VoiceFlow - Privacy Policy

Effective date: August 4, 2026

VoiceFlow is an AI-powered Android keyboard that lets you dictate speech into any text field and optionally use AI writing assistance. This policy explains what information is processed when you use the app, why it is processed, where it is stored, and how you can delete it.

Developer contact: me@binod.swain.dev

1. Information we process

Depending on the features you use, VoiceFlow processes:

Account information: your Google account identifier, name, email address, and profile-photo URL when you sign in with Google.
Microphone audio: audio that you choose to record for voice dictation.
Text in the focused field: the text you are editing when you use AI features (rewrite, proofread, compose, smart compose) or the floating bubble's voice-dictation insert.
Clipboard content: text you copy, when clipboard history is enabled in Settings.
Voice and AI history: transcripts and AI-generated output stored locally on your device.
Subscription information: Google Play product identifier, purchase token, and subscription status needed to verify and provide your subscription benefits. VoiceFlow does not receive or store your payment-card or bank-account details.
Device preferences: the settings you configure in the companion app (theme, toggles, etc.).

VoiceFlow does not use advertising identifiers, sell personal data, or include analytics, crash-reporting, or behavioural-tracking SDKs.

2. How we use information

We use this information to:

authenticate your account;
provide voice dictation by sending audio to our transcription provider and returning text;
provide AI writing features by sending text to our language-model provider and returning rewritten or generated text;
enforce free-credit metering and subscription entitlements;
store your voice and AI history locally so you can review past results; and
maintain the security and reliability of the service.

3. Where information is processed and stored

VoiceFlow keeps working data on your device and also uses remote services for cloud-based voice and AI features:

Cloud infrastructure providers process API requests and store account records and metering data.
AI service providers receive audio or text needed to perform the transcription or AI feature you request.
Google Identity Services provides Google Sign-In.
Google Play Billing processes payments and provides purchase information used for subscription verification.

Information is transmitted using HTTPS/TLS. Local app data is stored on your device, including in the app database and app-specific files.

4. Microphone audio: processed in the cloud, not on your device

When you use voice dictation (the keyboard mic or the floating bubble), your audio is sent to our transcription provider over HTTPS and converted to text. Audio is not processed locally on your device for transcription. Audio is not stored on your device or by us after transcription — it is processed transiently by the provider for the transcription request and then discarded.

5. What leaves your device and which providers receive it

Audio leaves the device for voice dictation → sent to our speech-to-text provider.
Text leaves the device for AI writing features (rewrite, proofread, compose, smart compose) → sent to our language-model provider.
Both are transmitted over HTTPS via our proxy server. The proxy adds authentication and rate-limiting but does not store your audio or text beyond the transient processing request.
At sign-in, your Google profile info (email, name, picture) is sent to our proxy and stored in the server user record for session and metering purposes.

6. Sharing and service providers

We use the providers listed above to operate VoiceFlow. They process information only as needed to provide their services. Their handling of information is governed by their own terms and privacy policies.

We do not sell your personal information or use it for targeted advertising.

7. Retention and deletion

We retain remote account and metering data while your account is active, unless deletion is requested or a longer retention period is required by law.

You can delete your VoiceFlow account and associated remote data from the app or through our public deletion page:

Delete your VoiceFlow account

The deletion flow verifies your identity with Google, then removes your account, server user record, metering data, and related remote data. If deletion is still being processed, the service prevents new uploads and completes cleanup on retry. Some data may remain temporarily in provider backups or where retention is legally required.

You can also remove local app data by deleting individual history entries, clearing all history, clearing the dictionary, clearing clipboard history, or uninstalling the app.

8. Permissions

Microphone: used only to record audio for voice dictation when you tap the keyboard mic or floating bubble.
Notifications: used to show foreground-service notifications for the floating bubble and download notifications for on-device models.
System overlay (SYSTEM_ALERT_WINDOW): used by the floating bubble to draw over other apps so you can dictate from any screen.
Internet: used for sign-in, voice dictation, AI features, subscription verification, and on-device model downloads.
Accessibility service: used by the floating bubble to read and replace text in the focused field. Acts only on demand — it does not scan your screen in the background. Disabled in password and sensitive fields.

VoiceFlow does not request Calendar or Contacts access.

9. Accessibility service

VoiceFlow uses an Android AccessibilityService so the floating bubble can:

Read the text in the field you're currently focused on — only when you tap a bubble action that needs it.
Replace the text in the focused field — to insert your voice dictation transcript or AI-rewritten text.

The accessibility service:

Acts only on demand — it does not scan your screen in the background. Its event handler is intentionally empty; it only reads/replaces when the bubble controller explicitly requests it.
Is disabled in password and sensitive fields — the app checks the field type and blocks AI features, voice input, and accessibility read/replace in password fields, sensitive input types, and fields marked as "no personalized learning."
Is not an accessibility support tool — it is not designed to assist users with disabilities. It powers the floating bubble's voice-dictation insert and AI text actions.

10. AI output reporting

VoiceFlow allows you to report AI-generated content that is harmful, inaccurate, or inappropriate:

Long-press the AI result text in the keyboard, or tap "Report AI output" in the floating bubble preview.
The AI output text (truncated to 500 characters) is sent to our support team via email.
Do not include personal or sensitive information in your report notes.
Reports are retained for 90 days for review, then deleted.

11. Children's privacy

VoiceFlow is not directed to children under 13. Do not use the app if you are under the minimum age required to use the applicable services in your region.

12. Changes to this policy

We may update this policy when VoiceFlow or applicable requirements change. We will publish the updated policy on this page and revise the effective date.

13. Contact

For privacy questions or deletion support, contact me@binod.swain.dev with the subject line "VoiceFlow Privacy."