Privacy Policy

1. Controller and contact

The controller for the processing described here is Bent Eisheuer, Freisinger Landstraße 47a, 85748 Garching, Germany. Email: legetdev@gmail.com.

No data-protection officer has been appointed. Privacy requests can be sent directly to the email address above.

2. Website delivery and downloads

The website pages and fonts are hosted by Vercel Inc. The DMG and signed update feed are delivered through our private Cloudflare Worker backed by R2. When you request a page, font, update feed, or DMG, the relevant provider processes request data such as IP address, date and time, requested path, response status, referrer, and browser or client information. This is necessary to deliver and protect the service. The legal basis is Art. 6(1)(f) GDPR: our legitimate interest in secure, reliable website and update delivery.

We do not add analytics to these requests or export a separate visitor-log database. Provider-side security and delivery logs follow the retention controls of our Vercel account and are not retained by us for advertising or profiling. Vercel acts as our hosting provider; its privacy notice contains provider details.

3. Browser storage, cookies, and external content

This website does not set analytics, advertising, preference, or tracking cookies and does not use localStorage, sessionStorage, tracking pixels, social widgets, or third-party embeds. Fonts are delivered from the same website. We therefore do not display a consent banner. External providers receive data only when you deliberately follow an external link.

4. Email and support

If you email us, we process your sender details, message, attachments, and technical email metadata to answer your request, administer a contract, or protect legal interests. The legal basis is Art. 6(1)(b) GDPR for contractual or pre-contractual requests and Art. 6(1)(f) GDPR for other support and legal correspondence. Email is provided through Google, which receives the message data needed to provide that service.

Routine correspondence is deleted when the matter is resolved and no legal retention or claim-related reason remains. Messages that form part of a business or tax record are kept for the applicable statutory period.

5. Processing that stays on your Mac

The following data is processed locally and is not sent to us:

• wake-word audio and on-device speech-to-text processing;
• API keys, licence data, and related secrets stored in the macOS Keychain;
• app settings and permission state stored through macOS preferences;
• conversation history and on-device summaries, enabled by default and switchable or erasable in Settings; and
• a local action audit log containing commands, tool actions, guardrail decisions, outcomes, and timestamps. It remains in ~/Library/Application Support/Voika/audit.jsonl until you delete that local file or the associated app data.

Local data may still contain personal or confidential information. You control the Mac account and should protect it with macOS access controls and disk encryption appropriate to your use.

6. AI providers you configure

Voika is BYOK: you choose and contract with an AI provider such as Google, Anthropic, OpenAI, or xAI. Your API key is retrieved from the Keychain and sent to that provider only as needed to authenticate your requests. The request goes directly from your Mac to the selected provider; we do not proxy, receive, or store it.

Depending on the task, the request can contain your transcribed command, conversation context, accessibility-tree text, tool results, fetched web content, and a cropped screenshot when visual context is needed. Raw wake-word audio and continuous screen video are not sent. The selected provider processes this data under your agreement and its privacy terms. You can change or remove the provider and key in Settings.

7. macOS permissions

Voika requests Microphone, Speech Recognition, Accessibility, Screen Recording, and Automation permissions so it can hear commands, inspect interface state, and control apps at your request. Permission grants are managed by macOS. They do not themselves transmit data to us. Content leaves the device only through the provider or service flows described in this policy.

8. Free lifetime activation and restoration

The launch offer gives early users free lifetime access. When the app is online for first activation or restoration, it sends a salted, pseudonymous hardware hash to our Cloudflare activation endpoint. The raw hardware UUID stays on the Mac. The endpoint uses that hash to issue or restore a signed Voika entitlement; the app stores the signed grant locally in the macOS Keychain. The grant has no expiry and does not require periodic server validation after it is issued.

