Privacy Policy
Last updated: February 17, 2026
Vocally is a privacy-conscious voice-to-text application developed by SL:IT ("we", "us", "our"). This Privacy Policy explains how we collect, use, and protect your information when you use the Vocally desktop application ("Software") and our website.
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Email address (via email/password sign-up, or provided by Google or Kakao during OAuth sign-in)
- Display name (if provided through your sign-in method)
- Authentication identifiers (user ID generated by our authentication provider)
Account creation is optional. You may use the Software without an account for local-only features.
1.2 Subscription & Payment Information
If you purchase a subscription, payment is processed by Polar, our merchant of record. We do not directly collect or store your credit card or billing details. Polar handles all payment processing. We receive and store:
- Your subscription plan and status
- Purchase dates and billing cycle information
For details on how Polar handles your payment data, please refer to Polar's Privacy Policy.
1.3 Usage Data & Analytics
We use Mixpanel to collect anonymized usage analytics on both the desktop application and our website. This includes:
- Page views and navigation patterns
- Button clicks and feature usage
- Dictation events (duration, word count, transcription mode — not the content of your dictation)
- Settings changes
- Sign-in and sign-up events (method used, success/failure)
- Error events (type and stage — not personal content)
- Onboarding progress
Mixpanel may use cookies or local storage identifiers to track sessions. You can learn more at Mixpanel's Privacy Policy.
1.4 Usage Counters
To enforce plan limits, we track:
- Words transcribed (daily, monthly, and total counts)
- AI tokens consumed (daily, monthly, and total counts)
These counters are associated with your account and stored on our servers.
2. Audio & Transcription Processing
2.1 Local Processing (Whisper)
When using local Whisper transcription, all audio processing happens entirely on your device. Audio data never leaves your device, and transcriptions are stored locally.
2.2 Cloud-Based Transcription (Optional)
If you choose to use cloud-based transcription services, audio data is transmitted to third-party providers for processing. The available cloud transcription options are:
- Groq — for Whisper-based cloud transcription and AI text cleanup
- AssemblyAI — for real-time streaming transcription
- Deepgram — for real-time streaming transcription
Use of these services is entirely optional and under your control. You supply your own API keys, and we do not receive, store, or have access to any audio or transcription data sent to these providers. Each provider's own privacy policy governs their handling of your data.
3. AI Text Processing
When you use AI-powered features (text cleanup, tone adjustment, agent mode), text may be sent to cloud-based AI providers (such as Groq) for processing. This is optional and depends on your chosen configuration. Local processing options are available when supported.
4. Data Storage
4.1 Local Storage
The following data is stored locally on your device via SQLite:
- Transcription history and recordings
- Application settings and preferences
- API keys (encrypted)
- Dictionary terms and tone configurations
4.2 Remote Storage
The following data is stored on our servers via Supabase:
- Account information (email, display name, user ID)
- Subscription plan and status
- Usage counters (word and token counts)
5. Third-Party Services
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Authentication & account data | Email, display name, user ID, subscription info |
| Polar | Payment processing | Payment handled by Polar directly |
| Mixpanel | Usage analytics | Anonymized usage events (see Section 1.3) |
| Groq | Cloud transcription & AI processing | Audio data, text (only when you opt in) |
| AssemblyAI | Real-time transcription | Audio data (only when you opt in) |
| Deepgram | Real-time transcription | Audio data (only when you opt in) |
6. Your Rights & Control
- Account deletion: You can delete your account and all associated remote data from within the application settings.
- Local data: You can delete any locally stored data at any time through your device's file system or by uninstalling the Software.
- Cloud transcription: You can switch between local and cloud transcription at any time.
- Analytics opt-out: Mixpanel analytics are only active when a valid analytics token is configured. The Software can operate without analytics.
- No account required: You may use the Software's core features locally without creating an account.
7. Data Security
We use industry-standard security measures to protect your information:
- API keys are encrypted before local storage
- Authentication is handled through Supabase with secure token management
- All data transmission uses HTTPS/TLS encryption
- Payments are processed through Polar's secure infrastructure
8. Children's Privacy
Vocally is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date. If you have an account, we may notify you of significant changes via email.
10. Contact Us
For questions about this Privacy Policy or Vocally's privacy practices, please contact us at slit.amazing@gmail.com.