Privacy policy.

Voktik is a trading name of NAP Ecom Ltd, a company registered in England and Wales with company number 17449874. Our registered office is Lytchett House, Freeland Park, Unit 13, Wareham Road, Poole, Dorset, BH16 6FA, United Kingdom.

NAP Ecom Ltd is the controller of the personal information in this policy. That means we decide how and why it’s used, and we’re responsible for it under UK data protection law. That law is overseen by the Information Commissioner’s Office (ICO), and you have the right to complain to it (see Complaints). In this policy, “Voktik”, “we” and “us” mean NAP Ecom Ltd.

For anything about your information, email help@voktik.com. We haven’t appointed a data protection officer; that address reaches the person responsible for data protection.

Your account

You sign in with Google, and you need to be signed in to dictate. When you do, Google gives us your name, your email address, Google’s ID for your account, and whether Google has confirmed your email. We ask Google for your name and email only. We never see your Google password, and we can’t see anything else in your Google account.

We also keep:

• the PCs you’re signed in on (up to three), named the way Windows names them, with when each was added and last used, so you can see them and sign them out at voktik.com/account
• a sign-in token for each PC, and for the website if you sign in there. We store only a scrambled form of each token (a hash), so a copy of our database couldn’t be used to sign anyone in
• a scrambled identifier for each PC: a salted, one-way hash of the identifier Windows gives your PC. We use it to count the free allowance per PC as well as per account. It can’t be turned back into the Windows identifier or anything else about your PC
• your plan (Free or Pro), and when it ends if we gave you Pro without payment
• whether you’ve switched off usage counts or unsubscribed from marketing email
• where you first came from, if we know: the short label from the link you arrived through (see “Cookies”), or the one on your waitlist place, and the creator’s link you came through, if any. We use these to count which places bring people to Voktik and to apply a creator’s offer

When you dictate

Voktik has to send your speech somewhere to turn it into text. For each dictation, the app sends these to our server at voktik.com, over an encrypted connection:

• the recording, with long silences trimmed out
• up to about 50 words from your dictionary, as a spelling hint
• the language to listen for, if you’ve chosen one

Our server checks that you’re signed in and within your allowance, then passes the recording to our speech-recognition provider, which turns it into text and sends the text back.

If clean-up is on, the app then sends a second request with:

• the text that was heard
• Voktik’s clean-up instructions, your style’s instructions, and your dictionary’s spellings

The same provider tidies the text (removing ums, restarts and filler words, and adding punctuation) and sends it back.

What happens to it:

• Our server doesn’t save the recording or the text. It passes them straight through and keeps only the counts described below.
• Our speech provider doesn’t keep them either. Zero data retention is switched on for our account, so the audio and text aren’t stored once the answer comes back.
• Your voice is never used to train AI, by us or by our provider. We have no AI model of our own to train.
• We don’t use your voice to identify you.

Never sent: screenshots or anything else on your screen; your clipboard (Voktik borrows it to paste, then puts back what was there); window and tab titles; text from other apps; your snippets’ saved text; your history.

If you dictate something sensitive, such as details of your health, it goes through the same process and isn’t kept by us or by our provider.

Word counts and cost records

For each dictation our server records counts, never words:

• how many words and seconds of audio it was, and how many characters were heard
• when it started, a random ID the app gives it, and which of your PCs sent it
• our estimate of what it cost us to process

It also keeps weekly totals for your account. We use these to run the free allowance (2,000 words a week), the fair-use limit (2 hours of audio a day), and daily spending limits that stop a fault or a misused account from running up costs.

Payments

Pro is sold through Onelink, part of Stripe. Onelink is the seller of record for Voktik Pro: it takes the payment, handles the tax, and sends your receipts and any payment-problem emails. Your receipt says “Sold through Onelink”. You enter your card and billing details into Stripe’s own form, including on voktik.com/pro, where Stripe’s form sits inside our page. We never see or store your card number. If you create a Onelink account to manage your purchases, that’s between you and Stripe.

When you start a checkout, we give Stripe your name, your email and our ID for your account. Stripe tells us back your Stripe customer ID, whether your subscription is live, whether it’s monthly or yearly, when it renews or ends, and whether a payment has failed. We also record whether you’ve been shown the one-time offer when cancelling, so it isn’t shown again.

