Privacy Policy

VoiceBee is a voice-to-text application available on macOS, Windows, and iOS, built by ByteBee — AI Services & Agent Orchestration, a company registered in Athens, Greece. We take your privacy seriously — especially since you're trusting us with your voice. This policy explains what data we collect, how we use it, and your rights.

Data controller

ByteBee — AI Services & Agent Orchestration
Athens, Greece
Email: hello@bytebee.gr

What we collect

• Account info — your email address when you sign up (email or Google OAuth)
• Voice audio — temporarily, only during transcription (see below)
• Transcription text — processed locally or via cloud, depending on your settings. Cloud transcripts are encrypted server-side.
• Usage stats — word count, session count, and app version (no personal content)
• Subscription data — plan type, billing status, and purchase receipts (Stripe for desktop, Apple In-App Purchase for iOS)

What we do NOT collect

• We do not collect location data
• We do not access your contacts, photos, or other personal files
• We do not use tracking technologies, analytics SDKs, or advertising identifiers
• The iOS keyboard extension does not log or transmit keystrokes — it only processes voice input

Local mode (Whisper AI) — Desktop only

When you use local mode on desktop, all audio is processed entirely on your device using the Whisper AI model. Your voice data never leaves your computer. Audio is deleted immediately after transcription — nothing is stored, uploaded, or logged.

Cloud mode

When you use cloud mode (default on iOS, optional on desktop), your audio is sent to our cloud speech-to-text providers via our secure server for transcription. The provider processes the audio and returns the text. According to our providers' API data usage policies, audio sent through the API is not used to train their models and is not stored permanently. We do not retain your audio after the transcription is complete.

AI Dictation (optional)

If you enable AI Dictation, your transcribed text (not audio) may be sent to one of the following AI providers for rewriting and enhancement:

• Anthropic (Claude) — AI text processing
• OpenRouter — routing to models including Gemini, Grok, DeepSeek, Llama, and Qwen
• AIMLAPI — routing to models including GPT and Mistral

AI Dictation is off by default and requires a Pro plan. All API calls go through our server — no API keys are exposed on your device. These providers process data per their API terms and do not use API inputs for model training.

Active App Context (optional, off by default) — Desktop only

AI Assistants in VoiceBee can optionally read the name of the application you are currently using and the title bar of its frontmost window when you dictate, so the assistant's behavior can adapt to your context (for example, formatting differently when you are in a code editor, a chat app, or an email client).

This feature is:

• Opt-in per assistant and off by default — you must explicitly enable it on each assistant where you want it
• Confirmed once — the first time you turn it on, VoiceBee shows a disclosure dialog explaining what data leaves the device, and you must accept it before the toggle takes effect
• Sent only at dictation time to the AI model that powers the assistant — bundled with the transcript, in the same request, never on a schedule and never in the background
• Never stored in your transcript history or anywhere on our servers — it is used only to compose the prompt sent to the AI model and is then discarded
• Reversible at any time from the assistant's settings; turning it off stops VoiceBee from reading the active app entirely (no operating-system call is made when the toggle is off)
• Currently available on macOS and Windows desktop — not available on iOS or Android

Window titles can sometimes contain sensitive information such as file names, email subjects, channel names, or document titles. That is precisely why this feature is opt-in, requires confirmation, and is presented separately from regular AI Dictation. You remain in full control of which assistants — if any — see your active-app context.

iOS keyboard extension

VoiceBee's iOS keyboard extension requires Full Access to communicate with the container app for voice transcription. The keyboard extension:

• Does not log, store, or transmit any text you type
• Does not access the network directly — all cloud communication happens through the container app
• Only processes voice input when you tap the microphone button
• Uses a shared on-device file (App Groups) to communicate with the container app — no external servers involved in this communication

Third-party services

• Supabase — authentication, encrypted transcript storage, and serverless functions (hosted in EU/US)
• Cloud STT providers — cloud speech-to-text processing (multiple engines available)
• Anthropic, OpenRouter, AIMLAPI — AI text processing (only when AI Dictation is enabled)
• Stripe — payment processing for desktop subscriptions
• Apple — In-App Purchase processing for iOS subscriptions

We do not sell, share, or provide your data to any other third parties. Where data is transferred to the United States, such transfers are protected by appropriate safeguards including the EU–U.S. Data Privacy Framework.

Data storage & security

• All data transmitted to external services is encrypted in transit using TLS 1.2 or higher
• Transcript history is encrypted server-side using pgcrypto symmetric encryption
• API keys and credentials are securely stored and never exposed to client applications
• Authentication tokens on iOS are stored in the system Keychain
• Audio files on desktop are automatically deleted after the configured retention period (default: 7 days)
• We keep account data only as long as your account is active

Data retention

• Voice/audio data — processed in real time and not retained on our servers
• Transcript history — encrypted and stored until you delete it. You can delete individual transcripts or clear all history from the app.
• Account data — retained while your account is active. Deleted upon account deletion request.

Communications we send to your email

When you create a VoiceBee account, we use the email address you provided (or the relay address Apple provides when you sign in with Apple) to send you a small number of service-related messages that are necessary for you to get value out of the product. The legal basis under GDPR Art. 6(1)(b) is the performance of your service agreement with us.

Specifically, we may email you about:

• Account & security — email confirmation, password reset, magic-link sign-in, email change verification
• Onboarding & activation help — a small number of short messages that help you finish setting up VoiceBee if you got stuck (for example, enabling the iOS keyboard extension or choosing a speech-to-text provider)
• Subscription lifecycle — trial-ending reminders, renewal receipts, payment failures, cancellation confirmations
• Material changes to this policy or the Terms of Service, at least 30 days in advance where the law requires it

We do not send marketing newsletters, promotional offers, cross-sell campaigns, or content from third-party advertisers to this address. If we ever launch an optional newsletter, we will ask for your separate consent first, and you will always be able to refuse without losing access to the product.

Every onboarding and lifecycle message includes a one-click unsubscribe link. Opting out of those messages does not affect delivery of strictly required security messages (password reset, email verification, significant changes to these terms) which we must send to keep your account safe.

Your rights (GDPR)

If you're in the EU or EEA, you have the right to:

• Access your personal data
• Delete your account and all associated data
• Export your data in a portable format
• Correct any inaccurate information
• Object to processing of your data
• Restrict processing of your data
• Withdraw consent at any time without affecting lawfulness of prior processing

To exercise any of these rights, email us at hello@bytebee.gr. We'll respond within 30 days. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) at www.dpa.gr.

Children

VoiceBee is not intended for children under 16. We do not knowingly collect data from anyone under 16 years of age. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

Changes to this policy

We may update this policy from time to time. If we make significant changes, we'll notify you through the app or by email. The "last updated" date at the top always reflects the most recent version.

Contact

Questions about your privacy? Reach us at hello@bytebee.gr.