Privacy Policy

Effective date: February 15, 2026

This Privacy Policy describes how Dictate. ("we", "our", or "the app"), developed by Gabriel Alonso, collects, uses, and protects your information. Dictate is a voice keyboard application for iOS that transcribes speech into text using third-party AI services.

By using Dictate, you agree to the practices described in this policy. If you do not agree, please do not use the app.

1. Data We Collect

2. How We Use Your Data

• Audio recordings: Sent to our backend server, which forwards them to third-party AI services for transcription. Audio files are deleted immediately after processing — they are not stored permanently on any server.
• Account information: Used to authenticate your identity and manage your account.
• Transcription history: Stored locally on your device to let you review, search, copy, and share past transcriptions. Optionally synced via iCloud if you enable this feature.
• Usage data: Used to track your usage statistics, enforce usage limits, and improve the service.
• Profile photo: Displayed within the app for personalization purposes only.
• Preferences and rules: Used to customize your transcription and formatting experience.

3. Third-Party AI Processing

Dictate relies on third-party AI services to provide its core functionality. When you record audio, the following data flow occurs:

1. Audio is recorded locally on your device.
2. Audio is sent to our backend server (hosted on Convex).
3. Our server forwards the audio to a third-party AI service (such as OpenAI, Google, or Anthropic) for speech-to-text transcription.
4. The transcribed text may be sent to an AI language model from one of these providers for text formatting (punctuation, capitalization, paragraph structuring).
5. The processed text is returned to your device and inserted into the active text field.
6. Audio files are deleted immediately after transcription is complete.

These third-party AI services process your audio and text data according to their own privacy policies:

• OpenAI Privacy Policy
• Google Privacy Policy
• Anthropic Privacy Policy

We do not sell your data to any third party. Data is shared with these services solely to provide transcription and formatting functionality.

4. Keyboard Extension and Full Access

Dictate operates as a custom keyboard extension on iOS. The keyboard requests Full Access (also known as Open Access) for the following reason:

• Network access is required to send audio recordings to our server for transcription. Without Full Access, the keyboard cannot transmit audio data and cannot perform its core voice-to-text function.

When Full Access is enabled:

• Audio recordings are sent over the network to our backend for transcription.
• We do not log, store, or monitor keystrokes.
• We do not collect text typed with other keyboards.
• We do not build user profiles based on keyboard usage.
• Audio data is used exclusively for transcription and is deleted immediately after processing.

5. Authentication

Dictate uses WorkOS as its authentication provider. When you sign in, WorkOS processes your email address and name to authenticate your identity. Authentication tokens are stored securely in your device's Keychain.

6. Data Storage and Retention

7. Data Security

We take reasonable measures to protect your data:

• All network communication uses HTTPS/TLS encryption.
• Authentication tokens are stored in the iOS Keychain, the most secure storage available on the platform.
• Audio files are deleted from your device immediately after being sent for processing.
• Access to backend data is restricted to authenticated requests.

8. Your Rights

You have the right to:

• Access your data: View your transcription history and usage statistics within the app.
• Delete your data: Delete individual transcriptions or your entire history from the app. You can also export your data in JSON format.
• Delete your account: You can delete your account from within the app (Settings > Account). This will permanently remove your account record, usage data, and profile photo from our servers.
• Revoke consent: You can stop using the keyboard at any time by removing it from your device's keyboard settings. You can revoke microphone access in iOS Settings.
• Data portability: Export your transcription history and replacement rules as a JSON file from within the app.

9. iCloud Sync

If you enable iCloud synchronization, your transcription history is synced across your devices using Apple's CloudKit infrastructure. This data is subject to Apple's Privacy Policy. You can disable iCloud sync at any time in the app's settings.

10. Children's Privacy

Dictate is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.

11. International Data Transfers

Your data may be processed in servers located in the United States. By using Dictate, you consent to the transfer and processing of your data outside of your country of residence. We ensure that third-party services we use provide adequate data protection.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you through the app or by updating the effective date at the top of this page. We encourage you to review this policy periodically.

13. Contact