JustVoice
Download App

Privacy Policy

Last updated: February 25, 2026

1. Our Commitment to Privacy

JustVoice is built on the principle that your voice data belongs to you. By default, all speech-to-text processing happens entirely on your Mac — your audio never leaves your device. We believe privacy is not a feature; it's a foundation.

This Privacy Policy applies to the JustVoice desktop application for macOS (the “Software”) and the JustVoice website at justvoice.ai (the “Website”), collectively referred to as the “Services.” It describes what data we collect, why we collect it, how we use and protect it, and your rights regarding that data.

2. Who We Are

JustVoice is operated by JustVoice, a company registered in the State of New York, United States, doing business as JustVoice (“we,” “us,” or “our”). For the purposes of GDPR, we are the data controller of your personal data.

Contact: justvoiceapp@gmail.com

Data Protection Contact: justvoiceapp@gmail.com

3. Information We Collect

We collect different categories of information depending on how you interact with our Services:

3.1 Account Information

When you create an account, we collect your email address and basic profile information through our authentication provider (Supabase). This data is used for account management, license validation, and subscription handling.

3.2 Payment Information

Payment processing is handled entirely by Stripe. We never see, store, or have access to your full credit card number. Stripe provides us with a transaction ID, subscription status, and billing email — nothing more.

3.3 Usage & Metering Data

The Software tracks your word count for the current billing period to enforce plan limits (5,000 words/month on Free, 50,000 on Plus, unlimited on Pro). This counter is stored locally on your device and transmitted to our server only during license validation checks. We also store aggregate usage statistics locally (total words dictated, dictation duration, active weeks, and apps used) for your personal statistics dashboard; these are never transmitted to our servers.

3.4 Device & Technical Information

During license validation and auto-update checks, the Software transmits your application version and platform (macOS). We do not collect hardware identifiers, IP-based geolocation, or device fingerprints.

3.5 Voice & Audio Data

When using local transcription (Free and Plus plans), your voice audio is processed entirely on your device by the Whisper speech recognition model. No audio data is transmitted over the internet.

When using cloud transcription (Pro plan or user-provided API key), audio is streamed to the selected cloud provider (Deepgram or OpenAI) for real-time transcription. Audio is processed ephemerally and is not stored after the transcription is complete.

3.6 Transcription Text

Transcribed text is produced and stored locally on your device. If you enable cloud AI cleanup, your transcription text (not audio) is sent to a cloud language model for grammar correction and formatting, then discarded by the provider. If you enable cloud sync, your transcription notes are encrypted in transit and stored in our cloud database (Supabase) subject to your plan's retention period.

3.7 Cloud Sync Data

If cloud sync is enabled (Plus and Pro plans), your transcription notes are synced to Supabase for access across devices. This data is encrypted in transit via TLS and stored in Supabase's infrastructure.

3.8 Website Analytics

Our website uses Vercel Analytics, a privacy-respecting analytics service that does not use cookies or track individual users. The JustVoice desktop application does not include any analytics or tracking software.

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data on the following legal bases:

  • Performance of a contract: Account information, payment data, and usage metering are necessary to provide the Services and fulfill your subscription.
  • Consent: Cloud transcription, cloud AI cleanup, and cloud sync are optional features that you explicitly enable. You may withdraw consent at any time by disabling these features in Settings.
  • Legitimate interest: We process device/technical information for license validation, fraud prevention, and software updates. These interests do not override your fundamental rights.

5. Local-First Architecture

JustVoice is designed with a local-first architecture. When using local mode (the default for Free and Plus plans):

  • Voice audio is processed by OpenAI's Whisper model running directly on your Mac's GPU. No audio is transmitted over the internet.
  • No recordings are stored on our servers. Transcription happens in real-time on your device and stays there.
  • Local AI cleanup (grammar correction, formatting) runs entirely on-device using a local language model.
  • Your settings, dictionary entries, snippets, and transcription notes are stored in a local SQLite database on your Mac.

6. Optional Cloud Features

The following cloud features are available depending on your plan and settings. Each must be explicitly enabled by you:

6.1 Cloud Transcription (Pro Plan)

When enabled, audio is streamed via WebSocket to Deepgram for real-time transcription. Deepgram processes audio ephemerally and does not retain your audio data after transcription.

