Vibe Typer Privacy Policy

Effective: July 30, 2025 · Last updated: July 27, 2026

1. Controller information

Company: Abram Industries Pty Ltd (trading as Vibe Typer)
Contact: support@vibetyper.com
Data Protection Officer: support@vibetyper.com
Jurisdiction: Australia

2. Introduction

This Privacy Policy explains how Vibe Typer ("we," "us," or "our") collects, uses, processes, and protects your information when you use our desktop application, our iOS app and the Vibe Typer keyboard extension, our website, and related services ("Service").

This Privacy Policy complies with the General Data Protection Regulation (GDPR) and other applicable privacy laws. If you are located in the European Union, you have specific rights regarding your personal data as outlined in this policy.

3. Information we collect

3.1 Personal information you provide

Email Address: Required for account creation and authentication; also used to send important service updates and occasional marketing communications (opt-out available).
Synced Settings: When you are signed in, the apps can save a copy of your Vibe Typer settings to your account so they follow you between devices. This copy includes content you author: your custom dictionary entries (which may contain names or jargon), the display name you set, and your per-application text-insertion preferences (which records the applications you chose a setting for).

3.2 Automatically collected information

Audio Data: Processed in memory for speech-to-text conversion; we do not store or retain recordings.
Transcription & AI Content: Returned to your device; we do not store transcripts, prompts, or AI outputs on our servers.
Usage Statistics: Audio duration and transcription word count
Technical Data: Operating system/platform identifier and application version
Log Data: IP address, user agent, and request metadata in server logs (for security and troubleshooting)
Authentication Data: Session tokens and authentication timestamps

3.3 Analytics information

Website Analytics: Website usage patterns and performance metrics

4. How we use your information

4.1 Service provision (legal basis: contract)

Authenticate your account and provide access to the Service
Process audio for speech-to-text transcription
Insert transcribed text into your applications
Provide the AI text features, such as rewrite and reply

4.2 Service improvement (legal basis: legitimate interest)

Analyze usage patterns to improve features
Monitor system performance and reliability
Develop new features
Keep the Service secure and prevent fraud

4.3 Communication (legal basis: contract/legitimate interest)

Send service-related notifications
Provide customer support
Communicate about account issues or updates
Share product updates and occasional marketing communications (you can opt out at any time)

5. Data processing and storage

5.1 Audio processing

Temporary Processing: Audio is buffered in memory only while transcription is running
Routing: Audio is sent to our backend and forwarded to a third-party inference provider to produce a transcript
No Persistent Storage: We do not store or retain recordings on our servers
Transcript Delivery: The final transcript is sent back to your device over the live connection and cleared from memory. If the connection drops, your device recovers by resending the audio it still holds locally; we keep no server-side copy of the transcript for retries.
Provider Switching: We may automatically switch inference providers for reliability and performance
iOS Armed Microphone: So keyboard dictation can start the instant you switch to the Vibe Typer keyboard, the iOS app keeps a microphone session armed in the background (using the iOS "audio" background mode); iOS does not permit a suspended app to start microphone capture. Audio captured while the session is only armed is discarded on your device and is never stored or transmitted; only audio between an explicit start and stop is streamed for transcription. The armed state ends automatically after 60 minutes without dictation activity, releasing the microphone.

5.2 Personal data storage

Database: Account and usage information is stored in a managed database/auth provider
App Storage: Authentication tokens are stored using OS-level secure storage (encryption) when available, such as the system keychain on iOS
Transcription History: The desktop and iOS apps store a short history of your transcription and AI history locally on your device for convenience (for example, to copy recent results); you can clear it at any time from within the app. On both clients this history is local to the device only (it is not uploaded to our servers) and it is governed by the same "local transcription history" preference. Turning that preference off clears the history already stored on that device. The preference is part of the settings kept with your account: the iOS app saves your choice to your account, and both apps apply the synced value when they load your settings. Changing it in the desktop app does not by itself push the change to your account, so a desktop change may not carry across to your other devices
Website Storage: Authentication sessions may be stored in your browser (for example, in local storage)
Backup: Regular backups maintained for data protection

5.3 Data retention

User Accounts: Retained until you delete your account. You can do this yourself in the app under Settings → Account on both desktop and iOS (our support page has the steps); you can also request deletion at support@vibetyper.com. Deleting your account also deletes your synced settings and custom dictionary and your usage history, and immediately revokes any active subscription. If your account owns a team plan, deletion is blocked until you cancel or transfer that team plan, because other members' seats depend on it
Usage and Security Logs: Retained as needed to operate the Service, prevent abuse, provide support, and improve reliability
Authentication Data: Tokens expire and are refreshed automatically
Transcription & AI Content: Not retained on our servers; processed in memory and discarded after the operation completes.

5.4 The iOS keyboard extension

The Vibe Typer keyboard is a dictation-only keyboard: it has no typing keys, and its only job is to insert text you dictated into the app you are using.

