Service providers

We are withdrawing the planned finite customer-updater transition described under "Temporary Cloudflare updates" in our September 13, 2026 notice. The customer edition being prepared will continue the existing Cloudflare update route without a fixed expiry in the app. The September 13 entry remains below as a historical record; its planned fixed cutoff will not apply to this customer edition. The separate model-provider changes in that entry remain subject to their original notice period and activation checks.

Cloudflare, Inc. (United States) already serves update checks and user-selected update downloads through `releases.whisperstream.io`. The released app already checks for updates without a fixed client expiry. Continuing that recipient, update-delivery purpose and connection-data scope does not introduce a new provider change or a new thirty-day updater notice period. Keeping the route available does not promise a particular update, guaranteed support, response times or future free official releases. The customer update channel will not make continued use of the free customer edition depend on payment.

In the customer edition being prepared, automatic checks will be infrequent, use timeouts and wait longer between retries during outages. You can request a manual check. Applicable EULA-amendment opt-out periods suppress automatic checks. A manual check does not bypass acceptance, onboarding or Lockdown controls. Downloads and installation require your choice, and the app verifies update signatures. An unavailable service does not prevent local use with installed compatible models.

Requests disclose your connection IP address, ordinary HTTP headers and the requested release URL to Cloudflare. The app does not attach audio, transcripts, a license key, or an account or device identifier. Scheduling timestamps and failure counts in the planned customer edition remain on your device. Cloudflare processes delivery information for Lanreal and may process network/security information for its own purposes under its privacy policy. Account-specific safeguards, log access and retention remain under review and must be resolved before the customer release. Stopping requests does not delete earlier records.

The separately announced model-provider transition cannot take effect before October 14, 2026 at 00:00 UTC, or before the September 13 notice period and remaining activation checks are satisfied. Public source distribution is separate. This correction does not announce that an installer or source release is available, begin an end-of-life period, or state that refunds, provider termination or data deletion are complete.

Contact support@whisperstream.io about this correction or to exercise applicable privacy rights, including objection or withdrawal of consent where relevant. Earlier purchase, notice, refund, continued-access, source and other binding obligations remain unaffected. This notice does not amend an agreement you already accepted or extinguish rights arising from previously published documents, including the archived version 2.0 EULA and Privacy Policy, or from reliance on earlier statements.

We plan to change the desktop app's model-download providers and online connections. This is advance notice. The changes are not activated by publishing this entry. We will publish the activation date after completing the remaining release and privacy checks; it cannot precede the date and notice period above.

Hugging Face model downloads. Required and user-selected local models will download from Hugging Face's public file services, including its Xet/CDN delivery infrastructure. Hugging Face, Inc. (United States) describes Hugging Face SAS (France) as its EU main establishment. Downloads may involve processing in the United States or other countries. This replaces Lanreal's Cloudflare R2 model delivery; there is no R2 model fallback. Installed compatible models continue to work locally.

GitHub speech-model backups. If Hugging Face remains unavailable after retries, the app will try the matching upstream sherpa-onnx release archive for Parakeet v2/v3, Qwen or Cohere. Requests use `github.com` and `release-assets.githubusercontent.com`. GitHub's privacy statement identifies GitHub, Inc. (United States) and GitHub B.V. (Netherlands). These backups do not apply to every model. Cancellation, integrity, disk and download-policy failures do not trigger them.

Both model routes disclose your connection IP address, ordinary HTTP headers (including the download library's User-Agent) and the requested model URL to the serving provider and its delivery infrastructure. The app does not attach audio, transcripts, generated speech, a license key, an account or device identifier, or a cloud-provider API key. It does not attach a Hugging Face authentication token. Downloaded files are verified locally before installation; models then run on your device.

Hugging Face and GitHub determine their own service-operation purposes. Their privacy policy and privacy statement describe their practices, including retention and international processing. We are still assessing the exact receiving entities and applicable transfer arrangements for these unauthenticated download routes. Public policy links alone do not establish those arrangements, and we will not activate the announced routes before completing that assessment and the remaining release requirements.

Temporary Cloudflare updates. Cloudflare, Inc. (United States) will continue to serve checks for critical corrective updates and user-selected update downloads through `releases.whisperstream.io` during a finite transition. Checks may occur automatically; installation requires your choice. Requests disclose the connection IP address, ordinary HTTP headers and requested release URL. The app does not attach audio, transcripts, a license key, account identifier or device identifier. Cloudflare processes delivery information for Lanreal and may process network/security information for its own purposes under its privacy policy.

The fixed UTC cutoff will be published before this route is activated and shown in the app. No update checks or downloads are available while the cutoff is unset or after it is reached. Corrective releases do not restart or extend the period. Lockdown and applicable acceptance controls also restrict this route. After the cutoff, the app offers a link you may choose to open in your browser. Keeping this route does not promise any particular update or ongoing development. Actual account safeguards, log access and retention arrangements remain under review and must be settled before activation. Ending requests does not itself delete earlier records.

Retired desktop-app roles. The planned edition will not activate or validate licenses through Polar, request Lanreal's R2 model or cloud-provider catalogs, submit ratings or feedback to Supabase, or initiate the earlier Featurebase request-board flow. Catalogs will be packaged or locally configured. Optional cloud cleanup remains a separate connection to the provider you choose when you enable it.

These changes do not say older installations have stopped connecting, provider accounts have closed, or historical records have been deleted. Polar's payment/refund processing, website services and necessary handling of historical information remain separate. Earlier-release services will be retired only after their remaining obligations are addressed.

Contact support@whisperstream.io to ask about the changes, object to relevant processing or withdraw consent where applicable. Privacy rights continue after the activation date. Necessary model downloads require a network connection unless compatible verified files are already installed or supplied through a supported local recovery route. This notice does not start the separate end-of-life transition or change existing purchase, refund or acceptance rights.

Whisperstream removes Hugging Face, Inc. and Hugging Face SAS from the current desktop-app recipient list. Production model downloads now use only Lanreal's `models.whisperstream.io` endpoint on Cloudflare infrastructure. This change stops the app from sending model-download connection data to Hugging Face and does not add a recipient, expand Lanreal-side collection, or change the model licenses and upstream attributions. It takes effect immediately under the Privacy Policy's legal and security exception rather than after prospective notice. See Privacy Policy Sections 3.3, 3.7, 3.8, 5, 7, and 14 for the current disclosure.

Whisperstream adds CORDNET OÜ, which operates Featurebase, to the public provider list for the external feature-request board already linked from the Software. This entry corrects an omission in the initial provider inventory; it does not introduce new processing or change Featurebase's existing role. Because the board was already available before this disclosure, advance notice was not provided. The Software now identifies Featurebase before opening the external destination, and Privacy Policy version 1.4 describes the submitted data, roles, retention, and transfer safeguards. See Privacy Policy Section 5 for the complete disclosure.

Whisperstream publishes its third-party provider list for the first time. The initial public list identified four providers: Polar Software Inc. (license activation and Merchant of Record), Hugging Face, Inc. (one-time model download on first run), Cloudflare, Inc. (update and model-download hosting or fallback), and Supabase, Inc. (reviews and feedback database). This entry is a baseline, not a change. See Privacy Policy, Section 5, for data categories, roles, jurisdictions, and transfer information.