You can save the recovery code (backup code) provided by the app and use it to restore the licence on the same Mac after reinstalling macOS or Voika. A hardware replacement requires support review against the original-machine record; verified support may issue an additional replacement seat when needed to preserve an existing promised right. Earlier portable grants and other promised rights remain honored through their original-device records and verified support process. The free licence is issued by Voika and is not a Lemon Squeezy order, customer record, or paid licence key. The durable activation record stores the pseudonymous hash and signed-grant metadata with no automatic expiry while it is needed to restore your lifetime rights. We use this record only to provide or restore the requested licence, not for analytics, profiling, or advertising. The legal basis for provision and restoration of a requested grant is Art. 6(1)(b) GDPR where applicable; Cloudflare also processes standard network metadata to handle and secure the request.

The onboarding flow shows this hash disclosure immediately before a new claim. Existing installations automatically attempt the claim on launch. You may ask us to delete the activation record by emailing legetdev@gmail.com. Deleting that server record can prevent future server-assisted restoration, but it does not revoke a signed licence already stored on your Mac or remotely revoke that Mac's offline access. Preserve the recovery code: the existing licence can continue offline on that Mac after the server record is deleted.

This current release does not start a timed trial or register a trial date. Records created by older trial versions are not automatically deleted by updating the app; the retention and rights described below still apply to those records.

Older trial builds and paid-trial releases used a 7-day trial with a stable, app-specific, pseudonymous device fingerprint to prevent repeated resets. The app hashes the Mac hardware UUID with a Voika-specific salt and sends only the resulting fingerprint to our Cloudflare Worker. The raw hardware UUID stays on your Mac. Because a stable fingerprint can single out a device, we treat it as personal data rather than calling it anonymous. Those legacy builds required one successful connection within the first 48 hours; that timed-trial rule does not apply to the current free-lifetime launch grant.

The Worker stores the fingerprint and first-trial date. It also uses the request IP address to rate-limit new fingerprint registrations; the rate-limit entry expires after one hour. The fingerprint record currently has no automatic expiry and is retained while needed to enforce the one-trial-per-device rule. The legal basis is Art. 6(1)(f) GDPR: preventing repeated trial resets. You may object on grounds relating to your situation; without this check, we may be unable to provide the free trial, while paid licence rights remain unaffected.

Cloudflare, Inc.provides the Worker and storage infrastructure as our processor and may process standard network metadata to provide and secure the service. See Cloudflare's privacy policy.

9. Paid licence activation and validation

When paid sales open and you activate a paid key, the app may send the licence key and device instance name to Lemon Squeezy. Paid-key validation can send the key and instance identifier again; standard request metadata such as IP address is also processed. Lemon Squeezy may return buyer details for the local licence display. This paid path is separate from the offline signed grant for early users. The legal basis is Art. 6(1)(b) GDPR for the paid licence arrangement and its activation controls.

10. Purchases

Paid checkout is not currently open, so this website does not send visitors into a purchase flow. Lemon Squeezy will process checkout data as Merchant of Record if and when paid sales are enabled.

11. App updates

Voika checks the signed update feed through the private Cloudflare delivery Worker, by default once per day. That request produces the same delivery data described in section 2. Automatic checks can be disabled in the app. Installing an update is handled by the bundled Sparkle updater and macOS.

12. International transfers

Vercel, Cloudflare, Google, and Lemon Squeezy are US-based providers or use infrastructure outside the EEA. Transfers are made under the provider's applicable EU transfer mechanism, such as an adequacy decision including the EU–US Data Privacy Framework where valid for the relevant entity, or Standard Contractual Clauses with supplementary safeguards where required. You may ask us for information about the mechanism applicable to a particular processing activity.

13. Your rights

Subject to the statutory conditions, you have rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), and objection to legitimate-interest processing (Art. 21). You may withdraw consent at any time for the future where processing relies on consent. Contact legetdev@gmail.com to exercise a right.

You may also complain to a data-protection authority. The authority responsible for our establishment is Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach.

14. Automated access decisions

Grant issuance, restoration, and paid-key validity are checked automatically. These checks control access to the app but are not used for profiling and do not produce legal or similarly significant effects within Art. 22 GDPR. If a check is wrong, contact us for review and correction.

15. Children and policy changes

Voika is a professional desktop-control tool and is not directed to children. We update this policy when material data flows or legal requirements change and publish the current date at the top of the page. The next scheduled review is 15 July 2027.