Privacy Policy

Last updated: September 2026

This privacy policy explains how the SpeechDone app ("we", "us") processes personal data.

1. Data Controller

via now UG
Email: [email protected]

2. What Data We Collect

• Audio recordings: Voice recordings you make through the keyboard.
• Device ID: A randomly generated, non-traceable identifier used for authentication.
• Transcription and result texts: The texts produced from your speech.
• Dictionary and snippets: The terms and snippets you create in the app while signed in to an account.

3. How We Process Data

• Transcription: Your audio recording is sent to Deepgram (processed in the EU) to convert it to text. Only if Deepgram is unavailable is the recording sent to OpenAI (USA) instead.
• Rewriting: The transcribed text is sent to OpenAI (USA) for polishing.
• Editing/Translation: For edit instructions and translations the text is sent to Anthropic (USA).
• Style profile (optional): If you are signed in with Apple and "Learn my writing style" is on, we keep your polished texts for up to 30 days to build a style profile. The analysis runs at OpenAI (USA). You can switch this off in Settings and delete the profile with its texts at any time.
• The US services are used via their APIs under Standard Contractual Clauses (SCCs) for international data transfers; none of the services uses API data for training.

4. Data Storage and Retention

• Audio: Recordings are processed exclusively in memory and discarded immediately after transcription. No audio data is stored persistently.
• Device ID: The device ID is stored in Redis with a time-to-live (TTL) of 90 days. After that, it is automatically deleted.
• Dictionary and snippets: While you are signed in, we store your terms and snippets on our server in Germany so that iPhone, iPad and Mac use the same ones. For deleted entries we keep only the word or cue for up to 90 days, so the deletion reaches all of your devices. The terms are passed to speech recognition and rewriting as a hint. They are part of the data export and are deleted with the account. Without an account both lists stay on the device.
• Texts: Transcription and result texts are held in memory for the duration of processing. Only for the optional style profile (Apple sign-in, "Learn my writing style" on) do we store the last 100 polished texts, with a retention period of 30 days after the last dictation. They are deleted together with the style profile and with the account.

5. Server Location

Our server is hosted by Hetzner in Germany. All data is processed in accordance with the GDPR.

6. Third-Party Services (Sub-processors)

We have concluded Data Processing Agreements (DPAs) with all sub-processors in accordance with Art. 28 GDPR.

• Deepgram, Inc. (San Francisco, USA, processing on EU servers): Speech recognition/transcription. Privacy Policy · DPA
• OpenAI, Inc. (San Francisco, USA): Rewriting, style analysis, fallback transcription if Deepgram is unavailable. Privacy Policy · DPA
• Anthropic, PBC (San Francisco, USA): Text processing (editing, translation). Privacy Policy
• Gladia SAS (Paris, France): Speech recognition/transcription (EU alternative). Terms & DPA
• Mistral AI (Paris, France): Text processing (EU alternative). Privacy Policy · DPA
• Hetzner Online GmbH (Gunzenhausen, Germany): Server hosting. Privacy Policy

For transferring personal data to the USA (OpenAI, Anthropic), Standard Contractual Clauses (SCCs) per Art. 46(2)(c) GDPR apply. Deepgram (EU endpoint), Gladia and Mistral process data exclusively within the EU.

7. Cookies, Tracking, and Analytics

SpeechDone uses no cookies, no tracking, and no analytics services. We do not collect any usage statistics.

8. Your Rights (GDPR)

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): You may request information about your stored data.
• Right to erasure (Art. 17 GDPR): You may request deletion of your data.
• Right to data portability (Art. 20 GDPR): You may receive your data in a common format.
• Right to object (Art. 21 GDPR): You may object to the processing of your data.
• Right to lodge a complaint: You have the right to file a complaint with a data protection supervisory authority.

9. Contact

For privacy-related questions, please contact:
[email protected]