Privacy Policy
Last updated: February 11, 2026
1. Data Controller
Adberry Piotr Romanski
Kutnowska 47
99-120 Piątek, Poland
NIP: 5070096479
Contact: [email protected]
2. Scope
This policy describes how we process personal data for:
- our website at appdicta.com,
- checkout and billing flows,
- account access and license activation for the website version of Dicta,
- support and legal compliance.
It also explains data protection for the Mac App Store version, where payment and account data are handled by Apple.
3. Data We Process
We process only data needed to operate billing and licensing:
- Account data: email address, account identifiers, marketing consent flag.
- Authentication data: one-time sign-in code hashes, session token hashes, expiration and usage timestamps.
- License and device data: random device ID, app version, build number, activation timestamps, session activity timestamps.
- Billing data: Stripe customer/subscription identifiers, plan, currency, amounts, invoice lifecycle metadata.
- Invoicing/tax data: name, country, tax ID and billing address details when provided during checkout.
- Website analytics data (optional): page path, page URL, page title, referrer, browser/device signals, and conversion events (for example:
download_click,begin_checkout,download_start,purchase) collected through Google Analytics 4 only after your analytics consent. - Security and abuse-prevention data: request metadata such as IP address used for rate limiting and infrastructure security.
- Support correspondence: information you send us by email.
4. Data We Do Not Process
Your audio and transcriptions stay on your Mac. Dicta performs speech recognition locally on-device. We do not upload, store, or train on your dictation content.
- No transcription text collection.
- No recording uploads.
- No behavioral ad profiling.
- No sale of personal data.
5. Purposes and Legal Bases (GDPR)
- Contract performance (Art. 6(1)(b)): account login, entitlement checks, billing portal access, customer support.
- Legal obligation (Art. 6(1)(c)): accounting, tax, and fraud-prevention obligations.
- Legitimate interests (Art. 6(1)(f)): service security, abuse prevention, and reliability.
- Consent (Art. 6(1)(a)): website analytics cookies/signals (GA4) and optional marketing communications.
6. Processors and Service Providers
We use third-party providers for payments, email, and hosting:
- Stripe (payments and billing portal) (Privacy Policy)
- Resend (transactional email delivery) (Privacy Policy)
- Vercel (hosting and managed Postgres infrastructure) (Privacy Policy)
- Google Analytics (GA4) (website analytics, only with consent) (Privacy Policy)
7. International Transfers
Some providers process data outside the EEA (including in the United States). Where applicable, we rely on GDPR Chapter V transfer mechanisms such as:
- European Commission adequacy decisions (including the EU-US Data Privacy Framework when applicable),
- or the European Commission Standard Contractual Clauses.
8. Retention
We retain personal data only as long as needed for the purposes above:
- Account, entitlement, and subscription records: for account lifecycle and contractual support.
- Billing and tax records: for statutory accounting/tax retention periods.
- Authentication/session logs: for security, fraud prevention, and incident investigation.
- Support communications: while needed to resolve the request and maintain support history.
9. Security
- Authentication codes and session tokens are stored as hashes, not plaintext.
- Access to production systems is limited to authorized operators.
- Payment card details are processed by Stripe, not stored by us.
10. Your Rights (EEA/UK)
You may have the right to request:
- access, rectification, erasure, restriction, and portability,
- objection to processing based on legitimate interests,
- withdrawal of consent for marketing at any time.
To exercise rights, contact [email protected]. We respond in line with applicable law.
If you are in Poland, you can complain to UODO: uodo.gov.pl.
11. California Notice
We do not sell personal information and do not share personal information for cross-context behavioral advertising. We do not use advertising cookies on appdicta.com. We use analytics only after consent.
California residents can request access, correction, and deletion where applicable by emailing [email protected].
12. Cookies
We use Consent Mode and default analytics/ad storage to denied until you make a choice in the cookie banner. Details are in our Cookie Policy.
13. Mac App Store Distribution
If you buy Dicta through the Mac App Store, Apple processes payment and account data under Apple terms. We do not receive your full payment card data from Apple.
14. Changes and Contact
We may update this policy to reflect legal or product changes. The date above shows the latest revision.
Questions: [email protected]