Privacy policy
Draft · to be completed before going live
Technical draft, not approved legal text. The highlighted parts need filling in, and the whole thing needs checking by whoever handles GDPR compliance. The technical facts described here are accurate to how the app works.
Who processes the data
Data controller: name or company name, address, VAT number. For any request: email address.
The underlying principle
Dimmi Tutto is designed to process as little data as possible. In offline mode transcription happens entirely on the user's device, and no voice or text content reaches our systems or anyone else's.
What is processed, and why
- Dictation audio. In offline mode it never leaves the device. In cloud mode it is sent to the transcription provider for as long as it takes to produce the text, and is not retained by us.
- Transcribed text. Stored locally in the history on the user's device. It is not uploaded to our servers.
- Personal dictionary. Synced to our servers only if the user is on a plan that includes syncing.
- Account data (email address). Only for users who create an account: used to authenticate them and manage the subscription.
- Word count. For plans with a quota, the number of words transcribed in the period — a number, not the content.
- Payment data. Handled by the payment provider; we neither see nor store card details.
Legal bases
Performance of the contract for the service's functions and subscription management; legitimate interest for security and abuse prevention; legal obligations for tax records.
Third-party providers
List the providers actually in use here, with their role and country: cloud transcription provider, account backend, payment provider, site hosting. Standard contractual clauses apply to transfers outside the European Union.
Retention
Audio sent in cloud mode is not retained beyond processing. Account data is kept for as long as the account exists and is deleted within number days of closure, except for records the law requires to be kept.
Your rights
Access, rectification, erasure, restriction, portability and objection to processing, by writing to the address above. You may also lodge a complaint with your national data protection authority.
Cookies
This site uses no profiling cookies and no analytics that identify visitors, which is why no consent banner appears.