Stripe and Onelink use your payment information for their own part as a separate controller, under Stripe’s privacy policy.

Usage counts and crash reports

These are on by default. You can switch them off in the app, in Settings, Privacy, “Share usage counts and crash reports”. The switch belongs to your account, so turning it off on one PC turns it off on all of them, and our server stops sending its own events about you too.

What’s counted:

• the app opening: its version, your Windows version, your plan, and whether it starts with Windows
• each dictation: the number of words and seconds, how the text went in (pasted, typed, copied or saved), which ready-made style was used (or just that it was one of your own), whether clean-up ran, and whether it was sent later
• the app a dictation went into, but only if it’s a widely used one such as Outlook, Word, Slack, Chrome or ChatGPT. Anything else is recorded as “other”. Websites and window titles are never recorded
• finishing setup, which features you use (for example Paste last or the share image), clicks on Upgrade, and the type of any error
• from our server: signing up, reaching the free limit, opening a checkout, and Pro starting or ending

If Voktik crashes, it writes a small file on your PC with the app version, your Windows version, where in Voktik’s code it failed, and the error message. The next time Voktik starts, it sends that report (if sharing is on) and deletes the file. Anything in quotation marks in the error message is removed first.

Never included: your words, your audio, your dictionary, your snippets, window or tab titles, or your email address. Events are tied to a random ID for your account, not to your name or email. They go from the app to our server, which drops anything not on its list, and then to PostHog, our analytics provider, in the EU. Because our server forwards them, PostHog doesn’t receive your IP address, and we tell it not to work out a location.

We use this to see what works, what breaks, and what to fix first.

Updates

If you installed Voktik from voktik.com, it checks for a new version when it starts and every few hours after. The check sends our server the version you have, and nothing else about you: no account ID and no words. Like any request to a website, it comes from your IP address. A new version is downloaded from GitHub, where we keep the installers, which also sees your IP address. If you installed from the Microsoft Store, the Store updates Voktik instead and our server isn’t asked.

Emails we send you

We send email from hello@voktik.com through Resend, our email provider. We don’t track whether you open our emails or click their links. The emails are:

• a welcome email when your account is made
• one email the first time your free words run out for the week, saying when they come back and what Pro costs
• an email when a friend you referred starts paying, telling you about your reward

And these, which are marketing. You can say no to them when you sign up (the box under the Google button), switch them off or on at any time at voktik.com/account, or use the unsubscribe link in each one. Any of those stops all our marketing email:

• one email about three days after your account is made, if Voktik hasn’t typed anything for you yet, with help getting started
• an email when you’ve used most of a week’s free words, on Free, at most once a calendar month
• one email after your first Pro renewal, about sharing your referral link
• one follow-up email about two weeks after a paid plan ends, if you’re on Free by then

Each of these goes to you once at most, apart from the one about most of your free words, which goes at most once a calendar month. We keep a record of which ones we’ve sent so none repeats.

When you contact us

Email to help@voktik.com is forwarded by IONOS, our domain provider, to a Google (Gmail) inbox, which we reply from. We keep your message, your address and our replies so we can help you.

“Report a bug” and “Suggest a feature” in the app prepare a message for you to email to us; nothing is sent until you send it. A bug report can include the app version, your Windows version and the last 30 lines of the app’s support log. The form shows you exactly what will be included, with a tick box to leave it out. The support log never contains your words, your audio, window titles or your clipboard.

We offer a 20% discount to disabled users, on request. If you tell us about a disability to ask for it, we use what you tell us only to give you the discount. Your email stays in our support inbox, and Stripe records that the discount applies to your subscription.

Refer a friend

Everyone has a referral link. When someone opens yours, a cookie remembers it in their browser for 30 days. If they create an account there, we record that you referred them. When they first pay, you get your reward and an email saying that someone you sent has started Pro. We don’t tell you who, but you may be able to guess. The friend’s discount is applied by Stripe to their first payment.

