Privacy Policy
Last updated: 24 September 2026
This notice covers the current Dictea website. App licensing and payment are described separately as planned processing: downloads and purchases are not enabled here.
1. Controller
Matikus, Lda., Startup Madeira – EV289, Campus da Penteada, 9020-105 Funchal, Madeira, Portugal, NIPC 519 513 630, is responsible for personal data processed through this website. Contact: dictea@matikus.com.
2. Website delivery and technical data
Opening a page sends your IP address, requested URL, request time and browser/connection information to the hosting infrastructure. These data enable delivery, troubleshooting and protection against misuse. The basis is our legitimate interest in a reliable, secure website (Article 6(1)(f) GDPR). Without the necessary connection data we cannot deliver the page.
The website has no analytics, advertising pixels, embedded checkout, upload form or user account. Fonts are served from our own domain. Hosting providers may process connection data and email providers may process correspondence on our behalf; competent authorities may receive data where legally required.
3. Browser storage
The page URL determines the language. We do not set language cookies or store the language in localStorage. Your browser language is read locally only to suggest an alternative language; it is not sent to a language-detection service.
Only when you dismiss or accept the language suggestion do we store dictea_lang_hint_dismissed = 1 in sessionStorage. It remembers that request for the current tab/session and is not sent to our server. You can clear it through your browser’s site-data settings. The basis is our legitimate interest in respecting your interface preference (Article 6(1)(f) GDPR); this storage is used solely for the function you requested.
The mobile download bar works the same way: closing it stores dictea_cta_bar_dismissed = 1 in sessionStorage solely to keep it closed for the current tab/session. The same purpose, legal basis and deletion options apply. Earlier versions used localStorage for this preference; the current version no longer reads or renews that old entry.
Earlier versions stored dictea_lng as a session cookie and localStorage entry and dictea_lang_hint_dismissed in localStorage. The current version does not use or renew these entries. Existing localStorage entries remain until you clear site data; a legacy cookie expires with the browser session.
4. Contact
If you email us, we process your address, message, any supplied name and attachments to answer your request. For contractual or pre-contractual enquiries the basis is Article 6(1)(b) GDPR; for other enquiries it is our legitimate interest in responding (Article 6(1)(f)). You choose what to send; without a reply address and sufficient context we may be unable to help. Please do not send recordings or sensitive information unless necessary.
5. Retention and safeguards
Retention is determined by purpose: technical logs for the period needed to investigate operational or security issues; correspondence until the enquiry is resolved and any necessary follow-up is complete. Where a legal retention duty or a concrete legal claim requires longer storage, the relevant records are retained for that purpose, not for unrestricted reuse. Browser storage follows the lifetime described above.
You can request information about the recipients, retention applicable to your request and safeguards for any transfer outside the EEA using our contact address.
6. App and planned licence processing
Dictea is designed to transcribe audio and video locally on your device. Local transcription does not mean that licensing or software downloads work without network connections. This website does not receive your recordings, transcripts or project files.
For future licence activation, api.dictea.cc is intended to process a licence key, pseudonymous device hash, plan/status, expiry, activation and last-validation times. Licence records may also contain a name, email, installation reference and payment/customer/subscription identifiers. A device hash is not anonymous data. The intended purposes are contract performance and abuse prevention (Articles 6(1)(b) and (f) GDPR). The release-specific recipients and retention information must be provided before that processing is enabled.
For exclusively local transcription, where Matikus does not receive or process your recordings or transcripts on your behalf, a customer DPA with Matikus is generally not required for that activity. Website, support-contact and licence administration are separate processing activities described in the privacy policy. Before sending customer recordings or arranging support with access to personal data, contact us to clarify the roles and any required DPA. Cloud processing or shared storage would need a new assessment.
7. Planned payments
When purchases become available through Creem (Armitage Labs OÜ), Creem will act as merchant of record and an independent controller for checkout and payment data, such as identity, billing address and payment details. Matikus would receive licence and transaction references needed to deliver and manage the product, not full card details. No Creem checkout or tracking code is loaded merely by visiting this website. Following a link opens the provider’s own site and privacy terms.
8. Your rights
Subject to the GDPR’s conditions, you may request access, correction, deletion, restriction and portability of your personal data. You may object to processing based on legitimate interests on grounds relating to your situation. Where processing relies on consent, you may withdraw it for the future without affecting prior lawful processing.
Contact dictea@matikus.com to exercise these rights. We normally respond within one month; any permitted extension and its reasons will be communicated within that period. We may need proportionate information to verify your identity. This website does not use automated decision-making with legal or similarly significant effects.
You may complain to the Portuguese CNPD or another competent supervisory authority, including in the EEA country where you live or work.
9. Changes
We update this notice when processing changes. Additional information will be provided before new functions collect personal data. The date above identifies this version.