Privacy Policy

Last updated: August 20, 2026

VoxDrot is built to collect as little as possible. There are no accounts, no analytics SDKs in the app, and no advertising identifiers. This policy explains what data exists, where it lives, and who can see it. The data controller is Kazkai IT AB (Sweden).

1. Your voice

• Local mode: recognition happens entirely on your device. Audio never leaves your machine and is never sent to us or anyone else.
• Cloud mode: audio is sent to our transcription provider for processing and is not stored after processing. We do not keep recordings or transcripts.
• BYOK: audio goes directly from your device to the provider you chose (OpenAI, Groq, or xAI), under that provider's privacy terms. It does not pass through our servers.

2. Your text

Dictated text is inserted directly into the application you are using. We do not receive, log, or store it. When AI post-processing is enabled, the transcript is sent to the AI provider for processing and is not stored by us afterward.

3. License and purchase data

• Purchases are processed by Lemon Squeezy, our merchant of record. They handle payment details and issue receipts under their own privacy policy; we never see your card number.
• On our side, license keys are stored only as SHA-256 hashes.
• Your device identifier is a random GUID generated at activation — not a hardware fingerprint.
• Your cloud-hour balance is tied to your license key, not to a name or email.

4. API keys (BYOK)

If you add your own API key, it is encrypted on your device with Windows DPAPI and is never transmitted to our servers.

5. What we log

Our license server logs activation and metering requests (hashed license key, device GUID, seconds of audio metered, timestamp, and standard connection metadata) for fraud prevention and billing accuracy. These logs contain no audio, no text, and no personal identifiers.

6. Email

If you email us for support, we keep the correspondence for as long as needed to help you. We do not add you to mailing lists.

7. Your rights

Under the GDPR and similar laws you may request access to, correction of, or deletion of personal data we hold. Because we hold almost none, the usual answer is short. Contact hello@voxdrot.com. You may also lodge a complaint with your local data protection authority; ours is the Swedish Authority for Privacy Protection (IMY).

8. Changes

If this policy changes materially, we will note it in the app's release notes and update the date above.