Privacy policy

Last updated: [date]

1. Who is responsible

[Company or full name], [street, postcode, city, country]. Email: [privacy contact email].

2. What WortKai does

WortKai is a Windows app that turns speech into text. When you press the shortcut, it records your voice until you press it again, converts it to text, cleans the text up and types it into the app you are using. It also offers a Notetaker, translation and voice commands.

3. Data we process

• Account: when you sign in with Google we receive your name, email address and Google account ID. We use them to check that you have access and to show who is signed in.
• Audio and text: recordings you make and the text derived from them are sent through our server to OpenAI for transcription and editing. Our server does not store them. Only you start a recording; nothing is recorded in the background.
• App context (optional): the name and window title of the app you dictate into, so the tone can match (e.g. casual in chat apps). You can turn this off in Settings → Advanced.
• Usage counts: for each request we store your account, the time, the minutes of audio or number of AI tokens, the model and the app version. We use this for fair-use limits and to understand costs. We do not store what you said.
• Feedback: messages you send through "Send feedback", with your email and app version.
• Updates: the app checks GitHub for new versions; GitHub sees your IP address when it does.

4. Stored only on your computer

Your dictation history, notes, scratchpad, dictionary, styles, voice commands and settings are stored only on your PC (in your Windows user folder). They are not uploaded. Uninstalling WortKai and deleting that folder removes them.

5. Service providers

• Supabase (sign-in, database, server functions), region [e.g. EU Central, Frankfurt].
• OpenAI (speech-to-text and text editing), USA. Under OpenAI's API terms, data sent through the API is not used to train models and may be kept for up to 30 days to detect abuse, then deleted.
• Google (sign-in).
• GitHub (app downloads and updates).

Where data goes outside the EU, this happens on the basis of [EU Standard Contractual Clauses / the EU-US Data Privacy Framework].

6. Legal basis

We process your data to provide the service you asked for (Art. 6(1)(b) GDPR) and, for usage counts and abuse prevention, on the basis of our legitimate interest in running the service fairly and securely (Art. 6(1)(f) GDPR).

7. How long we keep data

Account data: as long as you have access. Usage counts: [12 months]. Feedback: until it has been dealt with, at most [24 months]. Audio and text: not stored by us.

8. Your rights

You can ask for access to, correction or deletion of your data, restrict or object to its processing, and ask for a copy (data portability). Write to [privacy contact email]. You can also complain to a data protection authority.

9. Changes

If this policy changes, we update this page and the date above.