📱 iOS App — On-Device AI Disclosure
VoicePad AI for iOS uses the open-source Whisper model (originally released by OpenAI) running entirely on your device via whisper.cpp. This is a locally-executed model — no audio, voice data, or transcribed text is ever transmitted to OpenAI, any cloud service, or any third party.
VoicePad AI does not use the OpenAI API, ChatGPT, or any internet-connected AI service. All speech recognition happens in your device's local memory and is discarded immediately after processing.
Data sent to third parties: None. The app functions fully offline after the one-time license activation.
1. Voice Data — Your Audio Never Leaves Your Device
VoicePad AI uses OpenAI Whisper, an open-source AI model that runs 100% locally on your device:
- Audio Capture: Your microphone captures audio only when you activate dictation
- Local Processing: Whisper AI processes audio entirely in your device's RAM
- Text Output: Converted text goes to your clipboard or active application
- Immediate Deletion: Audio data is discarded from memory immediately after processing
- No Network Transmission: Audio data never touches the internet — the app works fully offline
2. What We Collect — Only Your Email for Licensing
We collect the absolute minimum data required to provide you with a license:
| Data | Purpose | Legal Basis (GDPR) | Retention |
|---|---|---|---|
| Email Address | License delivery and management via LemonSqueezy | Art. 6(1)(b) — Contract fulfillment | Duration of license ownership |
| License Key | One-time validation at activation via Supabase | Art. 6(1)(b) — Contract fulfillment | Duration of license ownership |
| Transaction ID | Payment verification, refunds | Art. 6(1)(c) — Legal obligation | 7 years (tax compliance) |
After initial license activation, VoicePad AI operates fully offline. No ongoing data transmission occurs.
3. Data We Never Collect
- ❌ Voice recordings or raw audio data
- ❌ Transcribed text content
- ❌ Keystrokes, screen content, or clipboard data
- ❌ Documents, files, or user-generated content
- ❌ Location or GPS data
- ❌ Browsing history or internet activity
- ❌ Contact lists, calendar, or personal files
- ❌ Analytics or usage tracking data
- ❌ Device identifiers or fingerprints
4. Data Controller Information
Data Controller: VoicePad AI
Filderstadt, Germany
Contact: contact@voicepad.tech
Website: https://voicepad.tech
5. Third-Party Services
| Service | Purpose | Data Shared | Location |
|---|---|---|---|
| LemonSqueezy | Payment processing, license delivery | Email, transaction data | EU/US |
| Supabase | License validation (one-time at activation) | License key | EU |
| OpenAI Whisper | Speech recognition | None — runs locally on your device | On-device only |
No Analytics: VoicePad AI does not use Google Analytics, Plausible, or any other tracking service. We have no visibility into how you use the app.
6. Data Security
We implement appropriate security measures:
- HTTPS/TLS encryption for all network communications
- License data encrypted locally on your device
- Minimal data collection reduces attack surface
- No cloud storage of user data
7. Your Rights Under GDPR
As a data subject under GDPR (EU) 2016/679, you have the following rights:
| Right | Description |
|---|---|
| Access (Art. 15) | Request confirmation of processing and access to your data |
| Rectification (Art. 16) | Correct inaccurate or incomplete data |
| Erasure (Art. 17) | Request deletion ("right to be forgotten") |
| Restriction (Art. 18) | Limit processing in specific circumstances |
| Portability (Art. 20) | Receive data in structured, machine-readable format |
| Objection (Art. 21) | Object to processing based on legitimate interests |
| Lodge Complaint (Art. 77) | File complaint with supervisory authority |
To exercise your rights, email: contact@voicepad.tech. We respond within 30 days.
8. Children's Privacy
VoicePad AI is not intended for individuals under 16 years of age. We do not knowingly collect personal data from children under 16.
9. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices. Material changes will be communicated via the "Last Updated" date on this page. Continued use after changes constitutes acceptance.
10. Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority: