Willow Voice Privacy Review: Is It Safe for Freelance Client Work?

Short answer: Willow Voice does not keep your audio or dictated text by default, but every dictation is processed in the cloud, and the new Knowledge feature asks you to hand over personal context that the privacy policy does not yet describe. Our verdict is USE WITH CAUTION for client work. Policy reviewed October 2026, on the day Willow Knowledge launched. Willow is a voice dictation app for Mac, Windows, and iPhone that turns speech into polished text in any app, from Gmail to Slack to ChatGPT. On October 6, 2026, it added Willow Knowledge, which lets you import your writing style and personal context from ChatGPT, Claude, or Gemini. For a solo consultant, that means client names, project details, and draft emails flow through a cloud pipeline every time you talk. Here is what the documents say, measured against how we vet privacy claims.

What Willow Voice does with your data

Privacy at a glance

Privacy dimension	Willow Voice’s answer
Trains on your data?	No, unless you opt in to Help Improve Willow
Training opt-out	Off by default; Private Mode is the default
Data retention	Audio and text not kept server-side in Private Mode
Third-party sharing	Unnamed processors under zero-retention, no-training terms
Storage region	United States cloud infrastructure
Enterprise-team tier	Business enforces privacy mode; DPA only on Enterprise
Knowledge and style memory	Not covered by the August 2026 policy

Willow’s privacy policy was last updated on August 5, 2026 (per Willow’s privacy policy, retrieved 2026-10-06). It describes two modes. Private Mode is on by default: your voice is sent to the cloud, transcribed, and returned, and neither Willow nor its providers keep the audio or the resulting text. The second mode, Help Improve Willow, is opt-in. If you switch it on, Willow keeps anonymized recognized text, never audio, to tune its correction models.

Your transcript history and any saved recordings live on your own device. Willow’s help center adds that this history does not follow you to a new computer, because it is never synced to Willow’s servers (per Willow’s help article on data protection, retrieved 2026-10-06).

Three other data flows matter for client work:

• Context Awareness. This optional setting lets Willow read text near your cursor in the active window so it can spell names and jargon correctly. The policy says that text is processed briefly and not stored or used for training.
• Google connection. If you link a Google account, Willow gets read-only access to calendar events, attendee names and emails, and contacts. The policy describes this as pass-through: data is fetched on request and discarded afterward.
• Service providers. Willow uses vendors for cloud hosting, transcription, security, diagnostics, support, and payments. The policy does not name them, but says those handling content are bound by zero data retention and may not train their own models on it.

Willow’s security page states its infrastructure runs in the United States, that it holds a SOC 2 Type II report, and that it offers a HIPAA Business Associate Agreement (per Willow’s security page, retrieved 2026-10-06).

The gap is the newest feature. The Product Hunt launch for Willow Knowledge describes importing your writing style and personal context from other AI assistants. The paid Pro plan also advertises a “smart memory” of your writing style. Neither the August policy nor the help center explains where that memory and imported context are stored, how long they are kept, or whether Private Mode applies to them.

What this means for solo freelancers

Willow’s defaults beat many AI writing tools we have reviewed. The risk sits in three habits; our guide on opting out of AI training for freelance work covers the wider basics.

Scenario 1: you import your ChatGPT memory into Willow Knowledge. ChatGPT and Claude memories often hold more than tone. They can include client names, the projects you are juggling, your rates, and details you mentioned months ago. If you paste that summary into Willow, you create a new copy of client-related context inside a vendor whose policy, as written, does not describe that store. Based on the policy as written, you cannot tell your client where that copy lives or how to delete it.

Scenario 2: you dictate a reply to a client email with Context Awareness on. Willow may read text around your cursor, which in an inbox can be the client’s own message. The policy says this text is not retained, and the help center says it is not linked to your account. That is a reasonable promise, but it is still client content leaving your machine for a US cloud service on every dictation. If your contract limits where client material can be processed, this approach carries a contract-breach risk.

Scenario 3: you work for EU clients on the Pro plan. Willow lists a data processing agreement only under its Enterprise tier. As a solo freelancer on Pro, you would be sending EU personal data, such as names and email contents, to a US processor with no signed DPA in hand. Based on the policy as written, that leaves the controller-processor paperwork thin if a client or regulator asks. Our explainer on what a data processing agreement means for solo consultants walks through why that document matters.

Willow’s own changelog also shows the product has had rough edges. In August 2025 it fixed a bug where personal insights surfaced from apps such as Cursor and Windsurf, and in September 2025 it stopped clipboard data leaking into third-party apps like Raycast (per Willow’s public changelog, retrieved 2026-10-06). Both were fixed, but they show how much of your screen a dictation tool can touch.

