Privacy policy
In short: your dictations are processed in the EU, audio is not stored, and cookies for Google services are only set with your consent. The details are below.
This is an English convenience translation. Only the German version is legally binding: Datenschutzerklärung.
Controller
The controller for data processing within the meaning of the GDPR is the service provider named in the legal notice (established in Vienna, Austria).
1. Visiting the website
When you visit this website, our server in Vienna processes technical access data (IP address, time, page requested, browser identifier) in log files. The legal basis is our legitimate interest in secure operation (Art 6(1)(f) GDPR). The logs are deleted after six months at the latest.
2. Audience measurement and advertising (only with consent)
If you consent in the cookie banner, we use Google Ads and Google Analytics 4 (Google Ireland Ltd.) to measure the use of the website and the success of our ads. Cookies are set in the process and data is transferred to Google — including to the USA (Google LLC; basis: EU-US Data Privacy Framework or EU standard contractual clauses). The legal basis is your consent (Art 6(1)(a) GDPR, § 165(3) TKG 2021, the Austrian Telecommunications Act); you can withdraw it at any time via “Cookie settings” in the site footer. Without consent, no cookies are set and no identifiers for recognition are processed — only anonymous, cookie-free measurement signals.
Independently of this, when you visit via an ad we store campaign parameters from the ad URL (for example the click ID) in a separate cookie (“pt_attrib”, 90 days). This cookie is not transferred to third parties; if you register, we link it to your account in order to assess the effectiveness of our advertising (legitimate interest, Art 6(1)(f) GDPR).
3. Registration and account
When you register, we process your name, email address and password (only a cryptographic hash is stored) in order to provide your account (Art 6(1)(b) GDPR). To protect against automated sign-ups we use Cloudflare Turnstile (Cloudflare, Inc.); in doing so Cloudflare processes technical browser signals (legitimate interest).
4. The service: dictation and text processing
Your dictations — as well as text you hand over, such as selected text for editing commands, and, for text refinement, the immediate text surroundings of your insertion point (a few hundred characters before and after the cursor) plus the kind of target app — are transmitted encrypted to our servers and converted into text or processed in real time; none of it is stored permanently. Audio is not stored; dictation content is not kept on our servers either — the processing is purely technical and temporary (Art 6(1)(b) GDPR). Your content is also not used to train AI models. Only if you enable temporary storage for error diagnosis (opt-in) is dictated text stored, and it is deleted automatically after six months at the latest — you can turn this off at any time (consent, Art 6(1)(a) GDPR). Your dictation history is held exclusively locally on your device and can be configured in the app all the way down to “do not store”.
For speech recognition and text processing we use specialised service providers as processors: a speech recognition service and an AI text processing service, in each case with processing in data centres in the EU. Where access from the USA cannot be ruled out at providers with a US parent company, such access takes place on the basis of the EU-US Data Privacy Framework or the EU standard contractual clauses (Art 46 GDPR); a copy of the safeguards is available on request.
For the operation and improvement of the service we also process technical operating and quality data, such as error rates, response times and usage volume. Dictation content is excluded from this. The legal basis is our legitimate interest (Art 6(1)(f) GDPR).
5. Payment processing
Subscriptions are handled by our payment service provider Stripe (Stripe Payments Europe, Ltd.). Payment data (for example card details) is collected and processed directly by Stripe; we do not receive complete payment data (Art 6(1)(b) GDPR). To prevent repeated free trial periods we store a pseudonymous card identifier provided by Stripe — not a card number — for as long as we offer trial periods (legitimate interest in preventing abuse, Art 6(1)(f) GDPR).
6. Email
We send confirmation and account emails via a European email service provider acting as a processor. We send feature and product news to registered users on the basis of our legitimate interest in informing our users (Art 6(1)(f) GDPR). You can object to this at any time: during registration, via the unsubscribe link in every such email, or informally by email to us.
7. Contact and support
If you contact us, we process your details and the content of your request in order to handle it (Art 6(1)(b) or (f) GDPR). If you send us diagnostic data from the app, we use it only for error analysis.
8. Storage period
We store account data for as long as your account exists; afterwards, or if you request deletion, it is deleted unless statutory retention obligations (for example invoice data, 7 years) prevent this. Audio: not stored (see point 4).
9. Your rights
You have the right to information, rectification, erasure, restriction, data portability and objection, as well as to withdraw consent you have given (with effect for the future). Please contact the email address given above. You can also lodge a complaint with the Austrian data protection authority (www.dsb.gv.at).
10. Business customers
For companies, law firms and medical practices we provide a data processing agreement in accordance with Art 28 GDPR, including a list of sub-processors, on request.
Last updated: August 2026