Creator links

Some creators share their own Voktik link (voktik.com/c/ and their name). When you open one, a cookie remembers it in your browser for 30 days, and we add one to that creator’s count of visits. If you join the waitlist or create an account, we record which creator’s link you came through, so their offer applies to you and we can count how many people each creator brings. We don’t tell the creator who you are.

Emailing you the download link

If you ask voktik.com to email you the download link, we use your email address once, to send that one email through our email provider, and we don’t keep the address. To stop the same address being sent the link more than once a day, we keep a scrambled, one-way form of it (a keyed hash) for two days. Our email provider keeps a record of each email it sends, including the address and the content, for 30 days. We also count how many links we send each day, by where people came from (the label described under “Cookies”), without the address.

Before Voktik opens to everyone, you can join its waitlist on voktik.com. Unlike the download link, this keeps your email address, because the point is to email you when your access opens. We keep:

• your email address, and when you joined and confirmed it
• if you came through a friend’s waitlist link, that you did (so their place moves up), and whether we’ve let you in early
• where you came from (a short label such as “tiktok” from the link you used, or a creator’s name if you came through their link), whether you joined on a Windows PC, a Mac, a phone or a tablet (worked out from your browser, not stored as its details), when you first opened your link on a Windows PC, and, if you give it, your Microsoft account email. We use these to see which places bring people to Voktik, to send the “get ready on your PC” email only to people who joined on something else, and to give early access through the Microsoft Store to anyone who asks for it that way

Your place only counts once you open the link we email you. That link is also your page on the list, where you can see your place, change or remove your Microsoft account email, and leave at any time, which deletes your address. We email you to confirm, then with your place in line and your progress, a note to get ready on your PC if you joined on another device, your early access, launch news and a few tips. When you create a Voktik account with the same address, we use your place to give you the waitlist’s launch offers: extra free words in launch week and the founding price. The person who runs Voktik can see the list on the private admin page. We delete the whole list 30 days after launch.

Keeping Voktik safe and running

• Like any website, our hosting provider receives your IP address and basic details of each request, and keeps server logs. Our server also uses your IP address briefly, in memory, to limit repeated attempts (for example at signing in). It isn’t saved in our database.
• The person who runs Voktik can see, on a private admin page, your name, email, plan, signed-in PCs, word counts, when you were last active and the estimated cost of your dictations. They can give Pro, reset your weekly words, sign your PCs out, and block an account that’s being misused. Every one of these actions is logged.
• We may keep a short private note on your account, for example about a support request. It’s included if you ask for a copy of your information.

Most of what Voktik keeps is kept on your PC, in your Windows user folder (%APPDATA%\Voktik), and never sent to us.

Voktik takes no screenshots and doesn’t read text from other apps. In a web browser it reads the tab’s title on your PC, only to apply a style you’ve set for a website. The title is never saved or sent.

History and settings files are protected by your Windows account, not by extra encryption from Voktik, so anyone who can sign in to your Windows account can read them. To remove everything Voktik keeps on a PC, clear your history in Settings, then delete the Voktik folder in %APPDATA%.

Data protection law says we need a reason, called a lawful basis, for each use. Ours are:

Where we rely on legitimate interests, we’ve weighed them against your rights, and you can object (see Your rights). Where we rely on consent, you can withdraw it at any time.

We don’t make decisions about you by automated means that have legal or similarly significant effects. The free allowance and fair-use limits pause dictation automatically, and your dictations are kept on your PC to send later.

We don’t sell your information. We use these providers to run Voktik. Each one handles your information only to provide its service, except where we say it acts for itself.

If you install Voktik from the Microsoft Store, Microsoft handles that download under its own privacy statement.

We may also share information with our professional advisers (such as our accountants and lawyers), with authorities where the law requires it, and with a buyer if the business or Voktik is ever sold, in which case this policy would continue to protect your information.

Our server and our database are in London, so your account and your counts are kept in the UK. Some of our providers are based in, or keep information in, the United States or the EU. When your information leaves the UK, it’s protected in one of these ways:

• The EU. The UK has “adequacy regulations” for the European Economic Area, which means UK law treats it as protecting your information to the same standard.
• The United States. Vercel, Neon (through its parent company, Databricks), Google, Stripe, Resend and PostHog are certified under the UK Extension to the EU-US Data Privacy Framework, which UK adequacy regulations cover. Several of them also use standard contractual clauses as a second safeguard.
• Our speech-recognition provider, in the United States, isn’t certified under that framework. Transfers to it are covered by the UK Addendum to the EU standard contractual clauses, which is part of its data processing terms with us.

