Privacy Policy

Last updated: October 2026

This policy explains what information the Diction app, its keyboard and the Diction Cloud service handle, why, and the choices you have. We wrote it to be read, not skimmed past. Where the law needs precise terms, they are in the sections further down.

The short version

• Your mode decides what leaves your phone. On-device keeps your voice on your iPhone. My server sends it only to a server you run. Diction Cloud sends it to us to transcribe, and we do not keep it.
• What you type on the keyboard stays on your phone. It is never sent to us or anyone else.
• We do not store your recordings or transcripts, and we do not use them to train AI models.
• We make money from subscriptions. We do not sell your information and we do not use it for advertising.

Who we are

Diction is provided by Diction Labs, the trading name of Ondrej Machala, an individual based in the United Kingdom ("Diction", "we", "us"). Contact: support@diction.one.

For information processed through Diction Cloud and the app's diagnostics, we are the controller under data protection law. When you use My server, the person or organisation running that server decides what happens to the audio and text sent to it; we never receive it and are not its controller.

Your mode decides what leaves your phone

	On-device	My server	Diction Cloud
Your voice	Stays on your iPhone	Sent only to your server	Sent to us to transcribe, not stored
Transcript	Stays on your iPhone	Your server	Returned to you, not stored
Text sent to Writing Tools	Stays on your iPhone, unless a subscriber switches on Use Diction Cloud	Your server	Sent to us and our AI provider to process, not stored
What you type on the keyboard	Stays on your iPhone	Stays on your iPhone	Stays on your iPhone
Errors and diagnostics (unless turned off)	Sent to us	Sent to us	Sent to us

On-device

Speech is turned into text by a model running on your iPhone. Your voice and transcript do not leave the device. Writing Tools stay on the device too. The one opt-in: a Diction Cloud subscriber can switch on Use Diction Cloud, and then only the text to be processed goes to Diction Cloud. The voice never leaves the iPhone. Otherwise the app goes online only to download a speech model (from Hugging Face, which hosts the model files) or a keyboard language pack (from Diction Cloud), to check your subscription, for the daily update check and for error reports and diagnostics (unless turned off).

Keyboard language packs are downloaded from Diction Cloud in any mode, and nothing you type is involved. The request carries Apple's install record for the app, and Diction Cloud logs the language, a shortened install code and the IP address.

My server

Audio and text go to the server address you entered. We have no access to that server or to anything sent to it. Its operator's own policies apply.

Diction Cloud

• Your voice is sent to our servers over an encrypted connection, transcribed and deleted as soon as the transcript is ready. Diction Cloud does not keep your audio.
• Transcripts are returned to your phone and not saved, logged or cached on our servers.
• Writing Tools (for example AI cleanup, tones, edits and suggestions) send the text to be processed to our AI provider, Groq, Inc., which returns the result. Groq is contractually not permitted to use it to train AI models, and does not keep it beyond what it needs to run the service, which can include up to 30 days to investigate abuse or reliability problems.
• No training. We do not use your audio, transcripts or Writing Tools text to train, fine-tune or improve AI models.

The keyboard

iOS asks you to allow Full Access for the Diction keyboard. A keyboard needs it to use the network (to send your voice for transcription in Diction Cloud or My server modes) and to share settings with the Diction app. Apple's warning text is the same for every keyboard that asks for it.

What the keyboard does with Full Access:

• Your typing is not sent anywhere. Autocorrect and next-word suggestions run on your iPhone.
• Text you select for Writing Tools is the exception. If Writing Tools suggestions are switched on and you select text, the selected text and a few words around it are sent to your AI service (Diction Cloud or your own server) to suggest fixes. Nothing is sent while you simply type.
• It learns some words locally. Words you add to My Words, and words you keep changing back after autocorrect, are stored on your phone. With Diction Cloud or My server, these words may be sent along with a dictation or Writing Tools request so that names and unusual words are spelt correctly. They are not stored on our servers.
• It reads your clipboard only when you tap Paste.
• It does not access your contacts, photos or location.
• iOS marks password fields as secure and does not let third-party keyboards type into them; the system keyboard appears instead.

What we collect

We collect as little as we can. Depending on your mode and settings, we may process:

Content you ask us to process (Diction Cloud only). Audio, transcripts and Writing Tools text, processed only to give you the result and not stored, as described above.

Diagnostic information.

• Error reports: the type of error, where in the app it happened, app and iOS version and device model.
• A daily diagnostic: your app version, device model and iOS version, your settings (for example the mode, language and which features are switched on), and counts such as how many words are in My Words, how many custom tones you have, and how often screens and features were used.

A device identifier. A random ID created on install, sent only in hashed form. It lets us count devices and apply subscription limits. It is not your Apple ID and is never used to track you.

