Privacy Policy

Last updated: October 6, 2026

VoxDrot is built to collect as little as possible. There are no accounts, no analytics SDKs in the app, and no advertising identifiers. This policy explains what data exists, where it lives, and who can see it. The data controller is Kazkai Tech AB, Swedish company registration number 559576-5016, Kommunalvägen 8 P, 132 34 Saltsjö-Boo, Sweden.

1. Your voice

• Local mode: recognition happens entirely on your device. Audio never leaves your machine and is never sent to us or anyone else.
• Cloud mode: audio goes through our service, which runs on Cloudflare's network, to our recognition provider. Today that provider is OpenAI, which processes it in the United States under its API data terms — it is not used to train their models. We do not keep recordings. The transcript is held in our service's cache for up to fifteen minutes, so that a dropped connection can be answered without uploading the audio again, and is then discarded. If the provider changes, this page changes with it.
• BYOK: audio goes directly from your device to the provider you chose (OpenAI, Groq, or xAI), under that provider's privacy terms. It does not pass through our servers.

2. Your text

Dictated text is inserted directly into the application you are using. We do not receive, log, or store it. When AI post-processing is enabled, the transcript is sent to the AI provider for processing — on our cloud, to OpenAI in the United States, as above; with your own key, to the provider you chose — and is not stored by us afterward beyond the same fifteen-minute cache.

3. Subscription and purchase data

• Purchases are processed by Polar, our merchant of record. They handle payment details and issue receipts under their own privacy policy; we never see your card number.
• On our side, subscription keys are stored as SHA-256 hashes, plus their last four characters so that support can tell one from another.
• Your device identifier is a random GUID the app generates the first time it uses our cloud — not a hardware fingerprint. Without a subscription, the free weekly cloud minutes are tied to that identifier and to nothing else.
• A subscription and its cloud usage are tied to the subscription key. Polar passes us the email address a subscription was bought with; it is kept with the subscription and used only for the two messages in section 6.

4. API keys (BYOK)

If you add your own API key, it is encrypted on your device with Windows DPAPI and is never transmitted to our servers.

5. What we log

Our service records each request to it (hashed subscription key or device GUID, seconds of audio metered, the length of the transcript in characters, app version, the recognition provider used, timing, the country and the Cloudflare location the request came through, and any error) for billing accuracy and to see what is slow or failing. These records contain no audio, no text, and no IP addresses. To limit how many new free devices one address can register in a day, the address (for IPv6, its /64 network) is kept for up to two days as a counter and tied to nothing else; the same kind of counter holds an address for up to two hours for the launch-list form and for lookups of unknown keys. Addresses are stored nowhere else.

6. Email

If you email us for support, we keep the correspondence for as long as needed to help you. We do not add you to mailing lists.

A subscriber hears from us twice at most: once if the subscription ends, to say that nothing is locked, and once if a payment is refunded. Nothing else is sent to the address Polar gave us.

If you leave your address on voxdrot.com to be told when VoxDrot is released, we store that address, the time you left it and which form it came from, on our own server (hosted by Cloudflare). It is used for one email on release day and is deleted afterwards. To be removed earlier, email us and it comes off the list the same day.

7. Your rights

Under the GDPR and similar laws you may request access to, correction of, or deletion of personal data we hold. Because we hold almost none, the usual answer is short. Contact hello@voxdrot.com. You may also lodge a complaint with your local data protection authority; ours is the Swedish Authority for Privacy Protection (IMY).

8. Changes

If this policy changes materially, we will note it in the app's release notes and update the date above.