Privacy Policy
Last updated: 4 August 2026
The App
Overview
Diktat is a voice-to-text app that runs entirely on your device. We do not collect, store, or transmit any personal data.
Data Processing
- Voice recordings are processed on-device using Apple's Speech framework or locally-installed AI models. No audio data ever leaves your device.
- Transcriptions are stored locally on your device using SwiftData. They are not synced to any server.
- No analytics, no tracking, no ads.
Data Storage
All data is stored locally:
- Transcription history in the app's SwiftData database
- Speech engine models in the app's local storage
- User preferences in UserDefaults
Third-Party Services
Diktat does not use any third-party services, analytics, or tracking frameworks.
Speech engine models may be downloaded from HuggingFace (huggingface.co) on user request. Only the model files are downloaded — no user data is sent.
Apple Services
- Apple Speech Recognition: Processes audio on-device. Governed by Apple's privacy policy.
- iCloud Backup: Your device may include app data in iCloud backups per your device settings.
Diktat for Mac
The same rule applies to the Mac app: dictations are processed entirely on your device and never transmitted. The Mac app connects to the internet in three cases only:
- Model downloads: speech models are downloaded on request from Hugging Face (huggingface.co); the Apple engine loads its language data from Apple (macOS 26 and later). Only the model request is transmitted — never audio, never text.
- License: purchases are handled by Polar (polar.sh) as merchant of record — payment details are seen by Polar only, never by us. On activation the app sends your license key and your Mac's name as a device label to Polar; the license is occasionally revalidated in the background. A dictation never waits for this check.
- Update check: the app periodically fetches our update feed on diktatapp.com (Sparkle, self-hosted). This is a plain server request (IP address, app version); no system profile is transmitted.
Data Deletion
Delete individual transcriptions by swiping left in the History tab. Uninstalling the app removes all data.
Contact
For privacy questions: hello@diktatapp.com
Changes
We may update this policy. Changes will be noted here with an updated date.
This Website
Hosting and Server Logs
This website is hosted on a server we operate at Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany). When you visit the site, the server automatically processes technically necessary data in server logs: your device's IP address, date and time of access, the page requested, the status code returned, and your browser's user agent string.
This data is required to deliver the site, keep it stable, and defend against attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in operating the website securely). Logs are not merged with other data, not shared with third parties, and are deleted regularly.
No cookies, no third-party services
This website sets no cookies and embeds no content from third-party providers — no fonts, no videos, no third-party scripts. There is no cross-device recognition and no profiling.
Audience measurement (Umami)
For audience measurement we use Umami, analytics software we host ourselves on our own server in Germany (analytics.nawalnew.com). The data never leaves our servers and is not passed on to third parties.
Umami sets no cookies and stores no IP addresses. Only aggregated information is recorded: page viewed, referring page, approximate region, device type, browser and operating system. No personal reference is established and individual visitors are not recognised. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a data-minimising analysis of site usage). Because no information is stored on or read from your device, no consent under § 25 TDDDG is required — which is why there is no cookie banner. You can prevent measurement by enabling “Do Not Track” in your browser or by blocking scripts.
Contact by Email
If you email us (hello@diktatapp.com), we process the information you provide solely to handle your request (Art. 6(1)(b) and (f) GDPR). The data is deleted once it is no longer needed and no statutory retention obligations apply.