Zásady ochrany osobních údajů

Privacy Policy

This policy describes how the Voira application and website process your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll. on personal data processing.

1. Data controller

The controller is Vojtěch Hořava, a self-employed individual, Company ID (IČO) 06440291, registered at Dandova 2619/13, 193 00 Prague, Czech Republic. Contact e-mail: vojtech.horava@gmail.com. Website: voiravoice.cz · voiravoice.com.

2. What data we process

• Account data: your e-mail address, or your Google account identifier (sign-in is required to use the app).
• Usage statistics: word counts, seconds and the number of dictations — numbers only, for quota and statistics, never the content of what you dictate.
• Dictionary and voice snippets: content you enter yourself; it syncs to your account so you have it on all your devices. You can delete it at any time.
• Technical data: identifiers of your devices (concurrent-device limit) and data necessary for sign-in.

Voira does not maintain a server archive of ordinary dictations. Audio and transcripts are processed to transcribe, edit and translate your speech. Live transcription may go directly from the app to a provider; batch transcription and text editing pass through our backend. This is a cloud service, not offline processing or end-to-end encryption against the transcription provider.

Desktop history remains local. Failed dictation may leave rescue audio on the desktop; retrying sends that audio for processing again. Android may keep an encrypted undelivered transcript locally for recovery. A 24-hour recovery window is not a guarantee of physical deletion while the app is not running. Insertion may use the system clipboard. On Android, the user-enabled Accessibility service works with the active app, target text field and cursor to insert text.

Voira does not train its own models on dictations or sell them. Provider processing depends on the particular service and terms below; we do not promise zero retention of all operational data by every provider.

3. Purpose and legal basis

• Performance of a contract (Art. 6(1)(b) GDPR): account management, sign-in, synchronization and service delivery.
• Legitimate interest (Art. 6(1)(f) GDPR): quota enforcement, security and abuse prevention.
• Consent (Art. 6(1)(a) GDPR): any optional analytics cookies and non-essential communications you choose to enable.

4. Where and how long we store data

We keep account, sign-in, device, subscription status, numerical usage, dictionary and snippet data to provide the service on our server in the EU. We handle deletion requests without undue delay, normally within 30 days; see account deletion.

Payment records and data needed for legal obligations or disputes may have a separate, longer retention period. A limited technical deletion confirmation and payment identifiers, without audio or dictated text, may be kept to verify deletion and prevent reassignment of a payment, normally for 30 days. If cancellation of an existing subscription remains unresolved, necessary payment identifiers are kept until resolution so that renewal is not left unmanaged. Account deletion does not itself remove the seller’s invoices or local copies on other devices. Providers’ retention periods depend on the purpose and service.

5. Recipients and processors

Soniox provides primary transcription and Cerebras edits or translates text. Fallback routes may use Groq, Together AI and OpenAI. The selected provider receives the content needed for the operation. If you supply your own key, your chosen service, such as Anthropic, may also process content.

Other services: hukot.net (server and database in Czechia), Resend (sign-in emails), Google (sign-in and website analytics after consent), Lemon Squeezy (web payments and invoicing) and Google Play (payments in the distributed Android version). We process purchase identifiers and subscription status; the seller processes payment-card details.

Providers may process data outside the EU, including in the USA. Their terms describe purposes, retention and applicable international-transfer mechanisms: Soniox · Cerebras · Groq · Together AI · OpenAI · Google · Lemon Squeezy. Soniox states that its realtime API neither uses audio and transcripts for training nor stores them; its asynchronous API has different terms. This statement does not automatically apply to every fallback service. Contact us for information about specific processing or a copy of available safeguards.

6. Your rights

Under the GDPR you have the right to:

• access your data and obtain a copy,
• rectify inaccurate data,
• erase data (right to be forgotten),
• restrict processing,
• data portability,
• object to processing based on legitimate interest,
• withdraw consent (where processing is based on consent).

To exercise your rights, e-mail vojtech.horava@gmail.com. You also have the right to lodge a complaint with the supervisory authority, the Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.cz.

7. Security

We apply appropriate technical and organizational measures to protect data against unauthorized access, loss or misuse (encrypted transfer, access control).

8. Changes to this policy

We may update this policy. We will inform you of material changes in the app or by e-mail. The current version is always available at voiravoice.cz and in the app (Settings → Privacy).

Updated 18 October 2026