1. Data controller
The controller of personal data is Finarena spółka z ograniczoną odpowiedzialnością, with its registered office in Warsaw, ul. Alternatywy 7/135, 02-775 Warsaw, Poland, KRS 0000524692, NIP 7010441235 (we). For matters concerning personal data, write to [email protected]. We have not appointed a data protection officer.
2. The key principle: we do not see what you say
The Speakeys app records audio only while you hold down the keyboard shortcut. The recording — and, when editing with AI, also the selected text and the command — is sent from your computer directly to Groq (or another AI provider you choose) using your own API key. We have no intermediary servers, so we do not receive, store or process your recordings or texts.
When you use Groq, you conclude your own contract with it, and Groq processes this data under its terms of service and data processing agreement (DPA). Details and recommended settings (Zero Data Retention) are described in the documentation. Information about Groq: privacy policy, data processing in the API.
On your computer, the app stores: the Groq API key and license data (in the macOS Keychain), settings, your custom dictionary and the history of recent results. We have no access to them.
3. What data we process, for what purpose and on what legal basis
| Situation | Data | Purpose and legal basis | How long |
|---|---|---|---|
| Visiting the website | IP address, date and time, page address, browser type (server logs) | ensuring the operation and security of the website — legitimate interest (Art. 6(1)(f) GDPR) | up to 30 days |
| Purchasing a license | full name, e-mail, country, order and license data (no card details) | concluding and performing the license agreement, sending the key (Art. 6(1)(b)); tax and accounting obligations (Art. 6(1)(c)); defense against claims (Art. 6(1)(f)) | for the duration of the license, and then until the limitation period for claims and the period required by tax law have expired |
| License activation and verification | license key, activation identifier, computer name, IP address | performance of the contract — license activation and enforcing the limit of 3 computers (Art. 6(1)(b)); the data is sent to our license server in the EU | for the duration of the activation and the license |
| Contact, support, complaints | e-mail address, message content, data provided in correspondence | responding to and handling the request (Art. 6(1)(f)), handling complaints (Art. 6(1)(b) and (c)) | until the matter is closed, and then until the limitation period for claims has expired |
| Trial period | — | the trial start date is stored only locally on your computer; we do not receive it | — |
5. Who we share data with
- Stripe (Stripe Managed Payments service; the Stripe group entity named in its terms [to be verified]) — payment operator and seller settling the transaction (Merchant of Record). It processes purchase and payment data as an independent controller under its own privacy policy and passes us the order data needed to issue the license.
- Hosting provider — [to be completed: provider name and server location in the EU], on whose servers the website and our license server run; it processes server logs and license data on our behalf.
- GitHub (GitHub, Inc., USA) — makes the app installation file available; when you download it, GitHub processes your IP address as an independent controller (GitHub privacy statement).
- E-mail provider — [to be completed], processes correspondence on our behalf.
- Accounting firm and advisers — to the extent necessary to fulfill legal obligations.
- Public authorities — only where required by law.
We do not sell personal data or share it for marketing purposes.
6. Transfers of data outside the European Economic Area
Stripe (as regards Stripe group entities in the USA) and GitHub process data in the USA. Data is transferred on the basis of a European Commission adequacy decision (EU-US Data Privacy Framework), where the recipient is covered by it, or of standard contractual clauses approved by the European Commission. You can obtain a copy of the safeguards by writing to [email protected].
7. Your rights
You have the right to:
- access your data and obtain a copy of it,
- rectification of your data,
- erasure of your data,
- restriction of processing,
- portability of data processed on the basis of a contract,
- object to processing based on legitimate interest,
- lodge a complaint with the President of the Personal Data Protection Office (UODO) (ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl).
To exercise your rights, write to [email protected]. We will respond within one month. You can delete data stored locally by the app yourself — instructions are in the documentation.
8. Providing data is voluntary
Providing data is voluntary but necessary to purchase and activate a license. Using the website and the trial period does not require providing any data.
9. Automated decision-making
We do not make decisions based solely on automated processing, including profiling, that would produce legal effects concerning you. Automated license verification consists only of checking the validity of the key and the activation limit.
10. Security
The website runs only over HTTPS. The API key and license data are stored in the encrypted macOS Keychain. We limit access to data to persons who need it to fulfill the purposes described.
11. Changes to the Privacy Policy
We may update this policy, e.g. when we change providers or app features. The current version is always available on this page together with its effective date. We will inform customers with an active license of material changes by e-mail.