Legal
Privacy Policy
MindType turns your voice into text. That means we handle something personal (the things you say), so we keep the rules plain: we process the least we can, we don't sell your data, and your dictation is transcribed in the moment, not stored for us to read later. This policy explains exactly what we collect, why, who we share it with, and the rights you have over it.
01 Who we are
MindType (mindtype.now) is a project of Kiitos Sarl, based in Luxembourg. Kiitos Sarl is the data controller responsible for the personal data described in this policy: it decides why and how that data is processed.
For any privacy question, or to exercise the rights in section 9, contact us at support@mindtype.now.
02 Scope
This policy covers the MindType apps for macOS, iOS, and Windows, the MindType website, and the accounts and billing that go with them. It does not cover the third-party apps you dictate into (Mail, Slack, your browser, and so on). Once text lands in another app, that app's own privacy terms apply to it.
03 What we process
Depending on how you use MindType, we process the following categories of data:
| Category | What it includes |
|---|---|
| Account | A stable identifier from Sign in with Apple or Sign in with Google, and the email address linked to it. You can also use MindType without an account, in which case we hold no account data. |
| Voice & transcripts | The audio you speak while holding the key, and the text it is transcribed into. See section 4: this is the sensitive part, and we treat it as such. |
| Composer text | When you use Composer, the transcript and any surrounding context you provide are sent to our AI provider(s) to generate the completion that gets typed for you. Your content is never used for model training. |
| Usage | Counts we need to enforce plan limits: the number of words MindType has typed for you. Counts, not content. |
| Billing | If you subscribe, our payment processor handles your card and returns a customer and subscription reference plus status. We never see or store your full card number. |
| Diagnostics | Limited technical logs (e.g. errors, timestamps, coarse device/OS type) needed to keep the service running and secure. |
04 Your voice & transcripts
This is what MindType is built around, so here is precisely how it works.
- Push-to-talk only. The microphone is active only while you hold your hotkey. When you release it, capture stops.
- Streamed, not stockpiled. While you hold the key, audio is streamed to our speech-to-text provider, transcribed in real time, and returned as text. MindType does not keep a recording of your voice after the transcription completes.
- Transcript goes where your cursor is. The final text is inserted into the app you're using. On macOS this uses the clipboard for an instant; your previous clipboard contents are restored immediately afterwards.
In short: we don't want a library of your recordings, and we don't keep one. Voice is processed to produce text and then it's gone.
05 Why we process it (legal bases)
Under the EU General Data Protection Regulation (GDPR), we rely on these legal bases:
- Performance of a contract: to sign you in, transcribe your speech, run Composer, and deliver the plan you chose.
- Legitimate interests: to keep the service secure, prevent abuse, enforce fair-use limits, and fix problems. We balance these against your rights.
- Consent: for device permissions such as the microphone, which you grant through your operating system and can withdraw at any time in system settings.
- Legal obligation: to keep the records (for example, billing) that law requires us to keep.
We do not sell your personal data, and we do not use your voice or transcripts to send you advertising.
06 Service providers we share data with
We use a small set of trusted providers to run MindType. They process data only on our instructions, under contracts that require appropriate safeguards.
| Provider | Purpose | Data |
|---|---|---|
| Soniox | Real-time speech-to-text | Streamed audio while you dictate |
| Deepgram | Speech-to-text (fallback) | Streamed audio while you dictate |
| OpenAI | Composer text generation | Transcript & context you send to Composer |
| Apple / Google | Sign-in | Authentication identifier & email |
| Stripe | Subscription payments | Payment & subscription details |
| Supabase | Database for accounts & usage | Account, usage & billing references |
| Vercel | Website & API hosting | Technical request & diagnostic data |
We may update this list as our infrastructure evolves; the current version always lives on this page.
07 International transfers
Some of the providers above process data outside the European Economic Area, including in the United States. Where that happens, we rely on legally recognised transfer mechanisms, principally the European Commission's Standard Contractual Clauses, to make sure your data keeps an equivalent level of protection. You can ask us for more detail using the contact below.
08 How long we keep it
- Voice recordings: not retained after transcription.
- Account data: for as long as your account exists; deleted (or anonymised) after you close it.
- Usage counts: kept for the current and recent billing periods to enforce limits, then cleared.
- Billing records: retained as long as accounting and tax law require.
09 Your rights
Because we operate in the EU, you have the following rights over your personal data:
- Access: get a copy of the data we hold about you.
- Rectification: correct data that's wrong or incomplete.
- Erasure: have your data deleted ("right to be forgotten").
- Restriction & objection: limit or object to certain processing.
- Portability: receive your data in a portable format.
- Withdraw consent: at any time, without affecting past processing.
To exercise any of these, email support@mindtype.now. We'll respond within the timeframe the law requires. If you believe we've mishandled your data, you can also lodge a complaint with Luxembourg's supervisory authority, the Commission nationale pour la protection des données (CNPD), or the authority in your country of residence.
10 Security
We protect data in transit with encryption (audio is streamed over secure WebSocket connections; the site and API use HTTPS), limit who can access production systems, and keep our providers to the same standard. No system is perfectly secure, but we design MindType to hold as little as possible in the first place: the strongest protection for data we simply don't keep.
11 Children
MindType isn't directed at children. You must be at least 16 years old (or the minimum age of digital consent in your country) to use it. We don't knowingly collect data from children; if you believe a child has given us data, contact us and we'll remove it.
12 Changes to this policy
If we change how we handle your data, we'll update this page and move the "last updated" date. For significant changes we'll give clearer notice, such as in the app or by email. Continuing to use MindType after a change means you accept the updated policy.
13 Contact
Questions, requests, or concerns about privacy go to support@mindtype.now. MindType is a project of Kiitos Sarl, based in Luxembourg.
See also our Terms of Service.