{"slug": "show-hn-voxhearth-is-a-small-privacy-focused-mac-tts-app", "title": "Show HN: VoxHearth is a small privacy-focused Mac TTS app", "summary": "VoxHearth, an open-source macOS menu bar app for private dictation, records audio in memory, transcribes with a bundled Core ML model, and inserts text into the focused app, with no account, telemetry, updater, or network access at runtime. The app, targeting Apple Silicon Macs running macOS 14 Sonoma or later, supports 25 European languages and is available as version 0.1.0 on GitHub Releases, with official binaries signed and notarized by Apple.", "body_md": "**Dictation that stays home.**\n\nVoxHearth is a small, open-source macOS menu bar app for private dictation. It records into memory, transcribes with a bundled Core ML model, and inserts the result into the focused app. The installed app has no account, telemetry, automatic updater, remote API, or runtime model download.\n\n```\nmicrophone → in-memory audio → bundled Core ML model → in-memory text → focused app\n```\n\n- Audio and transcripts are not written to a VoxHearth history or cache. If insertion fails, the transcript may remain in memory for up to two minutes so you can Retry or Discard it; it is then discarded automatically.\n- The model is part of the signed app and is loaded through a reviewed, network-free FluidAudio subset; downloader and cache clients are not linked.\n- The normal insertion paths use macOS Accessibility or Unicode keyboard events. An optional clipboard compatibility fallback is off by default.\n- Logs contain fixed operation names and error types, never audio, transcript text, clipboard contents, or file paths.\n- Release checks reject network entitlements, known updater/network dependencies, unapproved model files, and source use of network APIs.\n\nBuilding, signing, and Apple notarization require network access. Running the\ninstalled app does not. Read the complete [privacy statement](/stephansturges/voxhearth-mac/blob/main/Documentation/PRIVACY.md)\nand [threat model](/stephansturges/voxhearth-mac/blob/main/Documentation/THREAT_MODEL.md), including the macOS and\ndestination-app trust boundaries.\n\n- Apple Silicon Mac\n- macOS 14 Sonoma or later\n- Microphone permission\n- Accessibility permission to insert text into other applications\n\nOfficial binaries exist only as tagged [GitHub Releases](/stephansturges/voxhearth-mac/releases). If\nthat page does not list `v0.1.0`\n\n, no official VoxHearth binary has been\npublished yet; build from source and treat any unsigned local DMG as a\ndevelopment artifact.\n\nTo install a published release:\n\n- Open the\n[latest GitHub release](/stephansturges/voxhearth-mac/releases/latest)and confirm its tag. - Download the matching\n`VoxHearth-v<VERSION>.dmg`\n\nand`SHA256SUMS`\n\n. - Verify the checksum and, optionally, the GitHub provenance/SBOM attestations by\nfollowing\n[VERIFY_RELEASE.md](/stephansturges/voxhearth-mac/blob/main/Documentation/VERIFY_RELEASE.md). - Open the DMG, drag VoxHearth to Applications, and launch it.\n- Complete the microphone and Accessibility permission steps.\n\nThe first launch opens a visible setup window. After setup, VoxHearth remains in the menu bar; launching it again reuses the existing instance instead of registering a second dictation listener.\n\nThe release workflow publishes a DMG only after it is signed with a Developer ID Application certificate, notarized by Apple, and given a stapled ticket. VoxHearth has no automatic updater; install future versions manually from GitHub Releases.\n\nThe default shortcut is **Control-Option-Space**. Hold it while speaking and\nrelease to transcribe and insert. You can also start and stop from the menu bar.\nSettings let you choose the shortcut, microphone, and one of the model's 25\nsupported European languages.