Privacy Policy

1. Responsible party

The controller under the GDPR is Mathias Kusch, Startup Madeira – EV 289, Campus da Penteada, 9020-105 Funchal, Madeira, Portugal, NIF 333.353.960, email hello@dictea.cc. See also the Imprint.

2. Website hosting & server logs

This website is hosted on our own server via Coolify. When you visit the site, the server may automatically process technically necessary connection data in server logs, which can include your IP address, the time of the request and the resource accessed.

The legal basis is our legitimate interest in operating and securing the website (Art. 6(1)(f) GDPR). We do not use tracking, analytics or cookies beyond what is technically necessary.

3. The app: local processing only

Dictea is a macOS desktop app. All audio and video content, transcription, speaker detection, editing and exports are processed exclusively on your own computer. There is no cloud transcription API. Audio content, transcripts and file names never leave your machine and are not transmitted to us or to third parties.

Telemetry is disabled by default; there is no default usage or behaviour analysis.

4. License server (api.dictea.cc)

To activate and validate your license, the app communicates with our license server. Only the data strictly required for license management is processed:

• License key
• Hashed device ID (SHA-256) — a one-way checksum from which your device cannot be reconstructed
• Plan (e.g. monthly, yearly, Lifetime)
• License expiry date
• Time of activation

Audio content, transcripts, file names or other project content are NOT transmitted. The license server serves solely to enforce the license terms (device limit, validity). Legal basis: Art. 6(1)(b) GDPR (performance of the license contract) and Art. 6(1)(f) GDPR (legitimate interest in preventing misuse). Data is stored for the duration of license validity. (TODO: confirm concrete retention period)

5. Payment (creem.io)

Purchases and subscriptions are handled by creem.io as Merchant of Record. creem.io collects and processes the data required for the purchase (e.g. name, email address, payment data, billing address) as its own controller / reseller. We do not receive full payment data, only the information needed to assign the license. creem.io's own privacy terms additionally apply. (TODO: link to creem.io privacy policy)

6. Applicable law

Processing is governed by the EU General Data Protection Regulation (GDPR) and Portuguese data protection law.

7. Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). You also have the right to lodge a complaint with a supervisory authority (Art. 77).

The competent supervisory authority in Portugal is the CNPD (Comissão Nacional de Proteção de Dados, www.cnpd.pt). To exercise your rights, contact us using the details in the Imprint.

8. Changes

We update this policy when the underlying data processing changes. The version published on this page applies.