VoxTypeBack to website

VoxType Privacy Policy

Last updated: 9 October 2026 · Contact: support@voxtype.dibolky.com

VoxType is a voice-dictation keyboard and floating mic button by Dibolky. This policy explains exactly what data the app handles and where it goes. The short version: your typing stays on your device; your voice is sent for transcription only when you tap the mic; we run a zero-log transcription proxy and store no audio of your dictation. The one exception is a voice note you choose to send to a friend or group, which is kept for a limited time (see the section on friends, groups, chat and family features).

What the keyboard can see, and what it does with it

As an input method (keyboard), VoxType technically processes the text you type in order to type it. VoxType does not log, store remotely, or transmit your keystrokes. Typed text leaves your device only when you use a feature that needs it: the words you type into GIF and sticker search, the optional AI text features, and the optional cloud backup and clipboard sync, all described below. Voice dictation sends your voice, not your typing. Word suggestions, autocorrect, the typing statistics and the word lists VoxType learns run entirely on the device.

Voice recordings

AI text features (optional)

AI polish, writing modes, and one-tap actions (rephrase, translate, etc.) send the dictated or selected text to a language-model provider (your configured provider, or VoxType Cloud, which uses Groq) to produce the improved text. This happens only when the feature is enabled or tapped. The text is not stored by our server. The same applies to the newer tools that write or translate for you (for example recipe and story cards, letters, table talk, a headline or a line "from far away"): only the words you give that tool are sent, and only when you tap it.

Account (optional Google Sign-In)

Signing in is optional and used for subscriptions, redeem codes, syncing your Pro status across devices and, when you use them, invites, gifts, family plans and rooms shared with friends (each described below). When you sign in with Google we store: your Google account id, your verified email address, and your entitlement (plan and expiry). Session tokens are stored hashed. We do not access your contacts, Drive, or any other Google data. You can delete your account and what our server keeps for it in the app (Profile, then Delete account) or through voxtype.dibolky.com/delete-account.

Cloud backup (optional)

Backing up to your account is off by default. If you turn it on, it covers your text history (with its stars, tags and note type), your own API keys, your dictionary (custom words and corrections), your text shortcuts, the words you pinned for suggestions and your settings. It never includes the list of apps you dictate in, per-app choices, incognito or History lock, or options that need your consent on each phone (such as reading other apps' screens, hardware keys, the weekly digest or clipboard sync); a new phone starts with those off. If you turn it on, everything is encrypted on your device before it is uploaded, and stored on our server as ciphertext (never plaintext). So the backup can restore automatically whenever you sign in on a new phone, the encryption key is kept for your account on our server (itself encrypted at rest); this means our servers can technically decrypt your backed-up text, but it is never read, logged, used for advertising, or shared, and it is transmitted only over HTTPS. A "Delete cloud backup" button in the app permanently wipes the server copy (text, keys, dictionary, shortcuts, settings, synced clipboard items and the key) at any time. Voice recordings are never uploaded to backup.

Welcome gift

To give each phone one welcome gift, the app makes a one-way code from this phone's app-specific Android ID, but only after you tap to turn the gift on, and sends only that code. Our server keeps a keyed hash of it, never the ID itself. The app also saves a signed gift code in your Google backup (Block Store) and in its own backup, so a reinstall continues the same gift instead of starting a new one. If you are signed in, the gift's dates are also recorded on your account so other rewards add after it. To limit abuse, we count gift claims per network address per day, using a one-way code that is deleted within two days. We count how many gifts lead to a purchase, in total only. We use these only to stop repeat gifts (legal basis: our legitimate interest in preventing abuse). We keep them for up to 12 months after last use, including after account deletion. You can object by writing to support; we will then delete the code, but this phone can no longer receive a welcome gift.

Device identifier & quota

The app uses a random, app-scoped installation identifier (a UUID). It is not derived from device hardware. An existing VoxType installation keeps its identifier across an app update; new installs receive a new one. The identifier is excluded from Android backup/device transfer, and is reset when you uninstall the app or clear its data. It is used to meter the free VoxType Cloud quota and rewarded-ad unlocks and, when diagnostics are enabled, to count content-free product events without counting one installation twice. The welcome gift's one-way phone code, described above, is a different value: it is made from the app-specific Android ID only after you tap to turn the gift on.

