Privacy Policy

Vokarys provides AI-powered speech recognition and transcription services. Vokarys is the controller of your personal data when you use this service. You can contact us about privacy questions at hello@vokarys.com.

Voice recordings and transcriptions: Recordings you make in Vokarys and the text created from them.

Account information: Email address and, if you choose, display name and avatar, plus login and session information.

Device and technical data: Device type, operating system, browser version, language, and network connection type.

Usage data and logs: How you use the service (features used, timestamps, interaction events) and error logs.

The California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act (CPRA) require businesses to inform California consumers about the categories of personal information collected and the business and commercial purposes for collection before or at the point of collection.

Categories of Personal Information We Collect:

• Voice recordings and transcriptions: Audio recordings you create in Vokarys and the text transcriptions generated from them.
• Account information: Email address, display name, avatar (if provided), and login and session information.
• Device and technical data: Device type, operating system, browser version, language preferences, and network connection type.
• Usage data and logs: Information about how you use the service, including features used, timestamps, interaction events, and error logs.

Business and Commercial Purposes for Collection:

• Provide the service: To deliver speech recognition and transcription services, operate your account, and manage your sessions.
• Improve and develop the service: To conduct research on non-standard speech patterns, improve AI models, enhance accuracy and reliability, and develop new features.
• Operate securely and comply with legal obligations: To prevent abuse, maintain system security, and meet legal, tax, and accounting requirements.
• Analytics and service improvement: To analyze usage patterns, understand how features are used, and improve the overall user experience.

For more detailed information about how we use, share, and protect your personal information, please see the full Privacy Policy sections above and below.

We use your data to:

Provide the service: Run speech recognition, create transcriptions, and operate your account and sessions. Legal basis: performance of a contract (GDPR Art. 6(1)(b)).

Improve and develop Vokarys: Research non-standard speech, improve AI models, and make the service more accurate and reliable. Legal basis: our legitimate interests and, where required, your consent (GDPR Art. 6(1)(f), 6(1)(a)).

Operate securely and comply with law: Prevent abuse, keep systems secure, and meet legal, tax, and accounting obligations. Legal basis: legitimate interests and legal obligations (GDPR Art. 6(1)(f), 6(1)(c)).

Local processing: Speech recognition runs on your device as part of the app experience.

Cloud upload: Some recordings (sampled) are uploaded to our secure cloud servers for analysis, research, and AI training.

De-identification: Where possible, we remove or avoid direct identifiers such as your name and email from training data. We may attach limited metadata (for example, country or self-reported speech characteristics) that is not used to identify you personally.

AI-powered features and cloud AI models: When you use AI features in Vokarys (for example, summaries, rewrites, or suggestions), we send relevant parts of your recordings, transcriptions, and prompts to cloud AI services, including Google Gemini large language models operated by Google Cloud.

Human review: Authorized personnel may review a subset of recordings and transcriptions to check quality and improve our models. Reviewers are instructed not to identify individual users.

Account data: We keep your email and profile while your account is active. If you delete your account, we delete or de-identify this data within 30 days, unless we must keep some information longer for legal, tax, or security reasons.

Voice recordings and transcriptions: We keep recordings and transcriptions as long as needed for research, AI training, and service improvement. When your account is deleted, we separate or remove identifiers from recordings used for AI training so they are no longer reasonably linked to you.

Logs and technical data: Error and technical logs are kept for a limited time needed for security and debugging, then deleted or aggregated.

Encryption in transit: All data transfers use TLS/SSL encryption.

Encryption at rest: Data in our cloud infrastructure is encrypted at rest.

Access controls: Only authorized staff with a specific need can access stored data.

Security monitoring: We monitor systems for security threats and apply security updates regularly.

Cloud provider: We use Google Cloud Platform to store and process data on our behalf under data processing agreements. Data may be stored in or accessed from the EU, the US, or other regions, depending on your location and our infrastructure.

Cloud AI providers: For AI features, we use cloud AI providers, including Google Gemini large language models operated by Google Cloud. These providers act as our data processors and may process your recordings, transcriptions, and prompts only to provide AI outputs to Vokarys based on our documented instructions.

Analytics: We use analytics tools (such as Google Analytics) to collect aggregated and pseudonymous usage data, like page views and feature usage. We do not share your voice recordings or account identifiers (such as your email) with analytics providers.

