Privacy Policy
Last updated: 16 October 2026
This policy explains what personal data Grin Studio OÜ processes when you use VoiceKeyboard (the desktop app, our license server and this website), why, and what rights you have. We wrote it to be read, not skimmed past.
In short:
- We never receive your voice or your text. Audio goes from your computer straight to the speech engine you choose, or stays on your computer with an offline engine.
- Our server stores only what is needed to run Pro: your license, your e-mail and Stripe customer ID, hashed computer fingerprints and Soniox usage in minutes.
- Our website sets analytics cookies (Google Analytics) only if you allow them in the banner.
1. Who is responsible
The controller of your personal data is Grin Studio OÜ, registry code 12261817, Vesipapi tn 4-19, 12916 Tallinn, Estonia. For any privacy question or request, write to actualizator@gmail.com.
2. Your voice and your text
You choose the speech engine in the app. What happens to your audio depends on that choice:
| Engine | Where your audio goes | Who handles it |
|---|---|---|
| Offline engines (and all file transcription) | Nowhere. Recognition runs on your computer. | Only you. |
| Standard engine (Google) | From your computer to Google's speech recognition, through Google Chrome. The app starts Chrome in the background, in a separate Chrome profile of its own. | Google, under the Google Privacy Policy. Google decides how it processes the audio; we have no access to it. |
| Soniox (Pro) | From your computer directly to Soniox Inc. in the United States, using a one-time temporary key from our server. | Soniox, on our behalf. According to Soniox, real-time audio is processed transiently and not stored, and it is not used to train models. |
- The text you dictate is typed into the window you choose and shown in the app. It is not sent to us.
- Video links: to transcribe a link, the app downloads the video from the website it points to. That website sees your IP address and applies its own policies. The transcription itself runs on your computer.
- Only use online engines for content you are comfortable sending to that provider. For confidential material, choose an offline engine.
3. What our license server stores
The Free version does not activate and sends no account data to our server. When you buy and use Pro, our license server (run on Cloudflare) stores the following:
| Data | Why | Legal basis | How long |
|---|---|---|---|
| Your e-mail address and Stripe customer ID, received from Stripe when you buy | To create your license, send you the code and help you with support | Contract (GDPR Art. 6(1)(b)) | While your subscription lasts and [N years] after it ends |
| License code, subscription ID, status and paid period | To confirm Pro, renewals, cancellations and refunds | Contract; legal obligations for accounting (Art. 6(1)(c)) | As above |
| For each activated computer: salted, one-way hashes of four identifiers (Windows installation ID, motherboard ID, system disk serial number, processor type), app version, and the dates of activation, last check and release | To allow up to 3 computers per subscription, to recognise a reinstalled computer and to prevent misuse of license codes | Contract; our legitimate interest in preventing misuse (Art. 6(1)(f)) | As above |
| A log of temporary Soniox keys issued (time, license, computer) | To protect the Soniox service from abuse | Legitimate interest | 90 days |
| Soniox minutes used per recording and per day for your license | To count your monthly credits and show what is left | Contract | Per recording: 100 days. Daily totals: as long as your license record |
| Soniox's own usage records (duration and time of each session, tagged with your license ID, not your name), which our server reads every night | To check the credit count against Soniox's numbers | Contract; legitimate interest | As the daily totals above |
We store only the hashes of the computer identifiers, never the identifiers themselves. The app reads these identifiers on your computer when it starts, to check that a stored Pro license belongs to this computer. They leave your computer only as hashes, and only when you activate, confirm or release Pro.
If one license code is activated on many computers within a short time, our server may block it automatically to stop a leaked code. If this happens to you, contact us and a person will review it.
Your IP address reaches our server and Cloudflare with every request. It is used to deliver the request and to limit the number of requests against abuse. We do not save it in our license database.
4. Payments
Pro is sold through Link, the checkout service of Stripe, as the merchant of record. Link collects your payment details, billing information and tax data and processes them as an independent controller under Link's privacy policy and Stripe's privacy policy. We never see your full card number. From Stripe we receive only what we listed in section 3: your e-mail, your customer ID and the state of your subscription.
5. E-mail and support
We send your license code and important service messages (for example, about changes to Pro or prices) to the e-mail address you used at checkout. We use [E-mail provider] to send these e-mails. When you write to us, we keep the correspondence for as long as needed to help you and for up to [N years] afterwards, in case of disputes. We do not send marketing e-mails without your consent.
6. Data on your computer
The app keeps these on your computer only:
- settings, word and file counters, and daily limits;
- your license file, encrypted for your Windows user account;
- technical logs, used to diagnose problems. They may contain the name and title of the window you dictate into and short fragments of recognised text. Logs stay on your computer. We see them only if you send them to us yourself;
- optional diagnostic recordings and text logs, which are off unless you turn them on.
