The reason this clears review is structural, not contractual
A cloud vendor asks you to trust a policy: they promise not to retain your recordings, and you take that on faith backed by a contract. The speech still leaves your building, so the risk is real and the paperwork is how you manage it.
Whisper Master runs the speech model on your own hardware. The audio is processed in memory on the Mac and never written to a network socket. There is no retention policy to audit because there is nothing to retain — a difference your reviewer can verify from the network layer rather than from our word.
What we will not claim: the app is not air-gapped. Signing in, downloading the model the first time, and checking for updates all touch the network. Product analytics and usage statistics are currently on by default. For a regulated deployment those are switched off and enforced — see the disclosure table below, which lists every byte that moves.