Anonymous diagnostics and product analytics

Diagnostics are enabled by default and can be disabled in Settings → Privacy → Share anonymous diagnostics. When enabled, Sentry may receive crash and ANR reports; PostHog may receive content-free, versioned feature events such as onboarding completion, dictation duration and outcome, language/engine choice, settings adoption, keyboard usage and callback-confirmed ad outcomes. These events use the app-scoped installation UUID and may be associated with a pseudonymous VoxType account only after you sign in. Signing out resets the analytics account profile while retaining the safe installation context. The PostHog host is configured for the EU region; Sentry's region follows the DSN configured for the build. We do not send typed or dictated text, screenshots, view hierarchies, clipboard contents, raw errors, host-application names, purchase tokens, order ids, or session recordings. Diagnostics are used only to fix bugs and understand feature use.

For verified purchases, entitlement changes, rewarded quota grants, and notification sends, our backend keeps a small append-only operational ledger. It stores HMAC-derived references and allowlisted scalar outcomes rather than account ids, installation ids, purchase tokens, order ids, or message content. The owner dashboard exposes aggregate counts and freshness only; it does not expose individual event rows.

Ads & purchases

Without Pro you get a daily allowance of VoxType Cloud dictation (3 minutes a day by default) and can watch rewarded ads for additional temporary access. Pro is available as monthly, annual and lifetime Google Play products. AdMob may process data as described in Google's privacy policy. Purchases and subscriptions are handled by Google Play Billing; we receive a purchase token to verify the purchase but never see your payment details.

Clipboard & GIFs

The keyboard's clipboard panel reads your clipboard history locally to show it to you. It is not uploaded unless you turn on clipboard sync (off by default, available only with cloud backup on). With it on, the text on your clipboard when you open the VoxType keyboard, wherever you copied it, is encrypted on your phone before upload and shown on your other signed-in phones. It skips passwords and anything marked sensitive, one-time codes, card numbers, account numbers, API keys, images and VoxType's own copies, and never runs in incognito or password fields. Only the newest 100 unpinned items are kept on our server; deleted items are removed from your other phones and their record is erased after 30 days. GIF search queries are proxied through our server to the GIF provider (Klipy or GIPHY) without any account identifier attached.

Accessibility service (floating mic)

The optional floating mic button uses Android's accessibility service to insert your dictated text into the focused text field of other apps and, only when you end a dictation with "send it" and that command is on, to press that app's Send button for you. To find the Send button it looks at the buttons of the app on screen at that moment. It does not read or keep your messages or other screen content, does not collect data from other apps, and nothing it sees is stored or sent. It runs only if you enable it in system settings.

Weather and approximate location (optional)

Weather on Home is off until you turn it on. You either pick a city from a list kept in the app, or allow approximate location (Android's coarse location, never precise GPS), which the app asks for once, inside the app, never in the background and never from the keyboard. The app rounds the place to about 11 km and asks MET Norway (the Norwegian Meteorological Institute) for the forecast directly, not through our server, at most once every 30 minutes and only while you use VoxType or its keyboard. No account, name or installation id is sent; like any web request, MET Norway sees your internet address. We never receive your location. The forecast is kept on your phone for a few hours. Turn it off at any time in Appearance, then Weather, and nothing is sent after that. Weather data from MET Norway, shared under CC BY 4.0.

Offline dictation (optional download)

Offline dictation is off until you download it in Settings. On the Google Play version the speech engine arrives through Google Play; the speech model you choose downloads directly from Hugging Face, where it is published. No account, name, recording or text is sent with these downloads; like any web request, the download site sees your internet address. Once installed, offline dictation runs entirely on your phone: your voice and words are not sent anywhere. You can delete the engine and models at any time in Settings.