You can delete all of this by uninstalling the app and removing its data folder.
Connections the app makes:
- License check (Pro only): about once a day, as described in section 3.
- Update check: once a day the app asks our update server whether a new version exists. The server sees your IP address and app version.
- Downloading offline models: when you download a model in the app, it comes from the model's publisher, such as Hugging Face, GitHub or alphacephei.com. That site sees your IP address.
- Usage statistics: if you opt in, the app sends anonymous statistics, such as the number of words dictated, the engines used and errors. Never text or audio. You can turn this off at any time in the settings.
- License integrity: if the app detects that its license check was tampered with, it may send our server a signal containing only the app version.
7. Our website
This website is hosted by Zone Media OÜ in Estonia, which processes your IP address to deliver pages and protect the site. Its fonts are served from the site itself and it has no advertising trackers.
Analytics, only with your consent. If you press “Allow analytics” in the banner, the site loads Google Analytics 4 to count visits and see which pages help people. It then sets the cookies _ga and _ga_* (up to 2 years) and sends Google page addresses, the referring site, your browser and device type and an approximate location derived from your IP address; Google Analytics 4 does not store full IP addresses. Advertising features and Google signals are switched off. If you press “No, thanks”, or do nothing, Google Analytics is not loaded and no cookie is set. You can change your choice at any time with “Cookie settings” at the bottom of every page. Our legal basis is your consent; your choice itself is kept in your browser’s local storage.
Support form. When you write to us through the form on the Support page, we receive your name (if you give it), your e-mail address, the topic, your message and the page you sent it from, and we use them only to answer you. The messages arrive in our support mailbox, and the server keeps no copy. We keep the correspondence as long as needed to help you, at most [N years].
After a purchase, the thank-you page asks our license server for your license code. The checkout page is Link's and follows Link's own privacy and cookie policy.
8. Who else receives data
| Recipient | Role | What |
|---|---|---|
| Zone Media OÜ (Estonia) | Our processor: hosting of the website and the support form | Your IP address and support messages |
| Cloudflare, Inc. | Our processor: license server and database | The data in section 3 |
| Google Ireland Ltd / Google LLC | Our processor: Google Analytics, only with your consent | Usage data described in section 7 |
| Soniox Inc. | Our processor: Soniox speech recognition | Your audio while you dictate with Soniox, your license ID and usage data |
| [E-mail provider] | Our processor: e-mail delivery | Your e-mail address and our messages |
| Stripe and Link | Independent controller: payments, taxes, receipts | Your purchase and payment data |
| Independent controller: the standard engine | Your audio while you dictate with the standard engine |
We do not sell your personal data and do not share it for advertising. We may disclose data if the law requires it.
9. Transfers outside the EU
Some of these providers are in the United States:
- Cloudflare is certified under the EU–U.S. Data Privacy Framework and also uses the EU Standard Contractual Clauses (Cloudflare's data processing addendum).
- Soniox processes audio in the United States. The transfer is covered by [Standard Contractual Clauses in our data processing agreement with Soniox].
- Google Analytics data may be processed in the United States; Google LLC is certified under the EU–U.S. Data Privacy Framework and uses the EU Standard Contractual Clauses.
- Stripe, Link and Google (the standard engine) transfer data under their own safeguards, described in their privacy policies.
10. Your rights
Under the GDPR you have the right to:
- access your data and get a copy;
- correct inaccurate data;
- erase your data, where we do not need to keep it by law;
- restrict processing;
- object to processing based on our legitimate interests;
- data portability: receive the data you gave us in a machine-readable format;
- withdraw consent at any time (for example, for usage statistics), without affecting earlier processing.
To use these rights, write to actualizator@gmail.com. We reply within one month. We may ask you to confirm that the license or e-mail is yours. Deleting your data ends your Pro license, because we can no longer confirm it.
You can also complain to a data protection authority. In Estonia that is the Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, info@aki.ee. You can also contact the authority in the country where you live or work.
11. Children
VoiceKeyboard is not directed at children under 16, and we do not knowingly collect their data. To buy Pro you must be an adult under the law of your country. If you believe a child has given us personal data, contact us and we will delete it.
12. Security
License files are digitally signed by our server, so they cannot be forged. Our server checks every request and limits how often requests can be made. Secrets and keys are kept outside the code. Connections between the app, our server and the speech engines are encrypted. The license file on your computer is encrypted for your Windows user account. No system is perfectly secure. If a breach affects your data, we will inform you and the authorities as the law requires.
13. Changes to this policy
We will update this policy when the app or the law changes. The "Last updated" date at the top shows the current version. We tell subscribers about important changes by e-mail or in the app before they take effect.
14. Contact
Grin Studio OÜ, Vesipapi tn 4-19, 12916 Tallinn, Estonia. E-mail: actualizator@gmail.com.