Every server the Dictivo desktop app contacts, and why
Reference facts about every host the Dictivo desktop app can contact: the paths it calls, when it calls them, what each request carries, and what happens if your network blocks it.
Applies to: Dictivo 0.3.57 on macOS (Apple Silicon and Intel) and Windows x64. Read from the app's source and the published app by the Dictivo team on 10 November 2026.
Short answer
The Dictivo desktop app can contact five hosts: downloads.dictivo.app, app.dictivo.app, api.dictivo.app, api.lemonsqueezy.com and huggingface.co. Of these, api.dictivo.app serves only Cloud Fast, and huggingface.co is only a fallback for model downloads. The only request that carries audio is a Cloud Fast transcription. The list below is the one the app shows under Settings › Privacy › Connections, with the paths added.
The security page's host table · Check it with a network monitor
The list
These are all the hosts the app itself connects to. Every request uses HTTPS. The When, What it sends and If your network blocks it columns follow the app's own Connections list.
| Host | Paths | When | What it sends | If your network blocks it |
|---|---|---|---|---|
| downloads.dictivo.app | /latest.json (update check); /models/ggml-<model>.bin (model downloads); for an update, the installer for your platform, at the address the update check returns |
An update check about five seconds after launch and every 24 hours. Update downloads you install. The model downloads you start. Run check. | The update check sends the name and version of the app's update component. An update download asks for the installer for your platform. A model download asks only for the model file. No license key, no device id. | Dictivo keeps working. You get no update checks. Models download from huggingface.co instead, or you import them from a file. |
| app.dictivo.app | /v1/installs/census (install report); /v1/trials/activations (trial report); /v1/trials/reminders and /v1/trials/reminders/cancel (trial reminder); /v1/analytics/events (usage statistics); /v1/cloud-fast/claim (purchase claim, for Local and Cloud Fast purchases); /v1/local-offer (Local price); /health (Run check) |
Once when the app is first opened. When microphone access, and on a Mac accessibility access, is decided. When your trial starts, and when your first trial transcript is copied or pasted. The trial reminder only if you ask for it: once to save it, once to cancel it. Usage statistics only if you turn them on. After you start a purchase in the app, until your license arrives. The Local price and renewal address when a screen that shows the Local offer opens. Run check. | A device id that does not name you (a hash), your platform and your app version. The install report adds the first-open time and the permission result as one word: granted, denied or no audio. The trial report adds the trial's start and activation times and a yes/no flag, and the channel you found Dictivo through only if you agreed to share it. The reminder sends the email address you typed, your interface language and the trial's start date. A purchase claim sends a one-time code; the reply carries your license key and the product it is for. The Local price request sends nothing about you. Statistics events describe how the app was used, never your audio, your text, or file and app names. | Dictivo keeps working, including the trial. After a purchase, paste the license key from your email yourself. The app shows no Local price. |
| api.dictivo.app | /v1/cloud-fast/entitlement; /v1/cloud-fast/session; /v1/cloud-fast/transcribe; /v1/cloud-fast/device/deactivate; /health (Run check) |
Only for Cloud Fast: checking your subscription or free minutes while Cloud Fast is selected or after you change a Cloud Fast license, starting a Cloud Fast session, transcribing a Cloud Fast recording, and signing a device out of Cloud Fast. Also when you open Account & Billing with a Cloud Fast license stored, and Run check. Versions before 0.3.51 also used it for trial reports, statistics and purchase claims. | For a transcription: the recording itself, how long it is, its language, its audio format and the output style, for example email. Alongside: a session id, your Cloud Fast license key and its activation id if you have one, this device's id, a short device label that Dictivo creates, and your platform and app version. | Local dictation keeps working. Cloud Fast does not. |
| api.lemonsqueezy.com | /v1/licenses/activate; /v1/licenses/validate; /v1/licenses/deactivate |
When you activate, refresh or remove a license, Local or Cloud Fast, and once after a reinstall restores one. Run check. Not at every launch. | Your license key and a short device label that Dictivo creates. A refresh or a removal sends the license key and its activation id. | Dictivo keeps working with a license that is already active. Activating, refreshing or removing one, or restoring one after a reinstall, needs this connection. |
| huggingface.co | The model file only | Only if a model download from downloads.dictivo.app fails. | A plain download request. No license key, no device id. | Dictivo keeps working. If the download from downloads.dictivo.app fails as well, import the model from a file. |
When Dictivo starts at login, it waits about one minute before the update check and before the license check that follows a reinstall.
