Complete Privacy with Local Processing
Stenox can operate completely offline using local models for both transcription and AI enhancement. This means your audio and text never leave your Mac - perfect for sensitive content, confidential work, or privacy-conscious users.Why Privacy-First?
Complete confidentiality
Healthcare, legal, financial, or any sensitive content.
Offline functionality
Works on airplanes, remote locations, or with no internet.
No third parties
Your data never sent to external services.
No API costs
No per-minute charges or external API fees.
Privacy-First Setup Guide
Follow these steps to configure Stenox for completely private operation.Step 1: Configure WhisperKit (Local Transcription)
1
Open Stenox Settings
Click the Stenox menu bar icon → Settings
2
Go to Models tab
Select the Models tab
3
Select WhisperKit
Under Transcription Provider, choose WhisperKit
4
Choose a model
Select your preferred model:
- base.en (142 MB) - Fastest, English only
- small.en (483 MB) - Better accuracy, English only
- base (142 MB) - Multilingual (100+ languages)
- small (483 MB) - Better accuracy, multilingual
5
Download model
Click Download and wait for completion (~142 MB or ~483 MB)Model saved to:
~/stenox-models/whisper/6
Verify offline mode
Turn off Wi-Fi and test a dictation - it should work perfectly!
Step 2: Configure MLX (Local AI Enhancement)
1
In the same Models tab
Under AI Enhancement Provider, select MLX
2
Choose a model
Select based on your Mac’s specifications:
- Gemma 3n 2B (~1.2 GB) - Best accuracy, recommended
- Qwen 2.5 1.5B (~1 GB) - Fastest, 8GB RAM minimum
- Phi-3 Mini (~2.4 GB) - Balanced quality, 12GB RAM recommended
- Gemma 3n 4B (~2.5 GB) - Higher quality, 16GB RAM recommended
3
Download model
Click Download and wait for completion (~1-2.5 GB)Model saved to:
~/stenox-models/mlx/4
Test enhancement
Perform a dictation - it will be transcribed AND enhanced locally
Step 3: Verify Privacy Settings
1
Check active providers
In Settings, verify:
- Transcription: WhisperKit
- AI Enhancement: MLX (or None)
2
Remove cloud API keys (optional)
For complete privacy, remove any cloud API keys:
- Go to Transcription tab → Remove DeepGram/AssemblyAI/Groq keys
- Go to AI Enhancement tab → Remove Gemini/Groq keys
3
Test offline
- Disconnect from internet (turn off Wi-Fi)
- Perform a dictation
- Verify transcription and enhancement work
4
Done!
Stenox now operates 100% locally with complete privacy.
What You Get
Complete Privacy
- Audio stays local - Voice recordings never uploaded
- Text stays local - Transcriptions processed on-device
- No internet required - Works offline
- No logging - Nothing tracked or stored externally
- No third parties - No cloud providers see your data
No API Costs
- No per-minute charges - Local processing has no external fees
- No API limits - No third-party rate limits
- No credit cards for providers - No cloud provider accounts needed
Full Functionality
- All features work - Transcription, enhancement, profiles, vocabulary
- Customizable - Create profiles for different use cases
- Auto-activation - Profiles switch based on active app
Performance Expectations
Processing Time
With local processing, expect these speeds:| Configuration | Total Time | Breakdown |
|---|---|---|
| WhisperKit base.en only | ~3-5 seconds | 3-5s transcription |
| WhisperKit + MLX Gemma 3n 2B | ~5-7 seconds | 3-4s transcription + 2-3s enhancement |
| WhisperKit small.en + MLX Gemma 3n 4B | ~8-10 seconds | 5-6s transcription + 3-4s enhancement |
Local processing is slower than cloud (which can be ~1-2 seconds total), but provides complete privacy.
Apple Silicon Note
MLX requires Apple Silicon. Intel Mac users can use WhisperKit for local transcription, but need cloud providers for AI enhancement.
