Privacy Policy

1. Who is responsible

The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR / DSGVO) is:

Bent Eisheuer
Freisinger Landstraße 47a, 85748 Garching, Germany
Email: legetdev@gmail.com

We have not appointed a Data Protection Officer, as we are not legally required to do so (§ 38 BDSG).

2. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15);
• have inaccurate data corrected (Art. 16);
• have your data erased (Art. 17);
• restrict processing (Art. 18);
• data portability (Art. 20);
• object to processing based on legitimate interests (Art. 21);
• withdraw any consent you have given, at any time, with future effect (Art. 7 (3)).

To exercise any of these rights, email us at legetdev@gmail.com. You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach.

3. On-device wake word & speech recognition

The wake-word listener and speech-to-text transcription in Voika run entirely locally, using on-device models. Your voice audio is processed only on your Mac and is never transmitted to us. When Voika needs to send your spoken request onward (see below), only the resulting transcribed text is sent — never raw audio.

4. Your AI provider (BYOK — bring your own key)

Voika does not operate its own AI backend. To plan and answer a request, it calls the AI provider you choose in Settings (for example Google Gemini, Anthropic, OpenAI, or xAI), authenticated with your own API keystored only in your Mac's Keychain. This call is made directly from your Mac to that provider — we do not proxy it, do not operate a server in that path, and never receive or store its contents.

What is sent depends on the request: transcribed text always; when Voika needs to see or act on your screen, it may also include accessibility-tree text describing on-screen elements and, when necessary, a cropped screenshot of the relevant area — never a continuous screen recording. This data is governed by the privacy policy of the provider you selected, which we encourage you to review. You can change or remove your provider and key in Settings at any time.

5. System permissions

Voika requests Microphone, Speech Recognition, Accessibility, Screen Recording, and Automation permissions from macOS to see and control your desktop on your behalf, as described in our app documentation. These grants operate locally between Voika and macOS; nothing is transmitted to us as a result of holding them. Data only leaves your device when it is included in a request to the AI provider you configured, as described above.

6. Conversation memory

If enabled in Settings (on by default, and can be turned off or cleared at any time), Voika keeps a local record of your conversations and short on-device summaries, so it can recall recent context. This is stored only on your Mac, in a local database, and is never uploaded to us or anyone else.

7. Website hosting

Our website is hosted by Vercel Inc. (San Francisco, USA). When you visit the site, Vercel automatically processes technical access data (including your IP address, browser type, the page requested, and the time of the request) in server log files. This is necessary to deliver the site securely and reliably.

Legal basis: Art. 6 (1)(f) GDPR — our legitimate interest in operating a secure and functional website. Recipient: Vercel acts as a processor on our behalf. As Vercel is a US company, data may be transferred to the United States; this transfer is safeguarded by the EU–US Data Privacy Framework and/or the EU Standard Contractual Clauses. Retention: server logs are stored only for a short period and then automatically deleted.

8. Free-trial verification

Voika offers a 7-day free trial. To prevent the trial from being reset indefinitely, the app sends a one-way, salted SHA-256 hash of your Mac's hardware identifier to our trial server when the app launches during the trial. We store only this hash together with the trial start date. The raw hardware identifier never leaves your device, and the hash cannot be reversed to identify you, your name, or your email — no account or personal contact data is involved.

Legal basis: Art. 6 (1)(f) GDPR — our legitimate interest in preventing abuse of the free trial. Processor: the trial endpoint runs on Cloudflare's global edge network (Cloudflare, Inc., USA), which stores only the anonymised hash and the trial start date. As Cloudflare is a US company and its network is global, any transfer is safeguarded by the EU–US Data Privacy Framework and/or the EU Standard Contractual Clauses. Retention: the hash is retained for the lifetime of the trial record. This processing happens silently in the background; if the app is offline, it simply falls back to a local trial.

9. License validation

When you activate a license key you purchased, the app contacts Lemon Squeezy to verify that the key is valid, and periodically re-checks it (for example to detect a refund). This involves transmitting your license key and standard request metadata (such as your IP address).

Legal basis: Art. 6 (1)(b) GDPR — performance of the license contract. Recipient: Lemon Squeezy (US); transfers are safeguarded by the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

10. Purchases & payment

All purchases are handled by Lemon Squeezy, LLC, which acts as the Merchant of Record. Lemon Squeezy is the independent data controller for all payment, billing, and tax data you provide at checkout — we never see or store your payment details (such as card numbers). Their handling of your data is governed by the Lemon Squeezy Privacy Policy.

11. Cookies & analytics

We do not currently use any website analytics, tracking, or advertising cookies of any kind. If this changes, we will update this policy and, where legally required under § 25 TDDDG, obtain your consent before storing or reading anything on your device.

12. Data processors

Where a provider processes personal data strictly on our instructions — our website host and the trial endpoint — it acts as a processor under Art. 28 GDPR, governed by the standard data-processing agreement that provider makes available. Lemon Squeezy is not a processor: for payment data it is a separate, independent controller (see section 10). The AI provider you configure in Settings is also not a processor of ours — you contract with it directly, and we never receive the data you exchange with it.

13. Data retention

We keep personal data only as long as needed for the purpose it was collected for. Server access logs are deleted after a short period, and the anonymised trial hash is kept for the lifetime of the trial record. Where the law requires us to retain business or tax records, we keep them for the applicable statutory periods (in Germany, generally up to 8 years for invoices and accounting vouchers and 10 years for commercial books).

14. Automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

15. Changes to this policy

We may update this policy to reflect changes to the app or legal requirements. The current version, with its date, is always available on this page.