6.2 Cloud AI Cleanup

When enabled, your transcription text (not audio) is sent to a cloud language model (Anthropic Claude or OpenAI GPT, depending on your configuration) for grammar correction and formatting. The text is processed in a single request and is not stored by the provider for training purposes.

6.3 Cloud Sync (Plus and Pro Plans)

When enabled, your transcription notes are synced to Supabase for cross-device access. Data is encrypted in transit via TLS.

6.4 User-Provided API Keys

You may optionally provide your own API keys for cloud STT (Deepgram, OpenAI) or cloud LLM (Anthropic, OpenAI) services. These keys are stored locally on your device and transmitted only to the respective service provider. When you use your own API key, your data is subject to that provider's privacy policy, not ours.

7. Third-Party Service Providers

We work with the following third-party providers to deliver the Services. Each processes data only as necessary for its stated role:

8. Biometric & Voice Data

JustVoice does not create, collect, or store biometric identifiers or biometric information as defined under the Illinois Biometric Information Privacy Act (BIPA), the California Consumer Privacy Act (CCPA), or any other applicable biometric privacy law.

Specifically:

  • We do not create or store voiceprints, voice templates, or any biometric identifier derived from your voice.
  • Voice audio is processed transiently for the sole purpose of converting speech to text. Audio data is discarded immediately after transcription, whether processed locally or via a cloud provider.
  • We do not use voice data for speaker identification, authentication, or any purpose other than speech-to-text transcription.

9. AI & Automated Processing

In accordance with the EU AI Act and transparency best practices, we disclose the following about our use of artificial intelligence:

  • Speech-to-text (local): The Software uses OpenAI's Whisper model (MIT-licensed, open-source) running locally on your device to convert audio to text.
  • Speech-to-text (cloud): When enabled, audio is sent to Deepgram or OpenAI for cloud-based transcription.
  • AI cleanup (local): A local language model corrects grammar and formatting on-device.
  • AI cleanup (cloud): When enabled, text is sent to Anthropic Claude or OpenAI GPT for grammar correction and formatting.
  • No automated decision-making: We do not use AI to make decisions that produce legal or similarly significant effects on you. All AI processing is limited to speech-to-text conversion and text formatting.

10. Auto-Update Data Collection

JustVoice uses the Tauri updater to check for and install software updates. During this process, the Software transmits only your current application version and platform (macOS) to GitHub, where update packages are hosted. No personal data, usage information, or device identifiers are included in update requests.

11. Data Retention

We retain different categories of data for different periods:

  • Account data (email, subscription status): Retained for as long as your account is active, plus 30 days after account deletion.
  • Payment records: Retained by Stripe in accordance with financial regulation requirements (typically 7 years).
  • Transcription notes (cloud sync):
    • Free plan: 7 days of note history
    • Plus plan: 90 days of note history
    • Pro plan: Unlimited note history
  • Voice/audio data: Not retained. Audio is processed transiently and discarded immediately after transcription, whether local or cloud.
  • Cloud transcription text: Not retained by cloud providers after processing.
  • Local data: Settings, dictionary, snippets, and local notes remain on your device until you delete them or uninstall the Software.

12. International Data Transfers

JustVoice is operated from the United States. If you access our Services from outside the United States, your personal data may be transferred to, stored in, and processed in the United States or other countries where our service providers operate.

For users in the EEA, UK, or Switzerland: Where we transfer personal data outside the EEA, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or other legally recognized transfer mechanisms. You may request a copy of the applicable SCCs by contacting us at justvoiceapp@gmail.com.

13. Security Measures

We implement reasonable technical and organizational measures to protect your data:

  • All data transmitted between the Software and cloud services is encrypted using TLS 1.2 or higher.
  • Local data (settings, notes, dictionary) is stored in an SQLite database protected by macOS file system permissions.
  • API keys stored locally on your device are accessible only to the JustVoice application.
  • Payment processing is handled by Stripe, which is PCI DSS Level 1 certified.
  • Authentication is managed by Supabase with industry-standard security practices including row-level security policies.