\n\nThe Accessibility insertion path is preferred. Clipboard compatibility is an explicit opt-in for applications that reject the normal paths; clipboard managers and Universal Clipboard can observe that temporary value.\n\nXcode 26.2 and its Swift 6 toolchain are the pinned release environment.\n\n```\n./scripts/local-check.sh\n./scripts/fetch-model.sh\n./scripts/build-app-bundle.sh\n```\n\nThe app appears at `.build/distribution/VoxHearth.app`\n\n. It receives an anonymous\nad-hoc signature so the complete local bundle launches consistently, but it has\nno trusted publisher identity or Apple notarization. To create a local,\nunsigned development DMG in one command:\n\n```\n./scripts/build-release-local.sh\n```\n\nModel and DMG bytes live under `.build/`\n\nand are never committed. See\n[BUILDING.md](/stephansturges/voxhearth-mac/blob/main/Documentation/BUILDING.md) for signing, notarization, source\nbundling, and the exact release credentials.\n\n`Vendor/FluidAudioLocal`\n\nis an attributed, network-free subset adapted from FluidAudio commit`19600a485baa4998812e4654b70d2bab8f2c9949`\n\n(release 0.15.5). The root package has no remote runtime dependency.- The model is pinned to Hugging Face revision\n`aed02740059203c4a87495924f685de3722ae9ce`\n\n. locks every permitted model file by byte count and SHA-256.`Models/parakeet-tdt-0.6b-v3-coreml.json`\n\n- Each release includes checksums, SPDX 2.3 SBOM, provenance metadata, a complete source archive containing the reviewed FluidAudio subset, and GitHub provenance and SBOM attestations.\n\nThe signed DMG is not bit-for-bit reproducible because Apple timestamps, notarization tickets, and disk-image metadata vary. Its source and model inputs are immutable and independently checkable.\n\nSee [CONTRIBUTING.md](/stephansturges/voxhearth-mac/blob/main/CONTRIBUTING.md) before opening a pull request. Report\nvulnerabilities privately as described in [SECURITY.md](/stephansturges/voxhearth-mac/blob/main/SECURITY.md); never put\nprivate audio, transcripts, or credentials in a public issue.\n\nVoxHearth is GPL-3.0-or-later. It is a renamed, independent fork of TypeWhisper\nv1.5.1. See [LICENSE](/stephansturges/voxhearth-mac/blob/main/LICENSE), [NOTICE](/stephansturges/voxhearth-mac/blob/main/NOTICE), and [UPSTREAM.md](/stephansturges/voxhearth-mac/blob/main/UPSTREAM.md).\n\nThe bundled FluidAudio code is Apache-2.0, its incorporated components retain\ntheir notices, and the model is conservatively redistributed under CC BY 4.0.\nSee [THIRD_PARTY_NOTICES.md](/stephansturges/voxhearth-mac/blob/main/THIRD_PARTY_NOTICES.md),\n[MODEL_PROVENANCE.md](/stephansturges/voxhearth-mac/blob/main/Documentation/MODEL_PROVENANCE.md), and [LICENSES](/stephansturges/voxhearth-mac/blob/main/LICENSES).\n\nTypeWhisper is a trademark of its respective owner. VoxHearth is not affiliated with or endorsed by TypeWhisper, NVIDIA, FluidInference, or Apple.", "url": "https://wpnews.pro/news/show-hn-voxhearth-is-a-small-privacy-focused-mac-tts-app", "canonical_source": "https://github.com/stephansturges/voxhearth-mac", "published_at": "2026-08-10 11:58:56+00:00", "updated_at": "2026-08-10 12:11:37.967909+00:00", "lang": "en", "topics": ["artificial-intelligence", "machine-learning", "natural-language-processing", "ai-products"], "entities": ["VoxHearth", "Apple", "GitHub", "Core ML", "Xcode", "Swift"], "alternates": {"html": "https://wpnews.pro/news/show-hn-voxhearth-is-a-small-privacy-focused-mac-tts-app", "markdown": "https://wpnews.pro/news/show-hn-voxhearth-is-a-small-privacy-focused-mac-tts-app.md", "text": "https://wpnews.pro/news/show-hn-voxhearth-is-a-small-privacy-focused-mac-tts-app.txt", "jsonld": "https://wpnews.pro/news/show-hn-voxhearth-is-a-small-privacy-focused-mac-tts-app.jsonld"}}