Data licensing: We may license de-identified voice recordings and transcriptions to third parties for research and commercial purposes, including training speech recognition and other AI systems. Licensed data is not intended to identify you.

International transfers and safeguards: Where data is transferred outside the European Economic Area, we rely on appropriate safeguards such as Standard Contractual Clauses and our providers' security commitments, as required by GDPR.

Legal requirements: We may disclose information if required by law, court order, or a lawful request from authorities.

We use cookies, local storage, and similar technologies to run Vokarys, keep you signed in, and understand how the service is used. Some of these technologies are essential to provide the service, and others (such as analytics and marketing cookies) are used only with your consent.

Essential cookies and storage: These are required for authentication, security, and basic functionality (for example, keeping you logged in and remembering your preferences). They are always active and cannot be turned off without affecting how the service works.

Analytics cookies: With your consent, we use analytics cookies (for example, Google Analytics) to understand how visitors use our website and app, which pages are most visited, and which features are used. This helps us improve Vokarys. Analytics cookies are only loaded after you click "Accept" in our cookie banner.

Marketing cookies: With your consent, we use marketing and conversion tracking cookies (for example, Google Ads) to measure the effectiveness of our campaigns and reach relevant audiences. These cookies are also only loaded after you accept cookies in the banner.

Cookie consent banner: When you first visit Vokarys (and until a choice is saved), we show a cookie banner that explains how we use cookies and allows you to accept or reject non-essential cookies. If you accept, we store your choice in your browser (for example, in local storage) and enable analytics and marketing cookies. If you reject, we store that choice and only use essential cookies and storage needed to run the service.

Changing your choice: You can change your cookie preferences at any time by clearing cookies and site data in your browser settings or using any cookie settings we provide in the app. When your previous consent is cleared, the cookie banner will appear again so you can make a new choice.

For visitors in the EU/EEA, the UK, and similar jurisdictions, we rely on your consent for analytics and marketing cookies. You can withdraw this consent at any time as described above.

Under GDPR, and subject to legal conditions and limitations, you have the right to:

Access: Ask for a copy of the personal data we hold about you.

Rectification: Ask us to correct inaccurate or incomplete personal data.

Erasure: Ask us to delete your personal data in certain cases. When we erase your personal data, we may continue to use de-identified data that is no longer linked to you.

Restriction: Ask us to limit how we use your data in specific situations.

Portability: Ask for personal data you provided to us in a machine-readable format where legally required.

Objection: Object to processing based on our legitimate interests, including some types of research or analytics. We may continue processing if we have compelling legitimate grounds or if processing is needed for legal claims.

Withdraw consent: Where we rely on consent, you can withdraw it at any time. This does not affect processing that has already happened, but it may mean we cannot provide parts of the service.

To exercise these rights, contact hello@vokarys.com. We will respond within one month (30 days), as required by law.

Not a HIPAA-covered entity: Vokarys is not a healthcare provider, health plan, or healthcare clearinghouse and is not a HIPAA-covered entity.

Not for medical use: Do not use Vokarys for medical diagnosis, treatment, clinical documentation, or emergency communication. The service is for general communication assistance only.

Protected health information: Do not record or transmit Protected Health Information (PHI) through Vokarys. We do not guarantee HIPAA-compliant handling of medical information and you should not submit such information.

Age requirement: Vokarys is not intended for children under 13. We do not knowingly collect data from children under 13.

Ages 13-17: Users between 13 and 17 should only use Vokarys with permission from a parent or legal guardian. A parent or guardian may contact us to access or delete a teenager's account data.

If you believe a child under 13 has provided data, contact us at hello@vokarys.com and we will take appropriate steps to delete it.

If we become aware of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay when required by law and explain what happened, what data may be affected, and what steps we are taking.

We may update this Privacy Policy from time to time. If we make material changes, we will inform you by email or in-app notice where required by law or where appropriate. The "Last updated" date will always show the latest version. If you continue to use Vokarys after the updated policy becomes effective, you are considered to have agreed to the changes.

Last updated: November 29, 2025

All Inquiries: hello@vokarys.com

For any privacy questions, concerns, or requests, contact us at this address.