Privacy

Voxy turns speech into text on your own computer. Your speech never reaches us. Buying a licence does give us a small amount of your information, and this page says exactly what that is, why we have it, how long we keep it, and how to make us delete it.

In short: the app keeps your dictation on your machine. We hold your email, your licence key, and a fingerprint of each machine you activate on. That is the whole list.

Who we are

Voxy is made and sold by True Design. We are the data controller for the information described on this page. You can reach us at info@voxyapp.org.

What the app processes

While you hold the key, the microphone feeds audio to a speech model running on your own machine. The audio is held in memory only for as long as it takes to make text out of it, then it is gone. It is never written to disk and never uploaded. We never receive it, and neither does anybody else.

What the app stores on your machine

Your custom words, phrases and styles — in Voxy's own settings file.
Your numbers — word counts, speed and which apps you dictate into, so the Stats screen has something to show. Counts only, never the text you dictate. You can turn them off.
Your licence key and the date it was last checked. The key itself is held by the Keychain on macOS and DPAPI on Windows, not in a plain file.

All of it lives on your own machine. None of it is sent to us. Deleting Voxy and its settings folder removes it.

What leaves your computer

Four things, and nothing else:

The licence check, to license.voxyapp.org. Your key and a fingerprint of the machine, so a key is not used on more machines than it allows.
The update check, to license.voxyapp.org. A request for the current version number. It carries no information about you.
Three usage counts, to license.voxyapp.org, from Voxy 1.0.31 on. Each is a single word: first opened (once, ever), used this week (at most once a week, after your first dictation that week) and reached the free limit (at most once a week). Each carries the app version and whether you have a licence, and nothing else: no words, no id, no machine fingerprint. We add each one to a daily total with the country Cloudflare reports, and we never keep your IP address. Nobody, us included, can tell which Mac sent which count. They tell us whether people get Voxy working and whether the free week is the right size.
The model download you approve, the first time you pick an engine. It happens once, and the model is then kept on your machine. Nothing about you is sent.

Apart from those three counts, the app has no analytics. It has no crash reporting to a third party and no advertising identifier. There is no sign-up and no password: your licence key is the only identity. Once the model is on your machine, Voxy works with the network off. The checks and counts simply wait until you are back online.

The machine fingerprint

It is a one-way scramble (SHA-256) of your computer's hardware id. We cannot turn it back into a serial number, and it tells us nothing else about the machine or about you. It exists so that a two-machine licence stays a two-machine licence. Deactivate, in Voxy's licence settings, removes it from our records and frees the slot.

When you buy

Payment is handled by Stripe. You enter your card details on Stripe's own checkout, not on our site. We never see or hold your card number. Stripe collects what it needs to take the payment and to meet its own legal duties, under Stripe's privacy policy.

Stripe passes back to us your email address and its own customer and checkout reference. That is all we get.

What our licence server holds

One row per licence, and nothing that is not in this list:

Your email address.
Your licence key, its status, the date of purchase and an update-window date on the record. One purchase covers Voxy and every future update, for life — that date does not limit anything.
Your Stripe customer and checkout reference, so a payment can be matched to the right licence.
A machine fingerprint for each computer you activate on, with the first and last time we saw it.
A short log of licence events — activated, machine added or removed, key issued, key revoked, licence email sent — with the date. The "email sent" entry records the address it went to.

It runs on Cloudflare Workers and a Cloudflare D1 database. We do not log or store your IP address. Cloudflare handles the connection itself, and may hold network records briefly for security, as any host does.

There is no profile, no behaviour tracking, and nothing about how or how much you use Voxy. We could not tell you how many words you have dictated, because we do not know.

Emails we send

We send your licence key by email when you buy, through Resend, who deliver it on our behalf. If you write to us, we keep the message so we can answer it. Buying Voxy does not put you on any list.

Voxy updates, if you ask for them

The "Email me Voxy updates" box on this site is the only way onto our updates list. When you use it we store:

Your email address.
Which page the box was on, and the dates you asked, confirmed or stopped.
A random code that goes in the links in our emails.

We email you once to ask you to confirm. Until you press the button in that email, you are not on the list and we send you nothing else. After that we email you only when there is news about Voxy, like a new version or the Windows build. Every email has a link to stop them, and it works straight away. These emails also go through Resend.

This website

The site is static files on Cloudflare Pages. The fonts are served from this domain rather than a font CDN. There are no cookies and no advertising trackers.

We do count visits, using Cloudflare Web Analytics. It sets no cookies and it does not follow you to other websites. It tells us the page you opened, the site you came from, roughly where in the world you are, and the kind of device and browser you used. That is the whole list. None of it names you, and none of it is joined up with anything else.

We also count downloads, so we know how many people are trying Voxy. That count records the date, the version, the country and which site linked you — never who you are, and never anything that could identify you. It is a running tally rather than a list: your download is added to the same number as everyone else's that day.

The Download button in the app's update notice opens that same link in your browser, so it is counted too. It records that the download came from the app rather than the website, and nothing more. Apart from that one button, the Voxy app counts nothing — see what leaves your computer above.

Why we are allowed to hold it

To give you what you bought. Your email, key and dates exist so your licence works, and so we can help you when it does not. That is our contract with you.
To keep the licence honest. The machine fingerprints and the event log stop one key being used on twenty computers. That is our legitimate interest, and it is the least we could collect and still do it.
Because you asked. The updates list exists only because you asked to join it and confirmed by email. That is your consent, and you can take it back with the link in any of our emails.
To satisfy the taxman. Records of a sale have to be kept for a set number of years. That is a legal obligation.

Where it goes

Stripe, Resend and Cloudflare are our only processors. Each may handle your data outside the European Economic Area, in particular in the United States. Where that happens, it is covered by the European Commission's Standard Contractual Clauses or by the EU–US Data Privacy Framework. We do not sell your data, and we do not share it with anybody else unless the law makes us.

How long we keep it

Machine fingerprints — until you deactivate that machine, which removes the record straight away.
Your licence record and event log — for as long as the licence exists. A licence is meant to last, so that is indefinite, unless you ask us to delete it.
Records of the sale — for as long as tax law requires, after which they go.
The updates list — while you are on it. If you never confirm, or you stop the emails, we keep only the address and dates, so a stranger cannot sign you up again without you confirming. Ask us and we delete even that.
Emails you send us — while the question is open, and for a reasonable time after, in case you come back to it.

Your rights

Under the GDPR you can ask us to:

Show you everything we hold about you.
Correct anything that is wrong.
Delete it. Note that deleting your licence record ends the licence — the key stops working, and we will not be able to get it back for you.
Hand it over in a portable file, or send it to somebody else.
Object to us holding it, or ask us to limit what we do with it.

Email info@voxyapp.org and we will answer within one month. There is no charge. If you are not happy with how we handle it, you can complain to your national data protection authority — in Ireland that is the Data Protection Commission.

Children

Voxy is not aimed at children, and we do not knowingly hold information about anyone under 16. If you think we have, tell us and we will delete it.

Changes to this page

If we change what we collect, we will change this page and move the date at the bottom. Meaningful changes will be called out in the release notes, so you are not expected to keep checking.

Asking us

Questions, or a request to delete anything we hold: info@voxyapp.org.

Last updated 12 October 2026.