How to use it safely

Willow gives you real controls. Set them before you dictate anything for a client:

1. Confirm Private Mode is on. Open Willow’s settings, go to Privacy, and check that Help Improve Willow is off. It is off by default, but verify after every major update.
2. Turn off Context Awareness for client apps. In settings, switch Context Awareness off. You lose some name accuracy, which you can recover by adding client names to your custom dictionary instead.
3. Skip Willow Knowledge for now, or feed it a clean profile. If you want the feature, write a short style note by hand: tone, sign-off, preferred spelling. Do not paste your full ChatGPT or Claude memory export, and never include client names, rates, or project details.
4. Leave Google disconnected unless you need meeting features. The calendar link exposes attendee names and emails, which are often your clients’ contacts.
5. Clear local history on a schedule. Under Settings, Privacy, you can delete all local transcripts in one click. Do it at the end of each client project, and turn on full-disk encryption (FileVault on Mac, BitLocker on Windows) so local history is protected if your laptop is lost.
6. Ask before you sign up for Business or Enterprise. If a client requires zero retention by contract, the Business plan enforces Privacy Mode for every seat, and Enterprise adds a signed DPA. Email Willow’s sales team and ask in writing how Knowledge data is stored before you rely on it.

Privacy-friendlier alternatives

If your client contracts rule out cloud processing, these tools keep speech recognition on your own hardware. All links are direct, with no affiliate tracking.

• superwhisper for Mac and iPhone. What it gives you that Willow does not: you can run Whisper-family speech models fully on your device, so audio never leaves your computer unless you pick a cloud model. Pricing band: a free tier with smaller models, then a paid Pro subscription or lifetime license. Best for: consultants who dictate client emails and want local-first with optional AI cleanup.
• MacWhisper for Mac. What it gives you that Willow does not: offline transcription of recordings and dictation with no account required for the core features. Pricing band: a free version plus a one-time Pro purchase. Best for: writers and researchers who transcribe interviews or voice notes and want a single upfront cost.
• Built-in operating system dictation (Apple Dictation on Mac and iPhone, Windows voice typing). What it gives you that Willow does not: no extra vendor in your data chain. On recent Apple silicon Macs, many languages are processed on the device. Pricing band: free. Best for: freelancers who need quick, basic dictation and can live without automatic rewriting.

Whichever tool you choose, keep the account behind it locked down. A password manager such as Bitwarden or 1Password with two-factor authentication protects the login that guards your settings and history.

The trade-off is polish. Local tools are slower to clean up filler words and rarely match Willow’s formatting across apps. A practical split works for many solo consultants: keep Willow, in Private Mode, for personal notes and internal drafts, and switch to an on-device tool for anything that names a client or falls under an NDA. That way you keep the speed where the stakes are low and remove the cloud hop where they are not.

The verdict

Frequently asked questions

Does Willow Voice train AI models on my dictation?

Not by default. Willow’s policy says Private Mode, which is switched on when you install the app, keeps neither audio nor dictated text, and its service providers are bound by no-training terms. Only if you opt in to Help Improve Willow does it keep anonymized recognized text to improve its own correction models. Audio is not kept in either mode. Check the Privacy tab after updates to confirm your setting.

Is Willow Voice GDPR-friendly for EU client work?

Based on the policy as written, it is a partial fit. Willow says it aligns with GDPR principles and offers access and deletion rights, but its infrastructure runs in the United States, and a data processing agreement is listed only on the Enterprise plan. A solo freelancer on Pro dictating EU personal data has no signed DPA, so document your own safeguards or choose an on-device tool.

Can I use Willow Voice for HIPAA-covered information?

Willow offers a Business Associate Agreement that individual users can sign from the Privacy section of the app, and the company says voice and text are not retained in that mode. Based on the policy as written, that is a stronger offer than most dictation tools. Sign the BAA before any health information is spoken, keep Context Awareness off, and confirm the arrangement with your covered client.

Where does Willow Knowledge store my imported context?

Willow has not published that yet. The privacy policy was last updated on August 5, 2026, two months before Knowledge launched, and neither the policy nor the help center describes how imported context or writing-style memory is stored, retained, or deleted. Until it does, treat Knowledge as a separate data store and keep client names, rates, and project details out of anything you import.

Does Willow read my screen while I dictate?

Only if Context Awareness is on. When enabled, Willow reads text near your cursor in the active window to improve spelling of names and terms. The policy says this text is processed briefly, not retained, and not used for training, and the help center says it is not linked to your account. When the setting is off, Willow does not read on-screen text.

Is Willow Voice safer than other cloud dictation apps?

On paper, its defaults are among the stronger ones we have seen: no stored audio, private mode by default, provider zero-retention terms, and a SOC 2 Type II report. The weak points are the undocumented Knowledge store and the missing DPA below Enterprise. If you need zero cloud exposure, an on-device tool such as superwhisper’s local models or MacWhisper is the safer choice.

Sources

• Willow Privacy Policy (last updated 2026-08-05) (retrieved 2026-10-06)
• Willow, Security page (retrieved 2026-10-06)
• Willow, Pricing and plan comparison (retrieved 2026-10-06)
• Willow Help Center, How Willow Protects Your Data and Privacy (retrieved 2026-10-06)
• Willow Help Center, Enable HIPAA Support in Willow (retrieved 2026-10-06)
• Willow Voice public changelog (retrieved 2026-10-06)
• Product Hunt, Willow Knowledge launch (2026-10-06) (retrieved 2026-10-06)

Reviewed by Jérémy, founder of AidTaskPro and GreenBudgetHub. Based in central France. Privacy posture sourced from public policies and vendor documentation as of October 6, 2026.