Legal

Privacy Policy

Effective May 2026

Introduction

DevOrbit Labs ("we," "our," or "us") builds Dictation Pro with privacy as a first principle. This policy explains what we collect, how we use it, and the choices you have. By using Dictation Pro, you agree to the practices described here.

The short version: recordings are processed on-device by default, transcripts and audio files live only on your iPhone, translation runs locally, and AI enhancement is opt-in and routed through a secure gateway that does not store your audio.

Information We Collect

We deliberately collect as little as possible:

Audio recordings. Recorded with your microphone permission. By default they stay on your device — Apple's on-device Speech Framework performs the transcription. Recordings are saved to the app's sandbox so you can replay them.
Transcripts and metadata. Titles, tags, folders, bookmarks, and timing data are stored locally with CoreData. We have no copy of your library.
AI enhancement requests. When you opt in to a cloud feature (high-accuracy transcription, AI title, AI cleanup, AI summary, Ask AI), the relevant audio or transcript text is sent to our secure AI Gateway (Vercel) and forwarded to OpenAI for processing. See the AI Processing section below.
Anonymous analytics. Mixpanel events for feature usage, navigation and crashes — never your transcript content. You can disable analytics in Settings.
Subscription status. Managed by Apple and RevenueCat. We receive an anonymous subscriber/non-subscriber flag.

On-Device Processing

The following always run locally and never leave your iPhone:

Default speech recognition — Apple Speech Framework, on-device.
Translation — Apple Translation Framework on iOS 18+ (29 languages).
Library, search, folders, tags, bookmarks — CoreData, fully local.
Audio file playback & waveform — local AVAudioEngine.

AI Processing (Optional, Opt-In)

Dictation Pro includes optional AI features. They are off by default and require an explicit tap to invoke:

What is sent. Cleaned transcript text (and, for "high accuracy" mode, the audio file) is sent to dictation-ai-gateway.vercel.app, a serverless endpoint we operate. The gateway forwards the request to OpenAI's API.
What we never send. Your library, contacts, location, or any data not directly required for the requested AI operation.
What the gateway stores. No audio or transcript content. We log only request metadata (timestamp, response time, status code) for abuse prevention and rate limiting. Logs are retained for 30 days.
What OpenAI does. Per OpenAI's API terms, content sent to the API is not used to train their models. See OpenAI's API Data Usage Policy.
Authentication. Requests carry a device-scoped identifier and your subscription tier — never your name, email, or Apple ID.
Fair use. Cloud usage has a generous daily limit. We never count usage for the same recording twice (cached by content hash).

How We Use Information

We use the limited information we collect to:

Provide and maintain the transcription, translation, and AI features.
Process subscription purchases via Apple and RevenueCat.
Detect abuse and enforce rate limits on the AI Gateway.
Improve app performance based on aggregated, anonymous analytics.
Respond to support requests you send us.

Data Sharing

We do not sell or rent your personal information. We share strictly limited data with the following sub-processors:

Apple — App Store distribution, in-app purchases, on-device frameworks.
RevenueCat — Subscription state management.
Mixpanel — Anonymous usage analytics (opt-out available in Settings).
Vercel — Hosting for the AI Gateway serverless functions.
OpenAI — Processing of opt-in AI requests (titles, cleanup, summaries, Ask AI, high-accuracy transcription).

Data Security

All data is encrypted in transit using TLS 1.2+.
The AI Gateway holds no API keys in the iOS app — secrets live only in Vercel environment variables.
Local data inherits the iPhone's hardware encryption.
We follow industry best practices and review our security posture regularly.

Your Rights

Depending on your jurisdiction (GDPR, CCPA, and similar), you have the right to:

Access the data we hold about you (it is essentially limited to subscription and anonymous analytics).
Delete your data — uninstall the app to erase all local data; contact us to remove anonymous identifiers from analytics.
Object to analytics processing — toggle it off in Settings.
Portability — export your transcripts as PDF, DOCX, or plain text from within the app.

Children's Privacy

Dictation Pro is not directed at children under 13 (16 in the EU). We do not knowingly collect personal information from children. If you believe a child has used the app, contact us and we will delete any associated data.

International Transfers

The AI Gateway and its sub-processors operate primarily in the United States. By using AI features you consent to the transfer and processing of the relevant content in those jurisdictions, with safeguards equivalent to those required by GDPR.

Changes to This Policy

We may update this Privacy Policy as the app evolves. Material changes will be announced in the app release notes and via the "Effective" date at the top of this page. Continued use after an update constitutes acceptance.

Contact Us

Questions, requests, or concerns about this policy? Email us at halimozturk@windowslive.com. We aim to respond within 7 business days.