Privacy Policy

Last updated: May 18, 2026.

This policy explains what data Voiceless collects, why, how long we keep it, who else processes it, and what rights you have over it. Questions? Email support@voiceless.live.

1. Data we collect

To run your account we store the minimum needed:

• Email — for sign-in and product communications.
• Hashed password — never stored in plain text.
• Subscription state — plan, renewal/cancellation dates, payment status (not card numbers).
• Hardware ID (optional) — used only to prevent abuse of the free trial. You can opt out of this in the desktop app settings; you’ll forfeit free-trial eligibility.
• Usage logs — timestamp, audio duration, latency, and the speech model used per cloud transcription request. These logs are not linked to the contents of what you said and are retained for service quality and billing audit.

We do not buy or sell user data, and we do not maintain advertising profiles.

2. Voice data

Local mode: your voice never leaves your device. The local model runs entirely on your computer.

Cloud mode: audio is sent through our cloud proxy to a third-party speech-to-text provider, transcribed in memory, and the audio bytes are discarded immediately on completion. We do not store, log, or train on the contents of your audio. The transcription text is returned to your device and is not retained on our servers.

3. Product analytics

Voiceless collects a daily telemetry snapshot (an app_session event) tied to your account, sent once per ~24 hours when the desktop app is running. The snapshot contains:

• the app version you are running,
• which transcription engine you selected (cloud or local),
• whether auto-polish is enabled,
• whether you have configured the smart-editor feature,
• the number of vocabulary entries you have saved (a count, not the content),
• your preferred app language,
• your operating-system locale,
• your chosen hotkey modifiers (e.g. Ctrl+Win),
• your selected color theme (dark or light).

This data does not include any transcription content or text you have dictated. We use it to understand which features are in use, to plan improvements, and to measure how well early-access users return to the app over time.

Lawful basis: GDPR Article 6(1)(f) — legitimate interest in product improvement, balanced against your right to control your data. For Russian residents: обработка обезличенных данных в составе технической телеметрии в целях улучшения сервиса (152-ФЗ).

4. Waitlist

When you submit your email through the in-app waitlist form (shown when early access is full), we store:

• your email address,
• a hash of your email address for deduplication,
• the language preference your browser or OS reports.

We use this only to notify you when access opens. You can request removal at any time by emailing support@voiceless.live.

5. How long we keep data

Email support@voiceless.live to request earlier deletion of any data not subject to a legal retention requirement.

6. Third parties

We use the following processors to operate the service:

• Supabase, Inc. — authentication and database for account state, subscription records, telemetry storage, and payment events.
• Cloudflare, Inc. — hosting, edge compute (Workers), the request-handling layer for cloud transcription, and privacy-preserving analytics (Web Analytics — no cookies, no individual tracking).
• Groq, Inc. — speech-to-text and large-language-model inference for cloud transcriptions. The provider does not retain audio after transcription and does not train on it.
• LemonSqueezy, LLC and YooKassa — payment processing for paid tiers. The processor used depends on your region. Payment card data is handled by the processor and never touches our servers; we only receive a transaction reference and subscription state.

Each processor is bound by a data-processing agreement that limits use of your data to operating the service. A full sub-processor list is available on request from support@voiceless.live.

7. Your rights

Wherever you live, you can:

• Access — request a copy of the data we hold about you.
• Correct — fix anything that’s wrong.
• Delete — close your account and have personal data erased (subject to the legal retention items above).
• Export — receive your data in a portable format.
• Object / restrict — ask us to stop or limit processing for specific purposes.
• Withdraw consent — for anything we process on the basis of consent.
• Complain — to a supervisory authority in your country, in addition to contacting us.

To exercise any of these, email support@voiceless.live. We respond within 30 days.

8. International transfers

Voiceless serves users globally, and some of our processors are located outside your country. When we transfer personal data across borders we rely on standard contractual clauses (SCCs) or equivalent safeguards required by applicable law (including GDPR Chapter V).

9. Security and breach notification

We protect your data with TLS in transit, hashed passwords, scoped access tokens, and least-privilege access controls. If we ever discover a personal-data breach that risks your rights, we’ll notify the relevant authority within 72 hours and you without undue delay, in line with GDPR Article 33–34.

10. Children

Voiceless is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, email support@voiceless.live and we’ll delete it.

11. Changes

We may update this policy. Material changes will be announced by email at least 14 days in advance and reflected in the “Last updated” date above.

12. Contact

Email support@voiceless.live for any privacy question, data request, or concern.