Privacy Policy

1. Information We Collect

Account Information

When you sign in, we receive the following from your identity provider (e.g. Google, GitHub, or email):

• Email address
• Display name
• Profile picture URL

We store your email address and a unique identifier to manage your account.

Audio Data

When you use koedesk to transcribe speech, your device's microphone captures audio locally. The audio is sent to the provider of the engine you have selected — ElevenLabs by default, or Microsoft Azure AI Speech when the MAI Transcribe model is selected — for speech-to-text processing. We do not store your audio recordings on our servers. Audio and transcription data sent to the provider are retained in accordance with that provider's privacy policy.

Microphone and Permissions

koedesk requires microphone access to capture your voice for transcription. On iOS, koedesk runs as a custom keyboard (input method); on Android, koedesk runs as an on-screen overlay (a floating bubble) and uses the Accessibility Service solely to insert the transcribed text into the active field. Network access is used only to send audio to the transcription service. No keystrokes, typed text, or other on-screen content is collected, read, or transmitted.

Usage Data

We collect minimal usage data necessary for service operation:

• Session information (login/logout timestamps)
• Subscription plan status
• Anonymous app usage events and device information (via Firebase Analytics)
• Crash diagnostics including stack traces and device state at the time of crash (via Firebase Crashlytics)

Payment and Billing Information

When you subscribe to a paid plan, our payment providers pass us the billing details we need to issue and manage that subscription: the billing name, the billing address and country, a tax registration number (such as a VAT number or a Japanese invoice registration number) if you enter one, and the company or team name if you buy seats for an organisation. We never receive or store your full card number — card details are handled by Stripe, Apple or Google, depending on where you subscribed.

Information You Send Through Our Forms

If you apply for a corporate PoC or register a deal as a referral partner on koedesk.app, we receive what you enter in that form: company name and company email domain, contact name and email address, the expected number of seats, your preferred timing, and any free-text notes. We use this only to answer your enquiry and to run the PoC or the partnership; we do not sell it and we do not add you to unrelated mailing lists.

2. How We Use Your Information

• To authenticate your identity and manage your account
• To provide speech-to-text transcription services
• To determine your subscription plan and applicable features

3. Third-Party Services

koedesk integrates with the following third-party services:

• Clerk — Authentication and identity management
• Google — Social login provider (via Clerk)
• ElevenLabs — Speech-to-text transcription API
• Microsoft Azure AI Speech — Speech-to-text transcription API (used when the MAI Transcribe model is selected)
• Cloudflare — API hosting and session storage
• Firebase (Google) — Analytics and crash reporting
• Stripe — Payment processing, subscription billing and invoicing for purchases made on the web
• Apple — In-app purchases and subscription status on the App Store (iOS)
• Google Play — In-app purchases and subscription status on Google Play (Android)
• Resend — Delivery of transactional and notification email
• Google Ads & FirstPromoter — Advertising and marketing-measurement cookies on koedesk.app. In the EEA, UK and Switzerland these load only with your consent.

Each service has its own privacy policy. We encourage you to review them.

4. Data Storage and Security

• Account data is stored in Cloudflare D1 (encrypted at rest)
• Session tokens are stored in Cloudflare KV with a 30-day expiry
• Authentication credentials (OAuth client secrets) are stored as encrypted environment secrets
• On iOS and Android, session tokens and preferences are kept in the app's private storage area, which the operating system keeps separate from other apps
• On macOS and Windows, they are kept in a file inside koedesk's own application data folder (~/Library/Application Support/koedesk on macOS, %APPDATA%\koedesk on Windows). That folder is protected by your operating system user account rather than by an OS keychain, so any program running under your account can read it. On a shared computer, sign out of koedesk when you have finished

5. Data Retention

We retain your account information for as long as your account is active. Audio and transcription data sent to the selected speech-recognition provider (ElevenLabs, or Microsoft Azure AI Speech when the MAI Transcribe model is selected) are retained in accordance with that provider's privacy policy. You may request deletion of your account by contacting us.

Information you send through the PoC and partner forms is kept for up to 24 months after our last contact with you about it, and is then deleted. You can ask us to delete it sooner at any time by emailing [email protected].

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent for data processing at any time

7. Children's Privacy

koedesk is not intended for use by children under 13. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated revision date.

9. Contact

If you have questions about this privacy policy, please contact us at: [email protected]