Epilude Privacy Review: Safe for Client Calls and Dictation?

Short answer: Epilude can keep your dictation, meeting transcripts, and read-aloud text entirely on your Mac, but only if you switch on Local Mode or buy the local-only plan, because its defaults send audio to OpenAI and text to Anthropic or ElevenLabs. Our verdict is USE WITH CAUTION for client work. Policy reviewed October 2026, one day after Epilude updated its privacy policy and launched Narrator. Epilude is a Mac voice suite that types what you say into any app, records calls without a bot joining, and now reads documents aloud. Its homepage says everything is processed privately on your Mac. The fine print is more nuanced, and for a freelancer who dictates client emails and records client calls, the gap matters. Here is what the documents say, measured against how we vet privacy claims.

What Epilude does with your data

Privacy at a glance

Privacy dimension	Epilude’s answer
Trains on your data?	No; providers also contractually barred from training
Training opt-out	Not needed; no-training applies to all content
Data retention	Cloud audio not kept; LLM data deleted within 30 days
Third-party sharing	OpenAI, Anthropic, ElevenLabs process content in cloud modes
Storage region	Transcripts on your Mac; cloud processing in the US
Enterprise-team tier	Teams “coming soon”; no SOC 2, no DPA published
Default mode	Cloud for dictation, meeting transcripts, summaries, voices

Epilude is made by Antelude LTD, a small bootstrapped company that says it was designed in Europe, while its terms place disputes in San Francisco courts under California law. Its privacy policy was last updated on October 7, 2026 (per Epilude’s privacy policy, retrieved 2026-10-08). The key sentence sits in the introduction: the app runs in two modes. Cloud Mode is the default, and it sends your dictation audio to Epilude’s cloud for transcription. Local Mode runs an on-device model called EP-1, and the policy says dictation audio and transcripts then never leave your Mac.

Each feature has its own switch, and the Trust Center lays them out clearly (per Epilude’s Trust Center, retrieved 2026-10-08):

• Dictation and Cleanup. In cloud mode, OpenAI receives your audio, and a cloud language model receives the transcript plus your custom vocabulary for editing.
• Notetaker. Meeting audio from your microphone and from your Mac’s speakers goes to a cloud transcription model by default. Summaries and action items use a cloud model by default too, which receives the full transcript text even when the meeting was transcribed locally.
• Actions. Rewriting selected text by voice has no on-device model at all. Every Action sends the selected text and your command to the cloud.
• Narrator. Cloud voices are the default on new installs, and they send the text you want read aloud to ElevenLabs. Sharing a narration on the web uploads its text and audio, whichever voice you used.
• Context Awareness. If enabled, the app may collect text visible on screen in the app you are dictating into, to improve accuracy. You can turn it off in settings.

On training, the language is firm and consistent across all three documents: Epilude says it does not train on your content, and its speech and language model providers are configured not to either. The terms add that data shared with OpenAI or Anthropic is deleted after 30 days (per Epilude’s Terms of Service, retrieved 2026-10-08). Your notes, transcripts, and summaries live on your Mac, and keeping raw meeting audio is an opt-in setting that ships switched off.

Outside your content, the usual SaaS data flows apply in both modes: account details, usage data that includes which app you dictated into, and per-dictation performance records tied to your account. The policy also allows disclosure of personal data to advertising partners such as LinkedIn for marketing purposes, and says data is transferred to and processed in the United States.

What this means for solo freelancers

Epilude’s design is better than most dictation apps we have reviewed, including the cloud-first tool in our Willow Voice privacy review. The risk is not hidden misuse. It is a gap between the marketing line and the defaults, plus responsibilities that shift onto you.

Scenario 1: you install the free trial and dictate a client proposal. The homepage promise of private processing suggests nothing leaves your Mac. In practice, a fresh Pro or trial install uses Cloud Mode, so your spoken proposal, including the client’s name, budget, and scope, goes to OpenAI for transcription and to a language model for cleanup. Based on the policy as written, that content is not used for training and is deleted within 30 days, but it still left your machine, which may already breach a strict NDA that bars third-party processing.

Scenario 2: you record a client call with Notetaker. No bot joins, so the other party sees no recording notice. The terms make you responsible for any notice and consent that recording laws require, and Epilude explicitly declines to tell you whether consent is needed. In all-party-consent US states and across much of the EU, silent recording of a client call carries real legal and reputational risk. Even with local transcription, the summary step sends the full transcript text to the cloud unless you choose the local summary model.

Scenario 3: you work for EU clients. The policy treats you as the controller of meeting data, which routinely includes people who never agreed to Epilude’s terms. Epilude says it aligns with GDPR, but it publishes no data processing agreement, no SOC 2 report yet, and processes cloud content in the US. Based on the policy as written, you would hold the controller duties without processor paperwork to show a client who asks. Our explainer on what a data processing agreement means for solo consultants covers why that gap matters.

One inconsistency is worth flagging: the terms say meeting summaries are generated in the cloud in every case, while the privacy policy, Trust Center, and pricing page all describe a local summary model. We read the newer privacy policy as authoritative, but confirm the setting yourself before relying on it.

