Privacy Policy

The data controller responsible for your personal data is Mariia Rybina, the independent developer of Ultratype (“we”, “us”, “our”). You can reach us at info@ultratype.app for any privacy question or request.

Given the small scale and nature of the processing, we are not required to appoint a Data Protection Officer; privacy matters are handled directly at the address above. If and when we are required to designate a representative in the EU or UK under Article 27 GDPR, their details will be published in this section.

Ultratype is built to need as little as possible. We process:

• Microphone audio — only the recording you start by tapping the dictation button.
• The transcript produced from that audio.
• On-device history — your past transcripts, stored locally on your phone so you can reuse them. This never leaves the device.
• Subscription status — whether you have Ultratype Pro, handled through Google Play Billing. We never see or store your card details.

Just as important is what we do not collect: no account or sign-in, no name or email (unless you write to us), no advertising identifier, no location, no contacts, no analytics SDK, no crash-reporting SDK, and no background or “always-on” listening of any kind.

When you tap to dictate, audio is captured only while you are recording. It is sent over an encrypted (TLS) connection to our backend — a Cloudflare Worker — which forwards it to a third-party cloud AI speech-to-text provider acting on our behalf. The provider returns the text, which Ultratype inserts into the field you selected.

Audio and transcripts are processed transiently for this single purpose. We do not store them on our servers, and we do not use them to build a profile of you. Transcription requires an internet connection because the audio is processed in the cloud, not on your device.

For users in the EU/EEA and the UK, our legal bases under the GDPR are:

• Performance of a contract (Art. 6(1)(b)) for the core service: you ask for a transcription, and we provide it.
• Legitimate interests (Art. 6(1)(f)) for keeping the service secure and preventing abuse.
• Explicit consent (Art. 9(2)(a)) for the possibility that your spoken words incidentally reveal sensitive information.

Because the words you dictate may incidentally reveal sensitive information (special-category data under Article 9 GDPR), by enabling and using voice transcription you give your explicit consent to processing that audio for the sole purpose of returning a text transcription. We do not use your voice for biometric identification and we never create a voiceprint. You can withdraw consent at any time by not using the feature; withdrawal does not affect processing that already took place lawfully.

Ultratype requests the microphone permission so it can record what you say. Recording starts only when you tap to dictate and stops when you finish — there is no background recording, ever. The audio is the only thing captured, it is sent securely for transcription, and it is then discarded by us.

Ultratype uses Android’s AccessibilityService for one purpose only: to insert the text you dictated into the text field you are currently using. This action is deterministic and happens only when you trigger it.

The AccessibilityService does not read, collect, store, or transmit any other content on your screen, and is never used for analytics, advertising or profiling. It performs only a single, user-initiated, rule-based text insertion — it does not autonomously initiate, plan or carry out any other action, navigate the interface, or do anything without your explicit trigger. If a field can’t accept text directly, Ultratype falls back to copying the result to your clipboard so nothing is lost.

The “Display over other apps” permission lets the floating dictation button appear above whatever you’re using, so you can dictate anywhere. A short-lived microphone foreground service runs only while you are recording, and a lightweight foreground service keeps the floating button available. None of these listen in the background or collect data on their own.

We keep the list of third parties deliberately short. Acting as our processors:

• Google — Gemini API (Google LLC / Google Ireland Limited): the cloud AI service that converts your audio into text. See Google’s Gemini API terms and its data-usage policy, which describe how submitted data is handled and that paid-tier data is not used to train models.
• Cloudflare: hosts this website and our edge backend that securely forwards the audio. It does not store your audio or transcripts.
• Google Play Billing: processes Pro subscription payments. We never receive your payment-card details.

These providers act only on our instructions for the purposes described here. We do not sell your personal data to anyone.

Our processors may handle data in the United States. Where personal data is transferred outside the EEA/UK, we rely on the European Commission’s EU-U.S. Data Privacy Framework adequacy decision where the recipient is certified, and otherwise on the European Commission’s Standard Contractual Clauses (Decision 2021/914), together with supplementary technical measures such as encryption in transit. You can request a copy of the relevant safeguards at info@ultratype.app.

Our backend does not store your audio or transcripts — they are processed in memory and discarded immediately. Your transcription history is stored only on your device and is never uploaded; you can delete it in the app at any time, it can be set to auto-delete on a schedule (30 days by default), and uninstalling the app erases all local data.

For transparency: our AI processor may retain the submitted audio for a short period (currently up to 55 days) solely to detect abuse and meet legal obligations, after which it is deleted. It is not used to train AI models. We have no separate copy of it.

Audio travels over encrypted TLS connections. On-device secrets are encrypted using the Android Keystore (AES-256-GCM). Because there is no central account and no server-side copy of your content, there is simply very little to breach. We also ship no third-party analytics or crash SDKs that could leak data.

If you are in the EU/EEA or UK, you have the right to access, rectify, erase, restrict, port and object to processing of your personal data, to withdraw consent, and to lodge a complaint with a supervisory authority.

Because we hold no central account or copy of your data, most rights are exercised directly on your device: access and portability through your in-app history (which you can export); erasure and restriction by deleting history in the app or uninstalling; rectification by re-recording. For the limited data held transiently by our AI processor for abuse-monitoring, contact info@ultratype.app and we will relay your request where feasible.

You may complain to your local EU/EEA data protection authority (find yours via edpb.europa.eu) or, in the UK, the ICO.

If you are a California resident, the CCPA/CPRA gives you specific rights. The category of personal information we collect is audio/voice recordings and the resulting transcript, collected directly from you, for the business purpose of speech-to-text transcription, and disclosed only to our service providers (the AI transcription provider and hosting/edge providers) to deliver that function.

Voice may be considered “sensitive personal information”; we use it only to provide the transcription you asked for and not to infer characteristics about you. Because we use it solely to perform the service you requested — and process it transiently (with only short, abuse-monitoring retention, up to ~55 days, by our AI processor) — we are not required to offer a “Limit the Use of My Sensitive Personal Information” link. We do not sell or share your personal information, and have not done so in the preceding 12 months. We have no actual knowledge of selling or sharing the personal information of consumers under 16.

You have the right to know, access, delete and correct your information, to opt out of sale/sharing, to limit the use of sensitive personal information, and not to be discriminated against for exercising these rights. Exercise any of them via info@ultratype.app.

Ultratype is not directed to children. We do not knowingly collect personal data from children under 16 (or the applicable age of digital consent in your country). If you believe a child has used the app in a way that provided us personal data, contact info@ultratype.app and we will help.

The app asks for the microphone and Accessibility permissions in context — each is preceded by a clear in-app explanation, shown before the permission step, that you can accept or decline. You can change or revoke these permissions at any time in Android Settings, and you can withdraw consent for voice processing simply by not using the dictation feature.

We may update this policy as the app evolves. The “Last updated” date at the top always reflects the current version, and we will give reasonable notice of material changes. Changes are not retroactive.

Questions, requests or concerns? Write to Mariia Rybina at info@ultratype.app. We read every message.