Home

Privacy Policy

Last updated: September 9, 2026 (effective October 1, 2026)

1. Information We Collect

We collect your email address and name (from registration) and usage statistics. When you dictate, audio is captured from your device's microphone only while you are actively dictating and is used solely for speech-to-text conversion; dictation audio is not stored on our servers after processing — only the resulting transcription text is retained, in encrypted form. When you upload an audio file for transcription, we store the file encrypted so you can listen to it alongside its transcript, until you delete it.

2. How We Use Your Information

Your information is used to provide, operate and improve the Service, and for subscription and billing management. "Improve" here does NOT include using your content to train AI models — the only case in which your content is used for training is where you have given the voluntary consent described in section 3. We do not sell your data to third parties.

3. Voice Data

To provide the Service we rely on a small number of specialist AI providers, each of which receives only the minimum data needed. Speech-to-text: your voice recordings (audio) are sent to Google (Cloud Speech-to-Text), which converts your speech to text. Google does not store your audio or transcripts beyond what is needed to return the result and does not use them to train its models; we have not opted in to Google's data-logging program. Text processing: the resulting transcription text may be processed by OpenAI — to polish and clean it up when AI polishing is enabled, to translate it if you request translation, and to transform selected text when you use AI text actions. OpenAI receives text only, never your audio; under OpenAI's API terms this data is not used to train its models and is retained for at most 30 days solely for abuse monitoring, then deleted. Speaker separation (optional): if you enable speaker separation for an uploaded file, that file's audio is also sent to Speechmatics to identify who spoke when. This feature is off by default and you choose it per file; Speechmatics processes this data under its own service terms, which permit it to use resulting transcripts to improve its service. Speech generation (optional): if you use text-to-speech, the text you submit is sent to ElevenLabs or Google to synthesize the audio. We obtain your consent in the app before any audio or text is sent to these services.

4. Payment Information

Payment card details are processed through Polar.sh or QPay. We do not store card numbers on our servers.

5. Cookies

We use cookies for authentication and session management. We also collect usage analytics via PostHog.

6. Data Security

Your content is encrypted in transit (TLS) and at rest. On top of storage-level encryption, we apply our own application-level encryption: transcription texts and notes are encrypted inside our database with AES-256-GCM using a separate key derived for each user, and uploaded audio files are encrypted with a unique per-file key before they are written to storage. The master secret needed to derive these keys is kept outside the database, so a copy of the database alone cannot reveal your content. There is no administrative screen or internal tool that can display your transcripts, notes, or audio — our team, including the founder, has no built-in way to open your content and does not access it; internal dashboards show only usage metadata such as minutes and word counts, never content. We never sell, share, or publicly expose your content. We do not use your audio recordings or transcriptions to train AI models by default; that happens only if you give the voluntary opt-in described in section 3, and then only for recordings made after you opted in. That training copy is stored separately from the per-user encryption described above and is readable by our training team — the copy in your own history stays closed. Third parties that process your data on our behalf do so as described in section 3. We employ standard security measures to protect your data; however, no method of transmission over the internet is 100% secure.

7. Your Rights

You have the right to access, correct, or delete your data. When you delete a transcription, note, or uploaded file in the app, its content is permanently removed from our database and storage. For any other request, please contact [email protected].

8. Changes to This Policy

We reserve the right to update this policy. Changes will be communicated through this page.

© 2026 Duudlaga Flow LLC