How to use it safely

Epilude is one of the few voice tools where a fully local setup is genuinely available. Configure it before any client material touches the app:

1. Choose EP-1 for every feature. Open Settings, then Models. Dictation, Notetaker, and Narrator each have their own model choice, and changing one does not change the others. Set dictation and Cleanup to EP-1, Notetaker transcription to Local, and summaries to the Local summary model.
2. Switch Narrator to the EP-1 voice. Cloud voices are the default for new installs. Pick EP-1 before you ask it to read a contract or a client brief aloud, and turn off the option that automatically keeps cloud narrations on the web.
3. Avoid Actions for client text. Actions has no local model. Select and rewrite client material in a local tool instead.
4. Turn off Context Awareness in settings so the app does not pull on-screen text from your mail or chat client.
5. Consider the Pay Once plan. At $59 one-time, it is local-only by design: dictation, cleanup, meeting transcription, and summaries all run on device. It needs an Apple silicon Mac, and local summaries need 16 GB of memory.
6. Announce every recording. Tell clients at the start of the call that you take AI-assisted notes on your own machine, and note their agreement in the meeting notes. Without a bot, that announcement is your only notice.
7. Encrypt and clean your Mac. Keep FileVault on, since transcripts live on disk, and delete meetings and narrations at the end of each engagement. Narrations are separate copies and must be deleted on their own.

Privacy-friendlier alternatives

If you want local processing without having to audit three separate model settings, or you need a vendor with stronger paperwork, these options cover the same jobs. All links are direct, with no affiliate tracking.

• MacWhisper for transcription and meeting recording. What it gives you that Epilude doesn’t: transcription runs on your Mac by default, with no account needed for the core features, so there is no cloud default to undo. Pricing band: free version, then a one-time Pro license. Best for: consultants who transcribe interviews and client calls and want a single upfront cost.
• superwhisper for dictation into any app. What it gives you that Epilude doesn’t: a choice of local speech models per mode, with cloud models only when you deliberately select them. Pricing band: free tier with smaller models, then a Pro subscription or lifetime license. Best for: writers and developers who dictate all day and want local-first cleanup.
• Proton Drive for storing transcripts and meeting notes. What it gives you that Epilude doesn’t: end-to-end encrypted storage run from Switzerland, so exported notes and summaries are protected once they leave the app folder. Pricing band: free tier; paid plans roughly $5 to $13 per month. Best for: freelancers who must share call notes with clients without emailing plain files.

Whichever tool you choose, protect the account behind it with a password manager such as Bitwarden or 1Password and two-factor authentication.

The trade-off is convenience. Epilude bundles dictation, bot-free meeting notes, and read-aloud in one app, and its local mode is a real option, not a marketing gesture. A practical split works for many solo consultants: keep Epilude, fully switched to EP-1 or on the Pay Once plan, for client work, and allow cloud features only for personal drafts and public material.

The verdict

Frequently asked questions

Does Epilude train AI models on my dictation or meetings?

No, according to all three of its documents. The privacy policy, terms, and Trust Center each state that Epilude does not train models on your audio, transcripts, or other content, and that its speech and language model providers, OpenAI and Anthropic, are contractually configured not to train on it either. Data shared with those providers is deleted after 30 days, per the terms. In Local Mode, your dictation never reaches any provider at all.

Is Epilude really processed privately on my Mac?

Only if you choose it. Cloud Mode is the default for dictation on Pro and trial accounts, Notetaker transcribes in the cloud by default, summaries use a cloud model by default, and Narrator uses cloud voices on new installs. Actions always uses the cloud. Selecting EP-1 for each feature, or buying the local-only Pay Once plan, keeps audio and transcripts on your Mac, which is what the homepage implies by default.

Is Epilude GDPR-friendly for EU client work?

Based on the policy as written, it is a partial fit. Epilude lists GDPR rights, says its controls map to GDPR, and treats you as the controller of meeting data. But it publishes no data processing agreement, holds no SOC 2 report yet, and processes cloud content in the United States. For EU client calls, run everything on EP-1 so personal data never reaches a processor, and get consent before recording.

Can I use Epilude for HIPAA-covered information?

Epilude does not mention HIPAA or offer a Business Associate Agreement in its privacy policy, terms, or Trust Center. Based on the policy as written, sending protected health information through its cloud modes would leave you without the agreement HIPAA expects from a vendor. If you serve covered clients, use only the fully local Pay Once setup on an encrypted Mac, or keep health data out of the app entirely.

Do I need consent to record calls with Epilude Notetaker?

Often, yes, and Epilude puts that responsibility on you. Because no bot joins the meeting, other participants get no automatic recording notice. The terms require you to follow all recording laws and obtain any needed consents, and Epilude says it will not judge whether the law requires consent for a given meeting. Announcing the recording at the start of every client call is the simplest way to stay on safe ground.

Is Epilude safer than other AI meeting note takers?

On architecture, yes. Bot-based note takers send audio to the cloud with no local option, while Epilude can transcribe and summarize entirely on device and publishes a full subprocessor list. On defaults and paperwork, it is average: cloud processing is on out of the box, team controls are not yet available, and there is no DPA. Configured locally, it is among the stronger options we have reviewed.

Sources

• Epilude Privacy Policy, last updated 2026-10-07 (retrieved 2026-10-08)
• Epilude Terms of Service (retrieved 2026-10-08)
• Epilude Trust Center, including subprocessor list (retrieved 2026-10-08)
• Epilude pricing and plan comparison (retrieved 2026-10-08)
• Epilude homepage and Narrator launch copy (retrieved 2026-10-08)
• Product Hunt, Epilude Narrator launch (2026-10-07) (retrieved 2026-10-08)

Reviewed by Jérémy, founder of AidTaskPro and GreenBudgetHub. Based in central France. Privacy posture sourced from public policies and vendor documentation as of October 8, 2026.