Cursor FlowSecurity and data
What happens to your voice and text, in plain language. If anything here is unclear, email us and we will answer directly.
Where does my audio go?
It depends on the mode you choose in Settings.
| Mode | Where speech is recognised | What leaves your device |
|---|---|---|
| Cursor Flow Cloud (default) | Our cloud speech and AI processing | Audio and the resulting text, over an encrypted connection, only to produce your text |
| Offline mode | On your PC | Nothing. Audio never leaves the PC |
| Phone to PC | Same as the mode above | Text, files and images travel over your office Wi-Fi, or securely when your phone and PC are not on the same network |
How long is my data kept?
- Cloud audio: Cursor Flow does not store your audio after processing. Our speech-recognition provider may retain audio for up to 30 days for abuse monitoring and service restoration. That retention is outside our direct control, and the audio is deleted after that period. If this matters for your work, use offline mode.
- Phone-to-PC messages and files: deleted immediately after delivery. Anything that cannot be delivered is permanently purged after 24 hours.
- History, vocabulary and styles: stored on your PC. You can delete any entry, or all of them, in the app.
- Account data: kept while your account is active and deleted within 30 days of a deletion request.
Is my dictation used to train AI models?
Cursor Flow does not use your audio or text to train models. They are processed only to give you your text.
Is it encrypted?
Yes. Everything sent between the apps, our servers and our providers uses TLS encryption in transit. Data stored in our cloud database is encrypted at rest by our hosting provider.
Will it ever type into a password field?
No. Cursor Flow detects password fields and never types into them. If no text field is focused when you finish speaking, the text is held in the dictation bar instead of being typed somewhere unexpected, so you can place it with one click.
Does it paste, or type like a keyboard?
It doesn’t paste. Text is typed key by key at your cursor, the way a keyboard would.
How do I delete my data?
- Delete individual dictations from History in the desktop app, or clear all History in Settings → Privacy.
- To delete your account and all cloud data, email hello@cursorfllow.com from your account email. We confirm by email when deletion is complete.
Who processes data for Cursor Flow?
Supabase (account database), Lemon Squeezy (card and international checkout, as Merchant of Record), bKash (separate local Bangladesh payments), our cloud speech-recognition and AI processing providers, and Cloudflare and our site host for the website. Each processes data only on our instructions. Full details are in the Privacy Policy.
Reporting a security issue
Email hello@cursorfllow.com with the subject “Security”. We acknowledge reports within 2 business days and will not take action against good-faith research.
Frequently asked questions
Does Cursor Flow record all the time?
No. The mic opens only while you hold the shortcut, after you click to start, or when you turn on start-by-saying “Hey Cursor Flow”. That phrase is heard on your PC; audio is sent to the cloud only after it is heard.
Can I use Cursor Flow without sending audio to the cloud?
Yes. Turn on offline mode and speech is recognised on your PC. Cloud AI correction is not available in offline mode.
Do you sell my data?
No. We do not sell personal data or use it for advertising.