App privacy policy

In short

• Dictilo only listens while you hold the dictation key.
• The audio is deleted from your Mac as soon as it is sent. Our server keeps neither the audio nor the text: it only records the number of words dictated.
• For transcription, the audio is sent to Groq, in the United States, without your email address, your account identifier or your IP address. Groq keeps neither the audio nor the text.
• Dictilo contains no analytics or advertising tools, and never sees your card number.

1. Data controller

COACHING BUSINESS 360, SAS, SIREN 894 654 458, 9 chemin du Pontet, ZAC du Pontet, 69380 Civrieux-d'Azergues, France. Contact for your data: contact@antony-rouxel.com.

2. Your account data

• Your email address, which is your identifier. We also keep a simplified form of it (without “+tags”, and without dots for Gmail), only to stop someone from referring themselves.
• Signing in. You sign in with a 6-digit code sent by email. The code is valid for 10 minutes, with 5 attempts at most. We keep it encrypted while it is valid, and it is deleted as soon as it has been used. To limit abuse, we record code requests as fingerprints of your address and IP address, never in plain text.
• The session. Once signed in, the app receives a token. We only keep a fingerprint of it, and it expires 365 days after it was last used. It is deleted when you sign out.
• Your plan: the end date of your trial or free Pro, your referral code, and the referral links between accounts.
• The word counter: the number of words dictated each week and since you signed up, for the free plan limit and the referral programme. Only the number is kept, never the text.
• Your subscription: your customer and subscription identifiers at Stripe, the status, the plan (monthly or yearly) and the end date of the period.

3. Your dictations

On your Mac. The microphone only opens while you hold the dictation key, for 120 seconds at most. The audio is compressed into a temporary file, sent to our server, then deleted, whether the upload succeeded or not. A silent recording is not sent. If the app quits abruptly in the middle of a dictation, this file is deleted the next time the app starts.

On our server. The audio is processed in memory and never stored. The text is not stored either, neither in the database nor in the logs: only the number of words is recorded.

At Groq. Our server sends the audio to Groq, which transcribes it, then the transcribed text, which a language model hosted by Groq punctuates without rewording it. Groq only receives the audio, the text, the language if you chose one, and a fixed list of proper names that helps the transcription. It receives neither your email address, nor your identifier, nor your IP address. Processing takes place in the United States. Zero Data Retention is switched on for our Groq account: Groq keeps neither the audio nor the text once the request has been processed.

Back on your Mac. The text is pasted where your cursor is, passing through the clipboard for a moment, marked as temporary so that clipboard managers do not keep it. The previous clipboard content is then restored.

4. What stays on your Mac

The session token, stored in the macOS keychain, and your preferences (the chosen key and the dictation language). Your email address and account status are not written to your disk.

5. macOS permissions

• Microphone: to hear you while you hold the dictation key, and only then.
• Accessibility: to recognise the held key in all your apps and to type the text at your cursor. Dictilo keeps none of the keys you type: another key pressed during dictation only cancels it.

6. Our service providers

• Vercel (United States): hosts our server, in Frankfurt (Germany). It receives the app's requests (audio, transcribed text, email address, code, token, IP address).
• Neon: hosts our database, in Frankfurt (Germany).
• Groq (United States): transcribes the audio and punctuates the text, without keeping the data (section 3).
• Amazon Web Services, SES email service, in Stockholm (Sweden): sends your sign-in code. It receives your email address and the code.
• Stripe: handles payment for Dictilo Pro. It receives your email address and account identifier, and you enter your card, billing address and, if you wish, your VAT number there.

These providers act on our instructions. We do not sell your data and do not use it for advertising.

7. Transfers outside the European Union

Vercel, Neon, Stripe, Amazon Web Services and Groq are American companies, or belong to American groups, even when your data is hosted in Europe (our database is in Frankfurt). When your data is transferred outside the European Union, these transfers are covered by safeguards recognised by the European Commission (standard contractual clauses, or the EU-US Data Privacy Framework for companies that have joined it). For Groq, the transfer to the United States is covered by the European Commission's standard contractual clauses, included in its data processing addendum.

8. Legal bases

• Performance of the contract: your account, dictation, the free plan, the trial, referrals and the subscription.
• Our legitimate interest: the security of the service and the fight against abuse (limits on code requests, technical logs).
• A legal obligation: keeping invoices.

9. Retention periods

• Sign-in code: deleted as soon as it has been used; if unused, it expires after 10 minutes and is deleted within 24 hours.
• Records of code requests (as fingerprints): 24 hours at most.
• Session: deleted when you sign out. After 365 days without use, it no longer works, and it is deleted 30 days later.
• Account, word counter, referrals and subscription: as long as your account exists.
• Invoices: 10 years, for our accounting obligations, at Stripe.
• Our host's technical logs: a limited period set by its plan (from 1 hour to 30 days). They contain neither the audio, nor the text, nor your email address.

10. Deleting your account

In the app, open the settings and choose “Supprimer mon compte…” (Delete my account). You can also write to contact@antony-rouxel.com from your account's address. Deletion erases your account, your sessions, your counters, your referral links and your recorded subscription. It cancels your subscription and removes your payment method at Stripe. Your customer record at Stripe (email address and invoices) is kept for our accounting obligations.

11. Your rights

You have the right to access, correct, erase, restrict, object to and port your data. You can also give us instructions on what happens to your data after your death. To exercise these rights, write to contact@antony-rouxel.com. If you are not satisfied, you can contact the French data protection authority, the CNIL (www.cnil.fr).

12. Analytics

The Dictilo app contains no analytics, advertising or tracking tools. The pages of our server contain no scripts.

13. Age

Dictilo is intended for people aged 15 and over.

14. Changes

If we make significant changes to this policy, we notify you by email before they take effect.