Features that stay on your phone

Most of what the newer features show is worked out and kept on your phone only: your records, levels, awards, streak rest days and pauses, the time you saved, the optional list of new words you said this week, your word of the week and the home-screen widget's lines, the help profiles you add for someone you write for, the name you give the floating mic, your birthday, your "why" line and letters to yourself, family dates and wish lists, the wisdom jar, diaries, kept family answers and their recordings, stickers you make, trips and puzzles. None of these is sent to our server, except that your settings and History text are part of the optional cloud backup described above. Android's own device backup may include some of them, but never the personal notes: letters to yourself, your "why" line, your birthday, help profiles and the word list stay only on this phone. Cards, pictures, PDFs and short videos are made on your phone and go only where you choose to share them: nothing is shared unless you tap Share and pick where it goes.

Notifications from friends and gifts

Some features can tell you when something happens, for example that a friend you invited to VoxType has been counted, that a gift you gave was opened (only if the person who opened it allowed it), or that someone cheered your milestone. These invite, gift and cheer notifications are sent at most once a day, never between 22:00 and 07:00 India time, never in a new install's first week unless you joined that feature, and never carry anyone's words. Every one of them is also shown inside the app. Notifications from friends, groups, chat and games follow different rules, described in the section on those features.

Invites, rewards and feedback

When you invite friends, our server keeps your invite codes (a short code and a code you can say out loud) and, if you add one, your welcome note (up to 140 characters; links, phone numbers and payment ids are removed). Anyone with your code can see that note. You can change or delete it in the app at any time.

When a friend signs in and enters your code, we store the link between their account and yours, whether they allowed you to see their first name (and, only if they did, that first name), and the state of the invite (started, rewarded or not counted, with the reason). A group invite link also keeps how many people started through it. Opening an invite link adds one to a daily count for that code; we do not keep who opened it or their IP address.

Until a friend's invite reward is earned, their app sends a daily count of how many words they spoke by voice, never the words themselves. Only words from normal dictation count: incognito, password fields, apps you excluded and helped or throwaway dictation are never counted. You see their progress as numbers only (for example "one more day of speaking"). The counts are deleted with the invite record, and as soon as the invite is finished (rewarded, not counted or expired).

Rewards you earn sit in a reward list until you choose Pro days, extra Cloud minutes or an invite-only keyboard theme, or pass them on as a gift code. If a friend you invited buys VoxType Pro through Google Play, we record that the purchase was verified (a one-way reference, not the purchase token) so both of you can get the bonus, and remove it if the purchase is refunded within 48 hours.

So that one-time offers stay one-time, we count per phone and per account how many times you used the one-time extra Cloud minutes and how many tries of each Pro tool you had.

Deleting your account deletes your invite codes and note, the invites made with your codes and their daily counts, your rewards, extra minutes, owned themes, try counts, feedback and problem reports, including ones sent from this phone while signed out. Where you were the invited friend, we keep only the app's installation id and the fact that it was already counted, so an invite cannot be claimed twice.

Help, support and problem reports

When you send a problem report or an idea from the app (Help and support), our server keeps the text you wrote, the category you picked, a short reference (like VT-7K3QXM), your phone's installation id and your account when you are signed in. If you type a reply address we keep that too, only to answer you; when you are signed in you can leave it out and we reply to your account's email. If you tick "Attach phone details" we also keep the lines you saw in the preview: app version, Android version, phone model, recent error codes, your setup, the engine, and a crash id or gift support code when those exist. Nothing else: never your typed text, transcripts, history, the app you were typing in, contacts, location or advertising id.

We use a report only to fix the problem and to answer you, never for marketing (legal basis: your request when you send one, or our legitimate interest in running and improving the service). A reply address is cleared 90 days after the report is closed, and at the latest 180 days after you sent it. The report itself is deleted 12 months after it is closed, and at the latest 24 months after you sent it. Messages you email to support@voxtype.dibolky.com are kept in our support mailbox for up to 24 months.

Deleting your account deletes the reports linked to it, and reports sent from that phone while signed out. You can also ask us to delete a report at any time at support@voxtype.dibolky.com. The microphone in the report form sends speech to the speech-to-text provider to turn it into text; VoxType does not keep the recording.

Invite pages, link previews and shared packs

Your invite link opens a page on our website. It shows your invite code and, if you added one, your welcome note. Only if you turn on Your page does it also show your initials (never your name or email), the languages you picked and one number you chose, such as how many words you have spoken. Turning the page off or deleting it in the app removes them at once.