Privacy Use Cases
Healthcare & Medical
Healthcare & Medical
Why private: HIPAA compliance, patient confidentialitySetup:
- WhisperKit for medical dictation
- MLX for note formatting
- Custom vocabulary for medical terms
- Profile for EMR/EHR applications
Legal Work
Legal Work
Why private: Attorney-client privilege, confidential documentsSetup:
- WhisperKit for case notes, briefs
- MLX for professional formatting
- Vocabulary for legal terminology
- Profile for document management apps
Financial Services
Financial Services
Why private: Client confidentiality, regulatory complianceSetup:
- WhisperKit for financial analysis
- MLX for report formatting
- Profile for Excel, financial software
Journalism
Journalism
Why private: Source protection, sensitive investigationsSetup:
- WhisperKit for interview transcription
- MLX for article drafting
- Profiles for different publications
Personal Privacy
Personal Privacy
Why private: Personal preference, data sovereigntySetup:
- WhisperKit for all dictation
- MLX for text improvement
- Complete offline operation
Optional: Disable AI Enhancement
If you want the fastest local processing or don’t need enhancement:1
Open Settings → AI Enhancement tab
Go to the AI Enhancement settings
2
Select 'None'
Choose None as the AI enhancement provider
3
Save
Enhancement will be skipped, reducing processing time to ~3-5 seconds (WhisperKit only)
- Faster processing (3-5s vs 5-7s)
- Less RAM usage
- Still 100% private
- Raw transcription without formatting
Advanced Privacy Configuration
Custom Model Storage Location
Change where models are stored:- Default Location
- Custom Location
Models stored in
~/stenox-models/Encrypted Disk Image (Advanced)
For maximum security, store models on encrypted disk image:1
Create encrypted disk image
Use macOS Disk Utility to create an encrypted APFS image
2
Mount the image
Mount the encrypted disk and unlock with password
3
Change model directory
Point Stenox model directory to encrypted disk
4
Download models
Models are now stored encrypted at rest
Troubleshooting
Models won't download
Models won't download
- Models require internet to download (one-time)
- After download, they work offline forever
- Ensure sufficient disk space (2-5 GB)
Processing is too slow
Processing is too slow
- Use base.en instead of small.en (faster)
- Use Qwen 2.5 1.5B or Gemma 3n 2B instead of larger models (faster)
- Skip AI enhancement (None) for fastest processing
- Consider hybrid approach (local transcription + cloud enhancement)
MLX not available (Intel Mac)
MLX not available (Intel Mac)
- MLX requires Apple Silicon
- Options for Intel Macs:
- Use WhisperKit alone (no enhancement)
- Use cloud enhancement (Gemini/Groq)
- Upgrade to Apple Silicon Mac
Out of disk space
Out of disk space
- Delete unused models from
~/stenox-models/ - Use smaller models (base instead of small)
- Skip AI enhancement to save 1-2.5 GB
Privacy Checklist
✅ Transcription: WhisperKit (local) ✅ AI Enhancement: MLX (local) or None ✅ Offline test: Works with Wi-Fi off ✅ Cloud API keys: Removed or not entered ✅ Internet not required: All models downloaded ✅ Verified: No data sent to cloudWith this configuration, Stenox operates entirely on your Mac with zero external communication.
Hybrid Approach (Alternative)
If you want privacy for audio but cloud quality for text: Setup:- Transcription: WhisperKit (local) - Audio stays private
- Enhancement: Google Gemini or Groq (cloud) - Text enhanced in cloud
- Most sensitive data (audio) stays local
- High-quality enhancement via cloud
- Faster than full local (4-5s vs 7-10s)
Cloud API Keys & Privacy Policies
When using cloud providers, Stenox supports bring-your-own-API-keys. This means your data privacy is governed by your API provider’s policies, not Stenox.Your API, Your Rules: Stenox never sees your API keys or data. All communication goes directly from your Mac to your chosen provider using your credentials.
Secure API Key Storage
macOS Keychain Storage
API keys are stored securely in your macOS Keychain, the same system that protects your passwords and certificates.
Single Purpose Only
Keys are only used to access your chosen provider. Stenox has no other use for your API keys - no analytics, no tracking, no secondary purposes.
Never Transmitted
Your API keys never leave your Mac except to authenticate directly with your provider’s API.
You Control Access
You can view, modify, or delete your API keys at any time through Stenox settings or macOS Keychain Access.
Privacy Governance
Your API key’s privacy settings are fully honored:Enterprise & Business Accounts
If you have enterprise or business accounts with your cloud provider (DeepGram, AssemblyAI, Groq, Google, etc.), your organization’s privacy policies are automatically applied.
Private Policy Attachments
Any private policies or data processing agreements attached to your API keys are fully honored and enforced by your provider.
Direct Communication
Stenox sends data directly to your provider using your API key - no intermediary servers.
Provider Compliance
Your provider’s security certifications (SOC 2, HIPAA, GDPR, etc.) apply to your API requests.
How It Works
1
You provide API key
Enter your API key in Stenox settings
2
Stenox uses your credentials
All requests use your API key directly
3
Provider applies your policies
Your enterprise policies, privacy settings, and agreements are enforced
4
You maintain control
Data processing follows your provider account’s rules

