Privacy

Deixis turns speech into text. The recognition happens on your own device — your computer or your phone — so the audio it captures to do that is never uploaded, not to us and not to anyone else. This page lists everything that does leave your device, what it is for, and who receives it — including the one thing you can choose to send us that contains your voice.

Recognition never uploads your audio. Turning speech into text happens entirely on your own hardware, offline, using a model downloaded once to your device. There is no setting that changes that and no feature that depends on changing it — not cleanup, not translation, not meeting notes. Those send text.

There is exactly one way a recording of your voice reaches us, and it is an act you have to take deliberately: on the desktop app you can share a screen recording as a link, and a screen recording has your microphone mixed into it. That file is uploaded, because being uploaded is what a share link is. Nothing else does this, and the phone apps cannot do it at all.

This policy covers the Deixis applications for Windows, macOS and Android, and the service at api.deixis-voice.com that the optional cloud features use. The data controller is Dappit (Pty) Ltd, a company registered in South Africa. Write to support@deixis-voice.com about anything on this page.

Everything that leaves your device

Not a summary — the list. Deixis has no analytics, no telemetry, no advertising and no third-party trackers, which is what keeps this table short enough to read.

What	What is sent	Where it goes	When
Cleanup	The text of what you said; your own vocabulary terms; and where it is going — the name of the app and the kind of field (a message, a search box). The text already in the field, only if you switch on “send surrounding text”. Never the audio.	Our service, then an AI provider (see below)	Only with an account or your own provider key, and by default only when the on-device rules are not enough
Translate	The text you asked to translate, and your vocabulary terms	Our service, then an AI provider	When you ask for a translation
Meeting notes	The meeting transcript. Never the recording.	Our service, then an AI provider	At the end of a meeting if you switched notes on, or when you press Generate
Your account	Your email address, the sign-in code you enter, and a label for the device (on Android, the phone’s model name)	Our service and its database	When you start a trial or sign in
Payment	Whatever you enter on the payment page. Deixis never sees your card.	Polar, our payment provider	Only if you subscribe
Share links (desktop)	The note, screenshot or screen recording you chose to share — the whole file. A screen recording includes your microphone audio if a microphone was on when you made it. A meeting recording cannot be shared at all: it holds other people's voices, and they were never asked.	Our storage, served to whoever holds the link	Only when you press Share, and only until the link expires or you revoke it
Speech model download	Nothing but the request itself	Hugging Face	Once, on first run, when you press Download
Update check (desktop)	Nothing but the request — the version comparison happens on your machine	Our service	At launch

If you leave cleanup set to Never and do not sign in, nothing in the table above happens at all beyond the one-time model download. Dictation, on-device recognition, the rules-based cleanup, your dictionary, meeting recording and transcription all keep working with no network at all.

Who else receives your text

When a cloud feature runs, the text travels from your device to our service, and from there to a large-language-model provider that does the actual rewriting. Today that route is OpenRouter, which passes the request to the model we have configured (currently Google’s Gemini). We may change the provider or model; this page is updated when we do.

We do not store your transcripts. Our service passes the text through and returns the result. The providers we route through apply their own retention and processing terms to the request, which is a reason to leave cleanup on When it helps — the default — or to set it to Never if the content is sensitive.

Our infrastructure providers, in the ordinary sense that they host the service:

Cloudflare — runs our service and stores shared files.
Neon — the database holding accounts and subscription state.
OpenRouter and the model provider behind it — the cleanup, translation and notes requests.
Polar — the merchant of record for subscriptions, which is also why your receipt carries their name.
Hugging Face — hosts the speech model file you download once.

We do not sell your data, and we do not share it with anyone for advertising. There is no advertising in Deixis.

Deixis on Android, and the accessibility service

On Android, the dictation bubble — the microphone that appears beside a text field in another app — is built on Android’s accessibility service, because that is the only way an app may offer to type into another app. This section says exactly what that permission is used for, because it is a powerful one and you are entitled to know.

What the service reads

Which app is in front, and what kind of field has focus — that it is editable, and its role and label (“Text message”, “Search”). This is what decides whether to show the bubble at all, and it is sent with a cleanup request so the wording suits where it is going.
The text already in the field — only the 400 characters before your cursor, only when you have switched on “send surrounding text” under Cleanup, and only at the moment you dictate. It is off by default.
The text you selected, when you choose “Translate the selection” from the bubble.

