From what I can read in the privacy policy, speech recognition is performed via an API from Microsoft. So it's both online, cannot be considered fully free software (as a major part is performed by a closed API) and I'd hesitate to call it privacy preserving. At least when using the voice command feature. Written commands should be offline, private and done by open source I think.

Someone please tell me I'm wrong.