Privacy policy
1. Controller
The data controller is Dev Intensifies SLU, CIF B70709647, registered address Carretera de Tiana, 193, 1º 2ª, 08390 Montgat, Barcelona, Spain. Contact: support@typenot.app.
This policy covers the TypeNot applications and the typenot.app website. The short version: your voice is the most personal data there is, so the product is built to minimize what we touch — audio is processed transiently to produce your text and is not stored on our servers, zero-retention contracts apply to everything that goes to the cloud, and deletion controls live inside the app.
2. What we collect
| Category | Examples | Source |
|---|---|---|
| Account data | Email address, name, hashed password, language preference | You, at sign-up (or your Google/Apple account if you sign in with them) |
| Audio recordings | Your dictation audio | You, when you dictate — processed transiently to produce your transcript and not stored on our servers |
| Transcripts and derived text | Raw transcripts, cleaned-up text, translations, your tones and dictionary | Generated from your dictation |
| Usage and diagnostics | Feature usage counts, quota consumption, crash reports, device type | The apps |
| Billing data | Subscription status, plan, renewal state. Payment details (card numbers) are handled by our payment processors and never reach our servers. | RevenueCat / Stripe / app stores |
| Consent and legal records | Which policies you accepted, when, from which IP and client | The apps, when you give or withdraw consent |
The typenot.app marketing website sets no cookies and runs no third-party analytics.
3. Why we process it (legal bases, GDPR Art. 6)
| Purpose | Data | Legal basis |
|---|---|---|
| Providing dictation, transcription, cleanup, library and sync | Audio, transcripts, account data | Contract (Art. 6(1)(b)) |
| Billing and subscription management | Billing data, account data | Contract (Art. 6(1)(b)); legal obligations (Art. 6(1)(c)) for tax records |
| Service reliability, abuse prevention, security | Usage and diagnostics | Legitimate interest (Art. 6(1)(f)) in running a secure service |
| Product analytics | Usage data | Consent (Art. 6(1)(a)) — off unless you opt in |
| Marketing communications | Email address | Consent (Art. 6(1)(a)) — off unless you opt in |
| Compliance with legal requests | As required | Legal obligation (Art. 6(1)(c)) |
4. Audio handling
Your dictation audio is processed transiently: it is sent to our speech-to-text provider to produce your transcript and is not stored on our servers or in our database. Only the resulting text (the raw transcript and the cleaned-up text) is kept in your library.
5. Processors and recipients
We use a small set of processors, each under a data processing agreement. Cloud AI providers operate under zero-data-retention terms: they process your audio or text to return a result and do not retain or train on it.
| Provider | Purpose | Data | Location / transfer basis |
|---|---|---|---|
| Deepgram (US) | Cloud speech-to-text | Audio (cloud mode) | US — SCCs; zero-retention |
| OpenAI (US) | Transcript cleanup, translation | Transcript text | US — SCCs / EU-US DPF; zero-retention |
| Google (Gemini API) | AI features (assistant endpoints) | Text you submit to those features | US/EU — SCCs / EU-US DPF |
| Anthropic (US) | Premium transcript cleanup (when enabled) | Transcript text | US — SCCs; zero-retention |
| RevenueCat (US) + Stripe (US/EU) | Subscriptions and payments | Billing data | US/EU — SCCs / EU-US DPF |
| Railway (US/EU) | Application hosting and database | Account data, transcripts | EU region where available — SCCs |
| Cloudflare (global) | DNS, CDN, website hosting, email routing | Technical traffic data | Global — SCCs / EU-US DPF |
| Langfuse (self-hosted) | AI pipeline observability | Pipeline metadata; content only in development environments | Self-hosted on our infrastructure — not a third party |
We do not sell personal data and we do not share it with advertisers. We disclose data to authorities only when legally required.
6. Retention
- Audio: processed to deliver your transcription and not retained.
- Transcripts and library content: kept until you delete them or your account.
- Account data: kept while your account exists, then deleted within 30 days of account deletion, except records we must keep (e.g., invoices for tax law, typically 6 years in Spain).
- Consent records: kept as evidence of compliance for as long as the law requires.
- Diagnostics: kept up to 12 months.
7. Your rights
Under the GDPR you have the right to:
- Access your data (Art. 15) and export it in a portable format (Art. 20) — available directly in the app under data & privacy settings;
- Rectify inaccurate data (Art. 16);
- Delete your data and account (Art. 17) — available directly in the app;
- Restrict or object to processing based on legitimate interest (Arts. 18, 21);
- Withdraw consent at any time for consent-based processing (analytics, marketing), without affecting prior processing;
- Complain to a supervisory authority — in Spain, the Agencia Española de Protección de Datos (aepd.es), or the authority of your country of residence.
For anything not covered by the in-app controls, email support@typenot.app. We respond within one month as required by law.
8. California residents (CCPA/CPRA)
We do not sell or share personal information for cross-context behavioral advertising. California residents have the right to know what categories of personal information we collect (Section 2 above), to access and delete it, to correct it, and to not be discriminated against for exercising these rights. Use the in-app controls or email support@typenot.app.
9. Security
Data is encrypted in transit (TLS) and at rest. API keys for AI providers never leave our servers, and access to production systems is restricted and logged. No system is perfectly secure; if a breach affects your data we will notify you and the relevant authority as required by GDPR Arts. 33–34.
10. Children
The Service is not directed at children and requires users to be at least 16 years old. We do not knowingly process children's data; if you believe a child has created an account, contact us and we will delete it.
11. Changes
We will update this policy as the product evolves and notify you of material changes by email or in the app before they take effect. Translations are provided for convenience; the English version prevails in case of conflict.
12. Contact
Dev Intensifies SLU · CIF B70709647 · Carretera de Tiana, 193, 1º 2ª, 08390 Montgat, Barcelona, Spain · support@typenot.app