If you pick one of your lines for the link preview, your phone makes a picture of that line and uploads it only after you agree each time. We keep the picture for 30 days so chat apps can show it with your link, then delete it. You can delete it earlier from Your page.

When a shared pack (text shortcuts, family words, a keyboard theme, a word pack, a writing mode or your setup) is too big to fit in the link itself, the app uploads it locked with a key that stays in the link after the # sign. Browsers never send that part to us, so our server keeps only the locked bytes, a one-word kind and the dates, and cannot read the pack. We keep it for 90 days. The phone that shared it can delete it sooner.

On an invite page, a visitor can try VoxType by speaking for up to 15 seconds. The recording is sent to our server and our speech-to-text provider (Groq, or Sarvam AI for Indian languages) to write it down, and the words are shown on the page. The recording and the words are never stored or logged, and the try-it service does not log the internet address. Like every page on this site, our web server's standard access log still records the internet address and the page asked for with each request. To keep the number of tries fair, we count tries per internet address per day using a one-way reference that is kept in memory only and forgotten at the end of the day.

The race and finish-my-sentence links carry what they need after the # sign, which is never sent to us. The finish page lets you speak through your browser's own speech recognition (for example Google's in Chrome), not through VoxType, or you can type.

Deleting your account deletes your link previews, your page settings and the packs you shared while signed in. Packs shared while signed out expire after 90 days.

Gifts, guest passes and family plans

When you buy a gift in the app, Google Play handles the payment. Our server checks the purchase with Google, creates a gift code and keeps it with the plan or item it gives, the card you picked and, if you add one, your written wish (up to 200 characters). A spoken wish stays on your phone: only the words you keep are sent, and the voice goes only into what you share yourself. We keep a one-way reference of the purchase so the same purchase can never make two codes, never the purchase token itself. An unused code stops working after a year, or at once if the purchase is refunded. We keep the card and the wish only until the code is used, stops working or is refunded; then we delete them.

When someone opens your gift, the code is marked as used by their account and they see your wish first. We tell you it was opened only if they turn that on, with one notification, and never how they use it.

Guest passes you create are stored with the month you made them, the card and wish you add, and, once used, the account that used it and when the 72 hours end. The card and wish are deleted when the pass is used or runs out. To keep the limit of one pass per person every 180 days, we keep the rest of that record for 180 days after the pass is used. An unused pass is deleted once its 30 days and the month it was made in are both over.

A family plan stores who pays, who joined and when, and, if a member typed one, a first name. The person who pays never sees anyone's words, history or how much they use VoxType. Members can leave at any time; when the plan ends, it ends for everyone.

If you choose Pro days as an invite reward while you pay by subscription, we move your next Google Play charge date instead. To do that we keep your subscription's purchase token encrypted on our server, and a record of each date we moved.

Deleting your account stops the gift codes you bought and nobody used, and removes your wishes, your unused guest passes, your stored subscription token and your family memberships. A family plan you pay for ends for its members. For passes and gifts someone already used, we keep only what stops them being used twice, without your account.

Rooms you share with friends and family

Some features let a group use one link together: a shared list, a weekly pact, a story that grows one line a day, a group total, match-day predictions, a wish wall, quick draw between two phones and a group race. Our server keeps the room's title, the time zone of the person who made it, the app's identifier of the phone that made it (so only that phone can manage the room), the name each person types (we ask for a first name or a nickname) and what each person adds: a line of text, or only a number such as a race time or time saved. Rooms never store recordings, only text and numbers. On the web page, speaking uses your browser's own speech recognition (for example Google's in Chrome), not VoxType, and only the words you choose to add are sent to us.

Who sees what: in a shared list, a story and predictions, everyone with the link sees what was added (a story's lines only from Sunday evening). On a wish wall, only the person who made the wall sees the wishes. In a group total, only the sum and how many people are in the group are shown, never one person's number. Each phone sends one number, this week's time saved, and updates it when it grows (at most every two hours). In a pact, each phone sends only whether you spoke that day, and only the two people in it see each other's days. If you choose to show your milestones in a pact or group, the people in it can see them and send you a cheer. Only milestones you reach after turning this on are sent. We keep who cheered which milestone for at most 90 days.

