Privacy Policy

1. Introduction

Vocalype is a desktop dictation and voice transcription application. Our goal is simple: keep as much processing as possible on your device, with clear control if you enable a cloud mode. The Service is not intended for children under 16 years of age.

2. Who we are

The service is offered under the name Vocalype.

• Legal name/company: to complete
• Country of establishment: to complete
• Privacy email: privacy@vocalype.com

3. Data collected

• Email for your account, connection and emails related to the service
• Hashed password : we do not store your password in clear text
• Device ID : generated locally then hashed before sending for license management
• Billing data : customer ID Stripe, subscription status, period and trial dates
• Technical logs on the service side : errors, security events, email, IP address and device ID hashed when necessary
• Local technical logs : the application can write diagnostic logs to your machine, including short text previews

4. Data not collected

By default, we do not collect on our servers:

• your audio recordings
• your complete transcriptions
• the complete content of your dictations
• your typing history
• your activity in other applications

5. Local vs. cloud processing

By default, Vocalype operates locally. This means the audio and transcription stays on your machine for local engines.

• Default local mode: audio and transcription do not pass through our servers
• Optional cloud mode: if you enable a cloud provider, some data may be sent directly to that provider for processing

Optional cloud providers visible in the product include: Google Gemini, Groq, Mistral and Deepgram for certain transcription functions, as well as OpenAI and other compatible providers for certain text post-processing functions.

These cloud functions are optional. They are not necessary for basic local operation. When you activate them, the processing operations concerned also fall under the confidentiality policy of the chosen provider.

6. Use of data

We use your data to:

• create and manage your account
• manage your license and subscription
• open a secure session
• process payments and invoicing
• detect abuse, protect the service and correct errors
• respond to your support requests

Our main legal bases are:

• execution of the contract for account, license, product access and billing
• legitimate interest for security, abuse prevention, stability and support
• legal obligation when the law requires us to certain conservations or verifications

7. Third Party Sharing and International Transfers

We do not sell your data. We only share what is necessary with:

• Stripe for payments and subscription management
• railway or an equivalent host for the API and infrastructure
• user-enabled cloud providers for optional cloud functions

Depending on your country, your payment method, your host or the cloud provider you activate, some data may be processed outside the European Union or the European Economic Area. When this is the case, these treatments also depend on the guarantees and policies of the provider concerned.

8. Shelf life

• Local data : Recordings and transcriptions remain on your device according to your retention settings. The product provides durations such as 3 days, 2 weeks or 3 months.
• Account data : kept as long as your account is active, then for the period necessary to process the deletion and comply with legal obligations, in practice generally up to 30 days after request for deletion.
• Billing data : kept according to legal obligations and the rules of Stripe.
• Technical logs on the service side : retained for a limited period necessary for security, abuse prevention and diagnosis.
• Local technical logs : remain on your machine until locally deleted, system cleaned or erased by the application.

9. Security

• network communications over HTTPS
• password stored in hashed form
• tokens and secrets stored in the system's secure keychain when possible
• device identifier hashed before sending to the service
• audio and transcription kept local by default

10. Your rights (GDPR)

If you are affected by the GDPR, you can request access, correction, deletion, limitation or export of your data. You can also object to certain processing when the law allows it.

To exercise your rights, write to privacy@vocalype.com.

11. Cookies

To date, the public site Vocalype does not use advertising cookies, retargeting or third-party audience measurement tools in the version currently in place. If this changes, this page will be updated.

12. Contact

For any questions about privacy, data, GDPR or account deletion: privacy@vocalype.com.