Lock Cloud Fast changes only the api.dictivo.app row. While it is on, no recording you start is uploaded. A Cloud Fast recording already in progress when you lock finishes as Cloud Fast, and Cloud Fast license or status checks may still contact api.dictivo.app.
How Lock Cloud Fast works · The same hosts on the security page
What never leaves the device
Local recordings and Local transcripts stay on the device. In Local mode, Dictivo does not send your audio to a transcription server.
The only request that carries audio is a Cloud Fast transcription to api.dictivo.app. It carries one recording that you started while Cloud Fast was selected.
No request carries your transcript text. Your history, dictionary, snippets and settings stay on the device. With Cloud Fast too, Dictivo applies your dictionary and snippets on the device after the transcript comes back.
Reports that are sent whatever you choose, and the one setting
Two reports go to app.dictivo.app whatever the statistics setting says:
- The install report: once per new install when the app is first opened, and when microphone access, and on a Mac accessibility access, is decided. It gives the result as one word: granted, denied or no audio.
- The trial report: when your trial starts, and when your first trial transcript is copied or pasted. It gives the start and activation times and a yes/no flag.
Both reports carry a hashed device id that does not name you, your platform and your app version. They carry no audio, no text, and no file or app names. A report that fails is sent again at a later moment.
If you agree to share how you found Dictivo, the trial report also carries that channel name, for example google or reddit. Dictivo asks first in a dialog. The choice stays on the device for up to 90 days, and you can stop it in Settings › Privacy.
Usage statistics are the one setting. Share usage statistics, in Settings › Privacy, is off by default. Only when you turn it on does Dictivo send events about how the app is used, such as which setup step you reached or a dictation's length and word count.
The trial reminder is sent only if you type an email address and ask for it.
Run check
Run check is a button in Settings › Account & Billing. It runs only when you click it. It tells you whether this network lets Dictivo reach each service.
It sends one test request to each of these addresses:
https://downloads.dictivo.app/latest.json, the update checkhttps://app.dictivo.app/health, trial reports and purchaseshttps://api.dictivo.app/health, Cloud Fasthttps://api.lemonsqueezy.com/v1/licenses/validate, the license service
The license test sends a placeholder key, not yours. No test sends anything about you or your work.
Two things that look like app connections but are not
Links you click in the app, such as checkout, billing and the website, open in your browser. Your browser makes those connections, not Dictivo.
Inside the app, the window that shows the interface may connect only to api.dictivo.app and app.dictivo.app. Every other connection in the list comes from the app's native layer, the part that also records and transcribes.
Allow-list for a managed network and how to verify
On a company network, allow these hosts over HTTPS:
downloads.dictivo.app, for updates and modelsapp.dictivo.app, for reports, the Local price and purchase claimsapi.dictivo.app, for Cloud Fast onlyapi.lemonsqueezy.com, for license activationhuggingface.co, the model fallbackdictivo.app, for links that open in the browser
If you never use Cloud Fast, Dictivo works without api.dictivo.app. Checkout and billing pages open in the browser and can need more hosts there.
To verify, watch Dictivo and its helper processes with a per-app network monitor: nettop or Activity Monitor on a Mac, a per-app firewall such as Little Snitch, or Resource Monitor on Windows. Dictate in Local mode, then block the network and dictate again.
If you see Dictivo contact a host that is not on this page, email support@dictivo.app with the host, the time and your Dictivo version.
All Dictivo docs
Questions
Does Dictivo send my audio anywhere?
Only for Cloud Fast. The only request that carries audio is a Cloud Fast transcription to api.dictivo.app. In Local mode, Dictivo does not send your audio to a transcription server.
Which hosts do I allow on a company network?
downloads.dictivo.app, app.dictivo.app, api.dictivo.app, api.lemonsqueezy.com and huggingface.co, over HTTPS, plus dictivo.app for links that open in the browser. Without api.dictivo.app, everything except Cloud Fast works.
Why does Dictivo contact app.dictivo.app if I turned statistics off?
The trial and install reports go there whatever the statistics setting says. They carry a hashed device id that does not name you and no audio or text. The list on this page names every field. The Local price and purchase claims use this host too.
Does the license check run every time I start Dictivo?
No. Dictivo contacts api.lemonsqueezy.com when you activate, refresh or remove a license, and once after a reinstall restores one. A license that is already active works offline.
What is huggingface.co doing in the list?
It is the backup source for speech models. Dictivo asks it for a model file only if the download from downloads.dictivo.app fails. The request carries no license key and no device id.
Can I block everything and still dictate?
Yes, in Local mode with a model already on the device. Update checks, license changes, Cloud Fast and the reports stop. Dictation, paste and history keep working.