Every room has an end date and is deleted with everything in it when it ends: a list or a wish wall after at most 30 days, a pact or a group total after at most 13 weeks, a story a week after its Sunday, predictions the day after the match, a race after 48 hours and quick draw after 6 hours. The person who made a room can delete any entry or the whole room at any time, and you can delete what you added. Anyone can report an entry: it is hidden at once until we review it, and we then remove it or show it again.

The web page sets one small cookie with a random value so the page knows which entries are yours and can keep a story to one line a day. It holds no personal information. The page also remembers the name you typed, in your browser only, so you do not have to type it again. To stop misuse, we count posts from each internet address in memory only and never store the address with a room. Like every page on this site, our web server's standard access log still records the internet address and the page asked for with each request.

Deleting your account deletes the rooms you made while signed in, what you added to other rooms while signed in, and the cheers you sent and received. Anything added while signed out, or from a browser, is deleted when its room ends.

Friends, groups, chat and family features

This section is also available in Malayalam: read it in Malayalam.

VoxType has optional social features: friends, groups, chat, voice notes, games and a family space. They stay off until you make a profile and confirm you are 18 or older. Nothing in this section applies to you if you never make a profile.

What our server keeps

Who can read it

Encrypted on the way. Stored on VoxType's server. Only looked at if someone reports it.

Messages are not end-to-end encrypted, so our server can technically read them. We do not read chats, and we do not use them for advertising or to train anything. If someone reports a message, a group, a person or an entry, we keep a copy of what was reported and who reported it, and the developer looks at it. The reported item is hidden from the reporter at once.

No calls

VoxType has no voice or video calls. Voice notes are recordings you choose to send, not live calls, and nothing in the app streams your microphone to another person.

What stays on your phone

What you save in your Family space (family members, dates, recipes and sayings) stays on your phone. Nothing from them is sent unless you tap Share on one item, and then only that item is posted to the group you pick. Your dictation history and personal dictionary are not part of the social features and are not sent to them.

Backups

When chat, family storage or voice notes are enabled, the server requires a backup signal and copies social data to a second storage location. These features remain unavailable without that signal. When you delete something it leaves the backup as older copies expire; we do not restore an account you deleted.

Safety records we keep

To keep a ban or an under-18 lock from being dodged by making a new account, we keep a one-way fingerprint of the account with the date and the reason, without your name, username or messages. Actions a moderator takes are logged for 3 years the same way. Where the law requires us to preserve reported material, such as a report of child sexual abuse, the reported copy is kept as the law requires and only for that purpose.

Ads

There are no ads in chats, games, group pages or the keyboard.

Deleting it

Deleting your account removes your profile, friends, requests, blocks, memberships, voice notes and their files, game entries, Family Book items you wrote, and your notification records. The messages you sent are emptied and show as "Deleted account" to everyone else. Groups you own pass to another member, or are deleted if nobody else is in them, and your one-to-one chats are deleted. Your username is held for 14 days and cannot be taken by anyone in that time. The safety records above are the only things kept. See how to delete your account.

The social features are for people who are 18 or older. If we learn that someone under 18 has an account, we lock it.

What we do NOT do

Data retention & deletion

On-device data (history, clipboard, settings) is yours: delete it in the app or by uninstalling. Server-side account data (email, entitlement) is kept while your account is active. You can delete your synced data in-app (Profile, then Delete cloud backup), delete your whole account in-app (Profile, then Delete account), or ask us at voxtype.dibolky.com/delete-account. When an account is deleted we keep only a one-way fingerprint of it, with how far it got in Missions and invites, so the same rewards cannot be claimed twice; it holds no email, name or content. The social features keep a few further safety records, and copies of reported material that the law requires us to preserve, as described in the section on friends, groups, chat and family features. Usage counters reset daily. Content-free product analytics and crash reports are retained only under the configured provider retention controls; the exact provider periods and any legally required accounting records are reviewed by the owner before a release. You may include a request to delete or restrict analytics associated with your account when contacting us. We do not use product analytics as a substitute for Google Play's purchase record.

Children

VoxType is not directed at children under 13 and does not knowingly collect data from them.

Changes

We'll update this page when the policy changes; material changes will be noted in the app's release notes.