Speaky Box for
Claude
ChatGPT
Cursor
Slack
Mail
Google Docs
Microsoft Word
Apple NotesCompared with
Read
The short version: the mic is only on while you hold the key, audio is transcribed and deleted, your history lives on your computer, and we never use what you say to train anything. The long version is below.
Speaky Box is operated by Vita OS Ltd, a company registered in England and Wales under company number 16629540 with its registered office at 20 Wenlock Road, London, N1 7GU, which is the data controller for the personal data described here. You can reach us at support@vitaos.com.
Audio you dictate. Recorded only while you hold a Speaky Box key. It is sent over an encrypted connection to a speech-to-text provider, converted to text, and deleted. We do not store audio. Lawful basis: performance of our contract with you.
The text produced. The transcribed text is sent to a language model provider to be cleaned up, in both Dictate mode and Smart mode. In Smart mode it is also restructured for the app you're using. Your custom words and context notes are sent with each dictation so that names and terms come out right. The finished text is then typed into the app you're using. We do not store this text, your custom words or your context notes on our servers. It is stored on your computer in your history if you have history switched on. Lawful basis: performance of our contract.
Your account. Your email address, a sign-in token, the date you signed up, and a running count of words dictated each week so the Free plan's limit can be applied. We do not store the words themselves. Lawful basis: performance of our contract.
Trial, limits and usage. An ID for each install of the app, so the free trial can run before you have an account. Your IP address, used to apply limits that stop abuse of the trial and the service. A log of each dictation recording its time, word count and audio length, used to apply plan limits and keep the service running. The log contains no text. Lawful basis: performance of our contract, and our legitimate interest in preventing abuse.
Payment details. If you subscribe to Pro, payment is handled by our payment provider. We receive your subscription status and the last four digits of your card, never the full card number. Lawful basis: performance of our contract and our legal obligations to keep financial records.
Support emails. If you email us, we keep the correspondence so we can help you. Lawful basis: legitimate interests.
The download link by email. On a phone, a tablet or a computer that is not a Mac or a Windows PC, the download button offers to email you the link, so you can open it on your Mac. If you ask for it, we use your email address to send that link and one reminder if you don't open it. Nothing else is sent to it and you are not added to a mailing list. With the request we record the ad or site that brought you, your type of device and your country. The link in the email is unique to you, so we can see that it was opened on a Mac. If you accepted cookies we also record your IP address, your browser and the page you were on, so the request can be matched to an ad (section 7). If you later subscribe, a one-way fingerprint of the address, not the address itself, lets us tell which ad led to the sale. Lawful basis: taking steps at your request, and our legitimate interest in preventing abuse and knowing which ads work.
Counting visits, without cookies. Unless you press Decline on the cookie banner, the website counts visits, presses of the download button, download links emailed and downloads, together with the ad or site that brought the visitor, the type of device and the country. This uses no cookies and no identifiers, and nothing in it can be tied to you. The totals are passed to Google Analytics. Pressing Decline stops it. Lawful basis: our legitimate interest in knowing how many people visit and which ads work.
Website analytics, with cookies. With your consent only, we use cookies to see which pages people visit, where they get stuck, and which of our ads brought them here. See section 7. Lawful basis: consent.
Your dictation history and your settings are stored in a folder on your computer (on a Mac, in your home folder; on Windows, in your AppData folder) and are not sent to us. Your custom words and context notes are stored in the same folder and sent with each dictation so they can be applied, as described in section 2. You can turn history off in Settings and you can delete the folder at any time. To choose how to write, Speaky Box looks at which app is in front and the title of its window. That is read on your computer, kept only in your history and a log file in the same folder, and never sent to us. To learn from your corrections, for up to a minute after a dictation Speaky Box reads back the text box it typed into, on your computer only; if you retype a name or term it got wrong, that word is added to your custom words, which are sent with each dictation as described in section 2. Nothing else read from the text box is kept or sent to us.
Voice lock (optional, Mac only). If you turn on Voice lock, Speaky Box creates a voiceprint so it can tell your voice from other people's. This is biometric data. It is stored only on your Mac, is never uploaded to us, and you can delete it at any time in Settings > Account > Privacy.
We use a small number of providers to run the service, each bound by contract to process data only on our instructions: a speech-to-text provider (audio), a language model provider (text, custom words and context notes), an email provider (sign-in links, download links and support), a hosting provider (the website and the account service), and a payment provider (Pro subscriptions). We do not sell personal data. Google receives the anonymous visit and download totals described in section 2 and, if you subscribe, the amount paid, with nothing that identifies you. If you accept cookies on the website, Google, Microsoft, Meta and TikTok receive visit and download data so we can understand the site and measure our ads (section 7); nothing from the app is shared with Meta or TikTok. We will disclose data if the law requires it.
Nothing you say or type is used to train models, by us or by the providers we use. Our providers process your data under their business terms, which exclude training.
Some providers process data outside the UK, including in the United States. Where they do, transfers are covered by the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or by an adequacy decision.
The website sets one essential item in your browser to remember your cookie choice. Analytics cookies (Google Analytics and Microsoft Clarity) are set only if you accept them in the banner. So are the Meta Pixel (Meta Platforms Ireland Ltd) and the TikTok Pixel (TikTok Information Technologies UK Ltd), which we use to measure which of our ads lead to downloads. After you accept, Meta and TikTok receive your visit, a press of the download button, a request for the emailed link and a download, along with their own cookie and click IDs, your IP address and your browser. If you ask for the emailed link after accepting, TikTok also receives a one-way scrambled (SHA-256) copy of your email address so it can match the request to an ad. None of this is sent unless you press Accept. You can change your mind at any time by clearing the site's data in your browser, which brings the banner back. The Speaky Box app does not use cookies.
Audio: deleted immediately after transcription. Account data: for as long as you have an account, and 30 days after you delete it. Weekly word counts, sign-in and trial counters, install IDs and IP addresses: deleted after 7 days. The dictation log (how many words and seconds each dictation used, never what you said): deleted after 30 days. Download link requests (your email address and what was recorded with it): 30 days. The counters that limit how many link emails one inbox or one network can ask for: up to three days, held as fingerprints, not addresses. The fingerprint and the payment reference used to tell which ad led to a sale: 13 months. Payment records: six years, as required by UK tax law. Support emails: two years.
Under UK GDPR you can ask us for a copy of your personal data, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable format. Email support@vitaos.com and we will respond within one month. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
Speaky Box is not intended for anyone under 16 and we do not knowingly collect their data.
If we change this policy in a way that matters, we will tell you in the app and update the date at the top of this page.