Privacy Policy

Data controller

The operator of speakcli.dev is the data controller for the personal data described in this policy.

SpeakCLI is operated by an independent developer based in Switzerland. The operator's public identity is published at github.com/crvx14. For data-protection inquiries, contact support@speakcli.dev with the subject line "Privacy request" — we respond within 30 days.

What we collect

Nothing by default. SpeakCLI runs entirely on your device.

Telemetry (opt-in). If you enable it, we receive anonymous usage counters — transcription count, error count. No audio, no transcripts, no personal data. Legal basis: your consent, withdrawable at any time in Settings.

License activation. If you activate a Pro license, your license key, a randomly-generated machine ID, and an optional machine name (defaults to your OS hostname) are sent to our server for device-limit enforcement. Legal basis: performance of the licence contract.

Cross-Device Sync (opt-in). Encrypted blobs of your settings, macros, and dictionary are stored on our server. We cannot decrypt them — the encryption key is derived from your sync password locally using Argon2id and never leaves your device. Legal basis: your consent.

Server access metadata. Our infrastructure provider (Cloudflare) may log request metadata — IP address, user agent, request path — per their own privacy policy and for the purpose of security and abuse prevention. Legal basis: legitimate interest in operating the service securely.

Feedback you send through the app. When you click Send feedback in Settings → About, your message is transmitted to our server along with your app version, operating system name, license tier (free / trial / pro), locale, and a stable machine identifier used only to limit abuse. The server forwards the message and metadata to our inbox by email and does not store it elsewhere. We never collect your email address or any other contact information through this form, and we do not reply individually to feedback submissions. Legal basis: your consent, expressed by clicking Send.

Analytics

The landing site uses Cloudflare Web Analytics, which is cookie-free and does not collect personal data. No cross-site tracking, no advertising identifiers, no profile building. You do not need to accept cookies because we do not set any for analytics.

Third parties

Polar.sh — payment processing and licence issuance. See polar.sh/legal/privacy.

Cloudflare, Inc. — Workers, D1, KV, Pages, Email Routing, Web Analytics. See cloudflare.com/privacypolicy.

GitHub, Inc. — release artefact hosting and the auto-updater endpoint. See GitHub's privacy statement.

International transfers

Polar, Cloudflare, and GitHub are US-based and may process data in the United States. Where we send personal data outside Switzerland or the EU/EEA, those providers rely on the EU Standard Contractual Clauses and the Swiss FDPIC-recognised equivalent, or on the EU-US / Swiss-US Data Privacy Framework, as published in their own DPAs.

Retention

License activation records are retained for the lifetime of the licence and for up to twelve (12) months after deactivation to prevent abuse of the per-licence deactivation cap. Sync blobs are retained while sync is enabled and deleted within 30 days of you disabling sync or deleting your account. Cloudflare access logs follow their default retention (currently a few days for our plan tier).

Your rights

Subject to applicable law, you have the right to:

• · Access the personal data we hold about you.
• · Correct inaccurate data.
• · Request deletion of your data (see "Data deletion" below).
• · Request a copy of your data in a portable format.
• · Object to processing based on legitimate interest, and withdraw any consent at any time.
• · Lodge a complaint with your supervisory authority — in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU/EEA your local data-protection authority.

To exercise any of these, email support@speakcli.dev. We respond within 30 days.

Data deletion

To delete your data, deactivate all devices via Settings → Account → License → Manage Devices, then email support@speakcli.dev with the subject "Delete my data". We will remove all server-side records — activations, deactivation history, sync blobs — within 30 days, and confirm by reply.

Note: data held by Polar (purchase records, invoices) is subject to their retention policy and applicable accounting law; we cannot delete those on your behalf.

Changes to this policy

We may update this policy as the service evolves. Material changes will be announced at speakcli.dev and via the app's "What's new" notice. The "Last updated" date at the top reflects the most recent revision.

Contact

support@speakcli.dev