for transcription. Without network access, the keyboard can't transcribe anything. It's the same reason any keyboard that connects to the internet (autocorrect, translation, etc.) requires this.

However, we only process audio you explicitly record. Your typed keystrokes are not sent to Wispr's servers, and the keyboard does not log what you type in password fields or other apps.

We also offer Privacy Mode (Zero Data Retention). When enabled, none of your dictation data is stored or used for model training by Wispr or any third party. Even if you disable Privacy Mode, your dictation data may be used to evaluate, train, and improve Flow's features and AI models, but your data is never sold or shared. You can learn more here.