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

14. Your Rights

14.1 Rights for All Users

Regardless of where you are located, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Export your data in a portable format (see Section 19)
  • Opt out of optional cloud features at any time (see Section 18)

14.2 Additional Rights Under GDPR (EEA/UK/Switzerland)

If you are in the EEA, UK, or Switzerland, you also have the right to:

  • Restrict processing: Request that we limit how we use your data in certain circumstances.
  • Object to processing: Object to processing based on our legitimate interests.
  • Withdraw consent: Withdraw consent for consent-based processing at any time without affecting the lawfulness of prior processing.
  • Lodge a complaint: File a complaint with your local data protection authority.

14.3 Additional Rights Under CCPA (California)

See Section 15 for California-specific disclosures and rights.

14.4 How to Exercise Your Rights

To exercise any of these rights, contact us at justvoiceapp@gmail.com. We will respond to your request within 30 days (or within the timeframe required by applicable law). We may ask you to verify your identity before processing your request. We will not discriminate against you for exercising your rights.

15. California Privacy Disclosures

This section provides additional disclosures required under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

Categories of Personal Information Collected

  • Identifiers: Email address, account ID
  • Commercial information: Subscription plan, billing history
  • Internet or electronic network activity: Application version, platform (for updates and license validation only)

We Do Not Sell or Share Your Personal Information

We do not sell your personal information as defined by the CCPA. We do not share your personal information for cross-context behavioral advertising. We have not sold or shared personal information in the preceding 12 months.

California Residents' Rights

As a California resident, you have the right to:

  • Know what personal information is collected and how it is used
  • Request deletion of your personal information
  • Opt out of the sale of personal information (not applicable)
  • Non-discrimination for exercising your privacy rights

To submit a verifiable consumer request, contact us at justvoiceapp@gmail.com.

16. HIPAA Disclaimer

JustVoice is not a HIPAA-compliant service and is not intended to be used as one. We do not enter into Business Associate Agreements (BAAs). The Software is not designed, intended, or authorized for use in the creation, storage, or transmission of Protected Health Information (PHI) as defined under the Health Insurance Portability and Accountability Act (HIPAA).

If you are a healthcare provider, health plan, healthcare clearinghouse, or business associate subject to HIPAA, it is your responsibility to ensure that your use of JustVoice complies with all applicable regulations. You should not use cloud features to process PHI, and you use the Software at your own risk for any healthcare-related purposes.

17. Children's Privacy

JustVoice is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at justvoiceapp@gmail.com and we will promptly delete such information. If we become aware that we have collected personal information from a child without verifiable parental consent, we will take steps to delete that information.

18. Opt-Out Mechanisms

You have control over which cloud features are enabled. To opt out of data transmission:

  • Cloud transcription: In Settings, set STT mode to “Local” (the default). Your audio will be processed entirely on-device.
  • Cloud AI cleanup: In Settings, disable cloud AI cleanup or remove your cloud API key. AI cleanup will use the local model only.
  • Cloud sync: In Settings, toggle off cloud sync. Your notes will be stored locally only.
  • Account deletion: You can delete your account at any time from the Account tab in Settings, which removes all server-side data.

19. Data Portability

You have the right to export your data in a portable, structured format. You can export your transcription notes from within the Software at any time. If you need a complete export of all personal data we hold (account information, subscription history, cloud-synced notes), contact us at justvoiceapp@gmail.com and we will provide it in JSON format within 30 days.

20. Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

  • Notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR Article 33.
  • Notify affected individuals without undue delay when the breach is likely to result in a high risk to their rights and freedoms.
  • Comply with the California Civil Code § 1798.82 notification requirements for California residents.
  • Comply with all other applicable state and federal breach notification laws.

21. Changes to This Policy

We may update this Privacy Policy as our product and applicable laws evolve. When we make material changes, we will:

  • Provide at least 30 days' advance notice before the changes take effect.
  • Notify you via email (if you have an account) and through an in-app notification.
  • Update the “Last updated” date at the top of this page.

Your continued use of JustVoice after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you should stop using the Services and delete your account.

22. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: