Privacy policy

Last updated: 30 September 2026

Vozuma turns what you say into finished text: you dictate on your phone or computer, the recording is transcribed, cleaned up and the text is put where you are typing. This policy explains what personal data that involves, who processes it, how long it is kept and what rights you have under the EU General Data Protection Regulation (GDPR).

1. Who is responsible

The controller within the meaning of the GDPR is:

Vozuma is run by an individual established in Spain, not a company; no data protection officer is required or appointed. For any question about your data, write to the address above. See also the legal notice and the terms of use.

2. What happens to your voice

Recording and transcription

The app records only while you dictate: from the moment you start a dictation (for example by holding the power button) until you finish or cancel it. The recording is sent over an encrypted connection (HTTPS) to our server at vozuma.app, which passes it on to a speech recognition service (Groq, see section 9) and receives the text back. The recording is then deleted from our server; it is never written to our database or logs. The app deletes its own copy as soon as the upload has finished, successfully or not.

If you have added words and names to your personal vocabulary, the first of them are sent along to Groq as a spelling hint.

Cleaning up the text

The raw transcript is sent to Anthropic (the Claude AI models), which removes filler words, fixes punctuation and writes it in the style that fits, together with your vocabulary and that style's instructions. The cleaned text goes back to your device. Neither the raw nor the cleaned text is stored on our server.

Choosing a style

Once you have added styles of your own, Vozuma picks the fitting one (for example one you made for chats, or one for a code editor); otherwise your default style is used and nothing is sent for this step. To pick one, the app sends where you are dictating: the name of the app, on Windows the window title, and, if the phone shares it, the hint of the text field (such as "Message"). This context and the first 500 characters of the transcript are sent, with the descriptions of your styles, to a classification service (TypeSafe, or alternatively Anthropic). Only the name of the style chosen is kept, as part of the usage record described in section 4.

Voice notes you share

When you share a voice note from another app (for example WhatsApp) with Vozuma, it is transcribed and cleaned up the same way. When you ask for it, the transcript is summarised or translated by Anthropic; for that, the app sends the transcript to us again, and we keep neither. Voice notes usually contain another person's voice and words. We process them only because you asked us to, to let you read them (legitimate interest, Art. 6(1)(f) GDPR). Please share only voice notes you are allowed to pass on.

Legal basis: transcription, cleanup and style choice are the service you signed up for (performance of a contract, Art. 6(1)(b) GDPR).

3. Your account

To use Vozuma you create an account. We store:

• your email address and, if you give one, your name;
• your password, only as a one-way hash (it cannot be read back);
• your settings: transcription language, writing styles, personal vocabulary, your tier and your monthly minutes limit;
• for each device you sign in on: its name (for example the phone model), when it signed in and when it was last used; the device's sign-in token is stored only as a hash;
• six-digit codes for confirming your email address or resetting your password, stored as a hash for 15 minutes.

We send you emails only for your account: confirmation and password reset codes. The emails are delivered by Resend.

Legal basis: Art. 6(1)(b) GDPR (providing the account). You can change your name, password and language in the app, sign out single devices, and delete your account at any time under Account → Delete account. Deleting it removes the account, its styles, vocabulary, messages to us, devices and codes immediately.

Messages you send us

Under Account → About Vozuma → Help you can report a problem or send feedback. We store your message with your account and the name of the device it came from. If you leave "Include technical details" switched on, the app adds: the app version, the Android version and phone model, how you start a dictation, which permissions are set up, the app language and the last few error messages the app showed. It never adds recordings, transcripts, app names or window titles. We are notified of each message by email (delivered by Resend), and we reply to your email address only if you tick that you would like an answer.

Legal basis: Art. 6(1)(b) GDPR (support for the service you use) and Art. 6(1)(f) GDPR (our legitimate interest in improving the app).

4. Usage and limits

For every dictation and voice note we keep a usage record without any of its content:

• date and time, the device's name, whether it was a dictation or a voice note, and whether it succeeded;
• size and file type of the upload, length of the audio, language setting, name of the style used and processing time;
• for each service involved: its name and model, the audio length or number of text tokens processed, the time it took and what it cost us.

We use these records to show you your usage (minutes per week and month), to enforce the monthly minutes limit, to prevent abuse and to understand and pay the costs of the service. The app shows you minutes and counts, never costs.

Legal basis: Art. 6(1)(b) GDPR (usage display and limits are part of the service) and Art. 6(1)(f) GDPR (our legitimate interest in controlling costs and preventing abuse). When you delete your account, the records stay for our statistics but lose every link to you: the reference to your account and the device name are removed.

5. Data on your device

Some data stays on your phone and never reaches us:

• History: the text of your last 200 dictations and voice notes, with time, app and style, so you can find them again. You can turn it off and clear it in the app.
• Your sign-in token (encrypted with a key kept in the phone's secure hardware), your settings, the app and field of your most recent dictation, and your last usage figures.

This data is excluded from Android cloud backups and device transfers. The history and the sign-in token are deleted when you sign out; everything is deleted when you uninstall the app.

6. App permissions

• Microphone: to record while you dictate, and only then.
• Notifications: to show that Vozuma is listening or working, and when something went wrong.
• Accessibility service ("Type into fields"): when a dictation starts, it notes the name of the app you are in and the hint of the focused text field (such as "Message"), as described in section 2; when the dictation is finished, it finds that text field and inserts the text there. If you switch on the floating button, the service also notices when a text field gets focus, to show the button above the keyboard. It does not react to anything else you do, and it does not read, record or send the text on your screen.
• Digital assistant and "Use text from screen" (optional): when Vozuma is your assistant and you allow it, Android gives Vozuma the structure of the screen you started the dictation on. Vozuma uses only the hint of the focused text field and the app's name, as described in section 2, and discards the rest.

You can withdraw each of these permissions at any time in the phone's settings; the related feature then stops working.

7. Beta test: distribution and crash reports

During the beta test the app is distributed through Firebase App Distribution (Google). To invite you, we give Google your email address; Google then records which versions you installed and basic information about your device.

The beta versions report crashes through Firebase Crashlytics (Google): when the app crashes, it sends the technical details of the error, the app version, the device model and Android version, and a random installation ID. Crash reports contain no recordings and no dictated text. Google keeps them for 90 days.

Legal basis: Art. 6(1)(b) GDPR. Taking part in the beta test means testing the app, and finding and fixing errors is its purpose. If you do not want crash reports to be sent, tell us and we will stop your participation or find a solution with you.

8. Server logs and security

When your device or browser connects to vozuma.app, the web server logs the IP address, time, requested address, response status and the app or browser version. The application logs errors (for example that a service did not respond), without recordings or text. We use the logs only to keep the service running and secure, and to detect attacks. For the same reason, the number of requests per device and IP address is counted for a few minutes to limit abuse.

Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a secure and working service). Logs are deleted after 14 days.

All connections are encrypted (HTTPS). This page and the service use no cookies, no analytics and no third-party content; the fonts on this page are served by vozuma.app itself.

9. Service providers

We use the following providers. They process data only on our behalf and under our instructions (Art. 28 GDPR), on the basis of their data processing agreements:

According to their terms for API customers, Groq and Anthropic do not use the data sent through their APIs to train their models. The providers may keep data for a limited time to detect abuse, as described in their own privacy policies. We do not sell or pass on your data to anyone else, unless we are legally obliged to.

10. Transfers outside the EU

Several providers are based in the USA, so your data is processed there. Where a provider is certified under the EU–US Data Privacy Framework, the transfer is based on the European Commission's adequacy decision (Art. 45 GDPR); otherwise on the EU standard contractual clauses (Art. 46(2)(c) GDPR). You can ask us for a copy of these safeguards.

11. How long data is kept

• Recordings: deleted right after transcription; the app deletes its copy after the upload.
• Transcripts and cleaned text: not stored on our server; on your phone until you delete them, clear the history, sign out or uninstall.
• Account data, including messages you sent us: until you delete your account.
• Confirmation and reset codes: 15 minutes.
• Usage records: while your account exists; afterwards without any link to you.
• Server logs: 14 days. Crash reports: 90 days (Google).

12. Your rights

You have the right to

• access the personal data we hold about you (Art. 15 GDPR),
• have it corrected (Art. 16) or deleted (Art. 17),
• restrict its processing (Art. 18),
• receive it in a common, machine-readable format (Art. 20),
• object to processing based on our legitimate interests, on grounds relating to your particular situation (Art. 21),
• lodge a complaint with a data protection supervisory authority (Art. 77): the Spanish Agencia Española de Protección de Datos (AEPD, www.aepd.es), which is responsible for us, or the authority of the EU country where you live or work.

To use these rights, write to the email address in section 1. Most of your data you can also see, change and delete directly in the app.

13. Other points

• Providing your data is not legally required, but without an account and without sending recordings the service cannot work.
• The style choice is automated, but it only decides how your text is written. We make no automated decisions that have legal or similarly significant effects on you (Art. 22 GDPR).
• Vozuma is not meant for children under 16.
• We will update this policy when the service changes; the date at the top shows the current version.