Account and plans
Accounts are not in MicJot 0.3.1. This page describes the design for the public release so you can see what you will be signing up for, and so it can be held to it.
Signing in, without a password
MicJot never stores a password. On the website you sign in with one of three methods: a six-digit code emailed to you (valid 10 minutes, single use, 5 attempts; the email also carries a button that opens a page where you click to confirm, so a mail scanner that opens links cannot use it), Continue with Google (scopes openid email only), or Continue with Apple. Your email is an attribute of the account, not its identity, so it can change.
Approving a Mac
From the first setup screen, or later from Settings → Account → Sign in…, the app shows an eight-letter code such as WDJB-MJHT and opens the account site. Sign in there and approve the Mac (“Approve this Mac? ‘Ram's MacBook Pro’ · Code WDJB-MJHT”). The app receives a device token, stored in secrets.json in MicJot's support folder (readable only by you), and a small account record (email, plan, status and dates) kept next to your settings for display. Every new Mac that signs in triggers an email to the account.
Settings → Account shows the plan and, during the trial, the days left as the ceiling of the time remaining: right after the trial starts it says “Pro trial · 7 days left”.
Macs and devices
Every plan allows 3 Macs signed in. The next sign-in beyond the cap asks which Mac to sign out; nothing is revoked silently. The Devices page lists name, model, app version and last seen, with Sign out for each and Sign out everywhere (which asks for a fresh email code).
Offline, and when the server is unreachable
Dictation never needs the server. The cached plan stays displayed until the end of the paid period (or the trial) plus 14 days; after that the app shows Free with “Sign in to refresh”. A proxy error or a network failure means “AI unavailable for this dictation”, never “signed out”: only the account service itself can sign a Mac out, and an outage can delay an upgrade but cannot cause a lockout.
What the proxy sends and keeps
Within the free words, on the trial or on Pro, AI writing goes to Anthropic through MicJot's proxy with MicJot's key. The proxy sends exactly what the app would send to Anthropic directly (transcript or instruction and selection, app name and category, tone and language, dictionary words, nearby text when that is on) and records token counts only: never a transcript, prompt or completion. Anthropic's retention terms are on the privacy page.
Fair-use budgets
Each plan has a daily budget of requests, input tokens and output tokens, enforced per account per UTC day and printed on the pricing page. Reaching a budget never stops dictation: the rule-based text is inserted with one notice until midnight UTC. The trial has its own total caps. A QA build's own key, when its “Prefer my own Anthropic key over MicJot AI” switch is on, bypasses all of this; customer builds have no such key.
Changing your email
An email change re-keys the account's recovery path and the receipt address, so it is gated harder than deletion: a code goes to your current address and a second code to the new one; both are needed within 10 minutes. The old address receives a notice with a revert link valid for 7 days; using it restores the old address and signs out every web session and every Mac, because the account is then presumed compromised.
Cancel, refund, change plan, delete
- Cancel from Settings → Account → Manage subscription, or the account page. Access continues to the end of the paid period; then MicJot returns to Free. Your history, dictionary and settings stay on your Mac.
- Refund: 14 days, no questions asked, on the first purchase and on an annual renewal; monthly renewals are cancelled, not refunded; cancel any time, access to period end. Request it from the account page with one click; it usually appears on your statement within 5 to 10 business days.
- Change plan (monthly ↔ yearly): by email at launch; the owner applies the proration.
- Delete account: confirmed with a fresh email code. Any subscription is cancelled first; every device and web session is signed out; your email, identities and devices are deleted. A tombstone of the account id and billing ids stays so that late billing events resolve and grant nothing; it is purged 90 days after the last subscription ends. Paddle keeps its tax records as merchant of record.