Subscription information. Purchases are handled by Apple. We receive a transaction record from Apple to confirm your subscription, never your name, Apple ID or payment details. For subscribers, Diction Cloud's request logs also keep a hashed Apple transaction ID, the product, price, currency, store country, offer type and purchase dates alongside the device identifier.

Service logs. When you use Diction Cloud, our servers record operational information such as the time of the request, how long it took, its size in characters, the mode and any error. These logs never contain your audio or text.

Update check. Once a day the app asks our server whether a newer version is available, sending only the app version and the hashed device identifier. This check continues with diagnostics turned off.

If you contact us. Your email and what you write to us.

What diagnostics never include

• Audio recordings
• Transcripts or anything you dictated
• Anything you typed on the keyboard
• The words in My Words, the text of your tones, or your prompts
• Which apps you use Diction in
• Your contacts, photos, location or clipboard
• Your name, email address or Apple ID

Why we use information, and our legal basis

Purpose	Information	Legal basis (UK/EU GDPR)
Providing dictation and Writing Tools in Diction Cloud	Audio, text, device identifier	Performance of our contract with you
Confirming your subscription and preventing abuse	Apple transaction record, device identifier	Contract; legitimate interests (preventing fraud and abuse)
Fixing errors and keeping the service reliable	Error reports, service logs	Legitimate interests (operating a working service)
Understanding how Diction is set up and used, to improve it	Daily diagnostic	Legitimate interests (improving the product)
Answering you	Your emails	Legitimate interests; contract where it concerns your subscription
Meeting legal obligations	As required	Legal obligation

We may use information in aggregated or de-identified form (for example, "40% of devices use the QWERTY keyboard") to understand and describe how Diction is used. We will keep such information in de-identified form and will not try to re-identify it.

Who else handles information

We do not sell your information or share it for advertising. A few service providers process it on our behalf, under contract:

• AI processing for Writing Tools in Diction Cloud, by a provider in the United States.
• Hosting and network providers that carry encrypted traffic and serve app downloads.
• Apple, for payments and subscriptions, under Apple's own privacy policy.

We may disclose information if the law requires it, to protect the rights and safety of users or others, or as part of a sale or reorganisation of the business, in which case this policy continues to apply.

International transfers

Our own servers are in the United Kingdom. Writing Tools text goes to Groq in the United States; that transfer is covered by the EU Standard Contractual Clauses and the UK International Data Transfer Addendum in Groq's data processing terms. The UK has an adequacy decision from the EU, so information from the EU can flow to our UK servers.

How long we keep it

• Audio, transcripts, Writing Tools text: not kept; discarded once the result is returned.
• Diagnostics and service logs: for as long as we need them to run, secure and improve Diction.
• Subscription records: as long as your subscription is active and as long as needed for accounting and legal purposes.
• Emails to support: as long as needed to help you, then deleted.

Security

Connections between the app and our servers are encrypted. Access to our servers is restricted. Diagnostics are linked only to a hashed device identifier and, for subscribers, a hashed Apple transaction ID, not to your name or email. No system is perfectly secure, and we cannot guarantee absolute security, but we design Diction so that the most sensitive information, your voice and your words, is either never sent to us or never stored.

Your rights

Depending on where you live, you have the right to access, correct or delete information about you, to restrict or object to how we use it, and to data portability. Because Diction has no accounts and links diagnostics only to a hashed device identifier, we may need you to send us your Device ID, shown in the app under Support, to find your data.

You can object to diagnostics at any time by turning off Report errors and diagnostics in the app's Support screen (Report errors in older versions). The app then sends no error reports or daily diagnostic. What a feature needs in order to work, such as Diction Cloud requests, subscription checks and the update check, continues, and Diction Cloud's normal request logs continue too.

To exercise any other right, email support@diction.one. You can also complain to a data protection authority: in the UK, the Information Commissioner's Office (ico.org.uk); in the EU, the authority where you live.

If you live in California or another US state with a privacy law: we do not sell or share personal information as those laws define it, and you can ask what we hold and ask us to delete it.

Children

Diction is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us information, contact us and we will delete it.

The website

This policy covers the Diction app and Diction Cloud. Our website, diction.one, uses Google Analytics to understand how visitors find it. The app does not contain Google Analytics or any other third-party analytics or advertising code.

Changes to this policy

We may update this policy as Diction changes. We will post the new version here with a new date, and for significant changes we will also tell you in the app.

We will not reduce your rights under this policy without your consent. In particular, we will not start storing your audio or transcripts, sending what you type, or using your content to train AI models, without telling you in the app first and giving you the choice.

Contact

Questions about privacy: support@diction.one, or open an issue on GitHub.