Diktame

Privacy Policy

October 6, 2026

1. Who is responsible

The data controller is Mariano Gómez Labrador · Tax ID: 05708978X · C/ Virgen del Coro, 18, 2.º 1, 28027 Madrid (España) · Email: mrngl1991@gmail.com. You can write to that address about any privacy matter.

2. The key point: your voice never leaves your Mac

Diktame transcribes and translates on your own Mac. The audio you dictate and the text it produces are not sent to our servers or to third parties, and we neither see nor store them.

3. What data we process

We only process what is needed to sell, deliver and protect the Pro license:

  • Purchase: your email address, the Stripe payment and customer identifiers, and your license key. Card details are processed by Stripe; we never see or store them.
  • License activation: the key, an anonymous identifier of your Mac (a SHA-256 fingerprint that does not reveal who you are), the Mac name shown by the system, the app version, your IP address, and the date and time. It is used to enforce the device limit and prevent fraudulent use.
  • Updates: once a day the app requests diktame.app/appcast.xml to check for a new version. That ordinary web request includes your IP and the app version, nothing more.
  • License recovery: if you request it, we record that the email was sent in order to limit sends.
  • Web server: the hosting provider technically and temporarily logs visits (IP, browser) for operation and security.

4. Why and on what legal basis

  • Delivering and activating your license and giving support: performance of the contract (GDPR art. 6(1)(b)).
  • Preventing fraud and use of a license by more people or devices than allowed, and ensuring security: legitimate interest (GDPR art. 6(1)(f)).
  • Invoicing and tax and accounting duties: legal obligation (GDPR art. 6(1)(c)).

5. How long we keep it

  • License and purchase data: while the license is valid and afterwards for as long as legal (tax and commercial) obligations require.
  • Activation logs (with IP): 12 months, then automatically deleted.
  • Recovery email log: 30 days.

6. Who we share it with

We use providers that process data on our behalf, only to deliver the service:

  • Stripe (payments).
  • Supabase (license database, hosted in the EU, Ireland).
  • Vercel (hosting for the website and API).
  • Brevo (sending the license key email).
  • GitHub (hosting the downloadable installer).
  • Some of these providers may process data outside the European Economic Area, under GDPR safeguards (standard contractual clauses or the EU-US Data Privacy Framework). We do not sell your data or use it for advertising.

7. Your rights

You may ask us for access, rectification, erasure, objection, restriction and portability of your data by writing to the contact email. If you believe we are not handling your data properly, you may complain to your data protection authority (in Spain, the AEPD, www.aepd.es).

8. Security

License keys are random, communications are encrypted, the database is not reachable from outside, and licenses are digitally signed so they cannot be forged. No system is infallible, but we apply reasonable measures and review them.

9. Changes

If we change this policy we will publish the new version on this page with its date.