If you’re in the EU, the equivalent EU protections apply. Email us if you’d like more detail on the safeguards for a particular provider, or a copy of the relevant clauses.

Where there isn’t a fixed period, we say how we decide. Most of it is kept while your account exists and deleted when your account is deleted.

Where the law requires us to keep records (for example for tax), we keep them for as long as it requires.

Under UK data protection law you have the right to:

• get a copy of the information we hold about you
• have it corrected if it’s wrong
• have it deleted
• restrict how we use it
• receive it in a format you can take elsewhere
• object to how we use it where we rely on legitimate interests, and to marketing at any time
• withdraw your consent, where we rely on it

To use any of these, email help@voktik.com, ideally from the address on your account. A person will reply within one working day, and we’ll deal with your request within one month. If it’s complex we may need up to two more months, and we’ll tell you if so. It’s free, and we may ask you to confirm who you are first.

Some things you can do yourself at any time:

• switch off usage counts and crash reports in the app, in Settings, Privacy
• stop marketing email with the link in the email, or at voktik.com/account
• see and sign out your PCs at voktik.com/account
• clear or switch off your history in the app
• change your card or cancel from Stripe’s page, through Manage subscription in the app

Deleting your account. Email us and we’ll delete your account, your PCs, your counts, the record of emails we’ve sent you, and any notes about you. We’ll also delete your usage counts from PostHog. If you’re still paying, the subscription has to be cancelled first, so it can’t carry on charging you. Stripe keeps its own payment records as the law requires. What’s on your PC stays there until you remove it (see What stays on your PC).

voktik.com sets only the cookies below. There are no advertising cookies, and our fonts are served from our own site. One cookie, vk_src, is there to count where visitors come from: it holds a short label, such as “tiktok”, from the link you arrived through, never anything that identifies you.

We count visits to the website with Vercel Web Analytics. It doesn’t use cookies to recognise you: Vercel tells visits apart with a scrambled value made from each request, which it throws away after 24 hours, and what it records isn’t tied to you or your IP address. With each page view it records the page (without the private part of any link, such as your waitlist link), the site you came from, roughly where you are (country and city), and your browser, operating system and type of device. We see totals only, including how many people joined the waitlist or asked for the download link.

On voktik.com/pro, Stripe’s payment form may set its own cookies, to process your payment and prevent fraud (see Stripe’s privacy policy). Google’s sign-in page sets its own cookies on Google’s site.

Most of these cookies are needed for something you’ve asked for, so we don’t ask for consent to them. vk_src only helps us count where visitors come from; it holds no identifier, and you can delete it in your browser at any time without anything on voktik.com changing for you. The Voktik app doesn’t use cookies; it keeps its settings on your PC, as described above.

Voktik isn’t designed for children. You must be 18 or over to use it, and we don’t knowingly collect information about anyone younger. If you think a child has an account, email us and we’ll delete it.

• Everything between the app, the website and our providers travels over encrypted connections.
• Sign-in tokens are stored only as hashes, and recordings waiting to be sent are encrypted on your PC.
• The admin page opens only for one named Google account, and only with a recent sign-in. Every change made there is logged.
• Our secret keys, including the one for our speech service, are kept on our server, never in the app.

No system is perfectly secure. If a breach puts your information at risk, we’ll tell you and the Information Commissioner’s Office as the law requires.

When we change this policy, we’ll update this page and the date at the top. If a change matters, such as a new provider receiving your recordings, or a new feature like syncing your settings between PCs, we’ll tell you by email or in the app before it takes effect.

If you’re unhappy with how we’ve handled your information, please email help@voktik.com first, and we’ll try to put it right.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator:

• online at ico.org.uk/make-a-complaint
• by phone on 0303 123 1113
• by post to the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

If you live in the EU, you can also complain to the data protection authority in your country.