Why It Needs "Allow Full Access": iOS requires Full Access before a keyboard extension can read the shared app container and keychain. That shared storage is the keyboard's only data source: it is where the Vibe Typer app keeps your sign-in state and the finished dictation result. Without Full Access the keyboard cannot tell that you are signed in and cannot receive a transcript to insert.
No Network Access: The keyboard extension makes no network requests at all. Audio capture and transcription happen in the Vibe Typer app; the keyboard only reads the finished transcript from the shared container.
No Keystroke Logging: The keyboard does not transmit, store, or log anything you type in other apps.
Text Around the Cursor: Immediately after inserting a transcript, the keyboard reads a small amount of the text around the cursor for the sole purpose of confirming the dictated text was inserted correctly. That text is used only for that check, is not stored, and never leaves your device.

6. Data sharing and third parties

6.1 Service providers

We share data with third-party service providers to operate and improve the Service (for example: hosting, database/authentication, billing, analytics, and AI inference).

AI inference providers

Data Shared: Audio for transcription and text for AI processing (as needed for the feature you use)
Purpose: Speech-to-text conversion and AI-powered text operations (rewrite, reply)
Provider Switching: We may automatically switch between inference providers for reliability/performance
No-Retention Requirement: We require our inference providers to be configured/policy-bound to not retain request content
No Training on Your Content: We do not allow your request content to be used to train models and require providers to honor equivalent no-training/no-retention policies where supported

Other service providers

What We Share: The minimum information needed to provide the Service (for example: account identifiers, subscription status, and usage/security signals)
Why: Authentication, billing, hosting/infrastructure, analytics, and support

6.2 Legal requirements

We may disclose your information if required by law, regulation, or court order, or to protect our rights, property, or safety.

7. International data transfers

Your data may be transferred to and processed in countries outside your jurisdiction, including the United States. These transfers are necessary for service provision and are protected by:

Standard Contractual Clauses: EU-approved data transfer mechanisms
Adequacy Decisions: Where applicable for certain jurisdictions
Service Provider Safeguards: Privacy and security commitments from processors

8. Data security

We implement appropriate technical and organizational measures to protect your data:

Encryption: Data encrypted in transit and at rest
Access Controls: Restricted access to personal data
Authentication: Secure user authentication with JWT tokens
Monitoring: Regular security monitoring and updates
Compliance: Regular security audits and compliance checks

9. Your rights (GDPR)

If you are located in the EU, you have the following rights:

9.1 Access right

Request access to your personal data and information about how it's processed.

9.2 Rectification right

Request correction of inaccurate or incomplete personal data.

9.3 Erasure right

Request deletion of your personal data under certain circumstances. You can delete your account and its associated data yourself at any time from Settings → Account in the desktop or iOS app, or you can ask us at support@vibetyper.com. If your account owns a team plan, in-app deletion is blocked until you cancel or transfer that team plan first.

9.4 Restriction right

Request restriction of processing under certain circumstances.

9.5 Data portability right

Request transfer of your data to another service provider.

9.6 Objection right

Object to processing based on legitimate interests.

9.7 Complaint right

Lodge a complaint with your local data protection authority.

To exercise your rights: Contact us at support@vibetyper.com

10. Age restrictions

Our Service is not intended for individuals under 16 years of age. We do not knowingly collect personal data from children under 16. If you are under 16, please do not use our Service or provide any personal information.

11. Cookies and tracking

11.1 Application cookies

The desktop and iOS applications store certain data locally for:

Authentication tokens (stored using OS-level secure storage when available; on desktop, authentication does not initialize if secure storage is unavailable)
Application configuration and runtime settings

11.2 Website cookies

Our website may use cookies and similar technologies to:

Analyze website usage
Improve user experience
Measure marketing and conversion performance

12. Changes to this Privacy Policy

We may update this Privacy Policy periodically. When we make material changes, we will update the "Last Updated" date.

Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

13. Contact information

For privacy-related questions, concerns, or requests:

Email: support@vibetyper.com
Subject Line: Privacy Policy Inquiry

Response Time: We aim to respond within 30 days of receiving your request.

For help with the apps, your account, or billing, see our support page.

14. Legal basis summary

Purpose	Legal Basis	Data Types
Account Authentication	Contract	Email, User ID, Tokens
Speech Transcription	Contract	Audio (temporary), Text
Service Analytics	Legitimate Interest	Usage Statistics, Performance
Communication	Contract/Legitimate Interest	Email, Service Messages
Security	Legitimate Interest	Authentication Logs, Error Reports

15. Data Protection Officer

Questions about data protection can be directed to our Data Protection Officer:

Email: support@vibetyper.com
Subject Line: Data Protection Officer

This Privacy Policy is effective as of July 30, 2025 and was last updated on July 27, 2026.