Security

Built by a security engineer

Ritely was built with a security-first mindset from day one — not bolted on afterward. Here's exactly what that means in practice.

Your audio and transcripts

• Audio is held in memory only while it's being processed — never written to disk, on our servers or on your device.
• We do not log dictation transcripts, before or after polishing.
• The desktop app itself never writes recordings or text to local storage.

Network security

• Every request between the desktop app and our backend uses HTTPS with certificate verification enabled — no exceptions except an explicit localhost override for local development.
• The desktop app never talks to the Gemini API directly; all calls are proxied through our own backend, so no API key ever ships inside the app.
• Requests to our backend require an app-auth token, rejected server-side if missing or invalid.

Text injection safety

Before any polished text is typed into your active window, it's sanitized to strip control characters, ANSI escape sequences, and other constructs that could otherwise trigger unintended keystrokes or shortcuts.

Account and database security

• Authentication is handled entirely by Supabase Auth — we write zero custom password-handling code.
• Row Level Security is enabled on every database table, with policies ensuring you can only ever read your own data.
• Our database's service-role key (which bypasses these protections) is only ever used in server-side code and is never exposed to the browser.

Website security

• Security headers are enforced on every response: Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, X-Content-Type-Options, and Referrer-Policy.
• No third-party trackers or advertising scripts run on this site.
• All source code lives in a private repository with restricted access.

Dependencies

Both the desktop app and this website are built on a small set of well-known, actively maintained dependencies. We periodically audit them for known vulnerabilities and update promptly when issues are found.

Reporting a security issue

If you've found a security vulnerability, we'd genuinely appreciate hearing about it. Email security@ritelyapp.com with details, and we'll respond as quickly as we can.