docs: privacy notes for cloud transcription, refresh update plan

README.de.md

@@ -533,7 +533,7 @@ Details zu Manifest-Umfang, Build-Befehlen und bekannten Abweichungen von Flathu
 
 - **Linux Exclusive:** Nur für Linux-Systeme.
 - **Wayland Fokus:** Entwickelt für Wayland (`wl-clipboard`, `ydotool`).
-- **Datenschutz:** Lokale Workflows bleiben zu 100% auf deinem Rechner. OpenAI oder OpenRouter wird nur bei Bedarf für LLM- oder Cloud-TTS-Aufgaben kontaktiert.
+- **Datenschutz:** Lokale Workflows bleiben zu 100% auf deinem Rechner. OpenAI oder OpenRouter wird nur bei Bedarf für LLM, Cloud-TTS oder Cloud-Transkription (Backend `openrouter` / `openai-cloud`, das die Aufnahme sendet) kontaktiert.
 - **Sicherheit (`evdev` & `input`-Gruppe):** Das Tool liest Input global über `/dev/input/event*`. Auf System-Ebene bedeutet dies, dass alle Prozesse des Benutzers Eingaben mitlesen könnten (Trade-off unter Wayland ohne XDG GlobalShortcuts). Nutze Blitztext nur in Umgebungen, denen du vertraust!
 - **Flatpak-Sandbox:** Siehe [Flatpak-MVP-Status](#flatpak-mvp-status) oben — globale Hotkeys, Auto-Paste, lokales Whisper und Desktop-Benachrichtigungen sind innerhalb der Sandbox nicht verfügbar.
 

README.md

@@ -531,7 +531,7 @@ See [`packaging/flatpak/README.md`](packaging/flatpak/README.md) for the exact m
 
 - **Linux exclusive:** For Linux systems only.
 - **Wayland focus:** Developed for Wayland (`wl-clipboard`, `ydotool`).
-- **Privacy:** Local workflows stay 100% on your machine. OpenAI or OpenRouter is only contacted when needed for LLM or Cloud TTS tasks.
+- **Privacy:** Local workflows stay 100% on your machine. OpenAI or OpenRouter is only contacted when needed for LLM, Cloud TTS or cloud transcription (`openrouter` / `openai-cloud` backend, which sends the recorded audio).
 - **Security (`evdev` & `input` group):** The tool reads input globally via `/dev/input/event*`. At the system level, this means all of the user's processes could read along with input (a trade-off under Wayland without XDG GlobalShortcuts). Only use Blitztext in environments you trust!
 - **Flatpak sandbox:** See [Flatpak MVP status](#flatpak-mvp-status) above — global hotkeys, auto-paste, local Whisper, and desktop notifications are unavailable inside the sandbox.
 

docs/local-models.md

@@ -5,6 +5,7 @@ On Linux, transcription runs through the Whisper Python backends configured in t
 
 - `openai-whisper` (default)
 - `faster-whisper` (optional)
+- `openrouter` and `openai-cloud` (optional cloud transcription; the audio leaves your machine, see [privacy notes](privacy.md))
 
 Supported model names in the Linux app are:
 `tiny`, `base`, `small`, `medium`, `large`, `large-v2`, `large-v3`, `large-v3-turbo`.

docs/privacy.md

@@ -13,6 +13,7 @@ That file is written with restrictive permissions (`0600`) so only the current u
 ## Data flow
 
 - Local transcription workflows stay on the machine.
+- The `openrouter` and `openai-cloud` transcription backends send the recorded audio to OpenRouter or OpenAI. The *Local* workflow never uses them and always transcribes with `faster-whisper`.
 - LLM workflows optionally send the transcribed text to OpenAI, OpenRouter, or a configured custom endpoint for rewriting.
 - Temporary audio files are created during processing and are removed when the workflow finishes or is cancelled.
 - Workflow output may be placed on the clipboard so you can paste it into another app.