What it never does

It never reads password fields. The bubble does not appear on one.
It does not read, log or transmit what you or anyone else types, outside the one disclosed setting above.
It is not used for analytics, advertising, profiling or building any record of your activity. Nothing it reads is stored on our servers.
It does not run in other apps for any purpose other than showing the bubble and placing your dictated text into the field you chose.

Turning it off

The service is off until you switch it on, Deixis works without it (you can dictate inside the app and copy the result), and you can turn it off at any time in Android Settings › Accessibility, or from Deixis’s own Settings screen. Uninstalling Deixis removes it.

What stays on the phone

Meeting recordings, their transcripts, your dictation history, your notes and your dictionary are written to Deixis’s private storage on the device. They are not backed up to us and not readable by other apps. Deleting them in the app, or uninstalling Deixis, removes them.

What we store, and for how long

Your account — email address, when your trial or subscription started and ends, and the labels of the devices signed in. Kept while the account exists.
Subscription and payment records — the amount, date and status of each payment, so an invoice can be explained. Kept as long as tax and accounting law requires. We never hold card numbers.
Shared files — the note, screenshot or screen recording behind a link you made. Fourteen days by default, ninety at the most, and gone the moment the link expires or you revoke it — revoking deletes the objects rather than hiding them.
Service logs — ordinary operational logs, which record that a request happened and whether it failed, not the text of it. Kept briefly, for reliability.
Waitlist emails, if you gave us one on this site, until you ask us to remove it or we launch and it has served its purpose.

Beyond that list, your dictations, notes, meetings, recordings, history and dictionary are not stored by us. They live on your own device, and we never receive them.

The exception is the one you create yourself: anything you share as a link is uploaded and hosted by us for as long as the link lasts — that is what a share link is. It is stored in a bucket of its own, kept apart from everything else, served to whoever holds the link, and deleted when the link expires or you revoke it. Links last fourteen days by default and ninety at the most; there is no way to make one permanent. Sharing exists on the desktop app only.

Your choices

Turn the cloud off. Set Cleanup to Never and do not sign in. Everything that runs on your device keeps running.
Use your own key. Enter your own provider key and your requests are billed to you and never to us.
Delete your account, yourself. Settings › Account › Delete account in the app removes your account, every sign-in on every device, and anything you shared as a link — at once, without asking us. If the app is gone, email support@deixis-voice.com instead. What is deleted, and what is kept.
See what we hold. Email support@deixis-voice.com and we will send you a copy of your account data.
Revoke a share at any time from Settings; the files go immediately.
Say no to product news, or change your mind. The switch is unticked when you sign in and turning it off later is the same switch. Nothing about your account depends on it either way.

Depending on where you live you may have rights under the GDPR, the UK GDPR, POPIA or the CCPA — to access, correct, export, delete or object. The email above is how to exercise any of them, and we answer within 30 days. If you are unhappy with the answer you may complain to your data protection authority; in South Africa that is the Information Regulator.

Product news, only if you ask for it

We do not email you about the product unless you have said we may. The box is on the sign-in screen, it is off unless you turn it on, and signing in works exactly the same either way — agreeing is never a condition of having an account. We record the date you agreed, because consent you cannot evidence is not consent.

Turn it off in Settings › Account, with the same switch, at any time. It takes effect immediately and changes nothing else. Service email — your sign-in code, a receipt, a notice that a payment failed — is not marketing and is not covered by that switch: it is part of having an account, and there is no way to have one without it.

Children

Deixis is a tool for work and is not directed at children. We do not knowingly collect anything from a child under 13 (or under 16 where local law sets that age). If you believe a child has given us their email address, write to us and we will remove it.

Security

Traffic to our service is encrypted in transit. Your sign-in token is stored in the operating system’s own protected store — the Android Keystore on a phone, DPAPI on Windows, the Keychain on macOS. Share links are long random values that cannot be guessed.

Changes to this policy

If we change what leaves your device, we change this page and move the date at the top. For a change that materially affects you — a new recipient of your text, say — we will tell you in the app rather than relying on you re-reading this page.

Contact

Dappit (Pty) Ltd · support@deixis-voice.com