Privacy

Deixis turns speech into text. In the Deixis apps the recognition happens on your own device — your computer or your phone — so the audio they capture to do that stays there, unless you turn on Deixis cloud processing for a phone’s meetings. This page lists everything that does leave your device, what it is for, and who receives it — including the three ways a recording of your voice can reach us, each of which is yours to start.

Dictation never uploads your audio. Turning speech into text happens on your own hardware, offline, using a model downloaded once to your device. No setting changes that for a dictation, and no feature depends on changing it — not cleanup, not translation, not meeting notes. Those send text. A meeting is recognised on the device too, and on Android you can choose to have it transcribed in the cloud instead (see Meetings processed in the cloud); until you do, its audio stays on the phone.

There are three ways a recording of your voice reaches us. On the desktop app you can share a screen recording as a link, and a screen recording has your microphone mixed into it. That file is uploaded, because being uploaded is what a share link is. And a website can add the Deixis mic to its pages: where Deixis is not on your device, not running, or not yet connected to that site, pressing it sends that one recording through us to be turned into text, and the line beside the mic says so every time (see A website’s Deixis mic). And on Android, if you turn on Deixis cloud processing for meetings, a finished meeting’s audio is sent through us to be turned into text, and we keep none of it (see Meetings processed in the cloud). Nothing else does this.

This policy covers the Deixis applications for Windows, macOS and Android, the service at api.deixis-voice.com that the optional cloud features use, and the Deixis mic that websites can add to their pages. The data controller is Dappit (Pty) Ltd, a company registered in South Africa. Write to support@deixis-voice.com about anything on this page.

Everything that leaves your device

Not a summary — the list. Deixis has no analytics, no telemetry, no advertising and no third-party trackers, which is what keeps this table short enough to read.

What	What is sent	Where it goes	When
Cleanup	The text of what you said; your own vocabulary terms; and where it is going — the name of the app and the kind of field (a message, a search box). The text already in the field, only if you switch on “send surrounding text”. Never the audio.	Our service, then an AI provider (see below)	Only with an account or your own provider key, and by default only when the on-device rules are not enough
Translate	The text you asked to translate, and your vocabulary terms	Our service, then an AI provider	When you ask for a translation
Meeting notes	The meeting transcript. Never the recording.	Our service, then an AI provider	At the end of a meeting if you switched notes on, or when you press Generate
Meeting title	The opening of the meeting transcript — about 1,500 characters, not the whole meeting	Our service, then an AI provider	At the end of a meeting, unless you named it yourself
Meeting audio, for cloud processing (Android)	A finished meeting’s audio, in pieces of at most 90 seconds, each its own request, with your vocabulary terms and any names or words you gave Deixis for that meeting. We keep none of it.	Our service, then Cloudflare’s speech model (see below)	Only if you turn on Deixis cloud processing in Settings › Meetings, which needs Pro or the trial; then after a meeting ends, up to 20 hours of meetings a month, on Wi-Fi. On mobile data a meeting waits for Wi-Fi unless you tap Send now on mobile data or turn on Use mobile data for Deixis cloud
Screen recording title and summary (desktop)	The recording’s transcript. Never the recording.	Our service, then an AI provider	When a recording is written up: at the end of one that had a microphone, or when you press Summarise
Checking unsure words	The finished text — a dictation about to be pasted, a note, or a meeting’s whole transcript — with the words the recogniser was unsure of and your vocabulary terms. Of a free-mode note, only what you said: nothing you picked, so no quote, screenshot link or page address. Never the audio.	Our service, then an AI provider	Only with an account or your own provider key, and only if you switched on marking unsure words, which is off until you do: at the end of a meeting or a note, and before a dictation it is about to ask you about
Suggestions for an unsure word	The word you clicked and the paragraph it sits in — never a whole note, and never a note’s screenshot links or the addresses of what you picked — with the words you have already settled there and your vocabulary terms	Our service, then an AI provider	Only with an account or your own provider key, and only when you click an underlined word
Your account	Your email address, the sign-in code you enter, and a label for the device (on Android, the phone’s model name). Once, when you start a trial, two facts about how you found Deixis: the partner named in the installer’s filename, if you downloaded it through a partner’s link, and the website of the first partner tool that connected to Deixis on this computer, if one did. Each is recorded once and never sent again.	Our service and its database	When you start a trial or sign in
Payment	Whatever you enter on the payment page. Deixis never sees your card.	Polar, our payment provider	Only if you subscribe
Share links	The note, screenshot or screen recording you chose to share — the whole file — or, from the Android app, the words of a dictation, note or meeting. A screen recording includes your microphone audio if a microphone was on when you made it. A meeting recording cannot be shared at all: it holds other people's voices, and they were never asked.	Our storage, served to whoever holds the link	Only when you press Share, and only until the link expires or you revoke it
Integrations and webhook buttons (desktop)	The finished note or translation, and for a screen grab its path and file name — never the image itself	The address you entered yourself	When something finishes, and only for destinations you added
Cloud dictation on a website	One take’s recording, from your browser, and the website’s key terms. Not from the app: a website’s Deixis mic, when Deixis on your device is not taking it. Like any web request it carries the website’s address and your IP address.	Our service, then Cloudflare’s speech model (see below)	Only when you press that mic, and it says so beside the mic every time
Speech model download	Nothing but the request itself	Hugging Face	Once, on first run, when you press Download
Update check (desktop)	Nothing but the request — the version comparison happens on your machine	Our service	At launch
Announcements (desktop)	Nothing but the request — which notices you have dismissed stays on your machine and is never sent	Our service	When the Settings window opens, except in the week after any notice has been shown, and never if you switch announcements off
Claude usage (desktop)	The Claude Code sign-in already on your computer, to ask how much of your Claude plan is left. Nothing of yours: no audio, no text, no transcript	Anthropic, not us	Only when you press its key, or the refresh button in its popup

Without an account and without a provider key of your own, nothing above reaches an AI provider. Meeting notes and titles, recording summaries and the unsure-word check are not sent at all; a cleanup or a translation, if Deixis is still where the model runs, reaches our service and is refused there without being read. To keep every word on your device, set where the model runs to Nowhere or to a model on your own computer, and leave Deixis cloud processing for meetings off, as it is until you turn it on. With an account or your own key, setting cleanup to Never stops dictation sending its sentences, but translation, meeting notes and titles, recording summaries and the unsure-word check still use the cloud when you use them. Whatever you choose, the update check and the announcement check carry nothing but the request, the model download waits for you to press Download, and Claude usage for you to press its key. Dictation, on-device recognition, the rules-based cleanup, your dictionary, meeting recording and transcription all keep working with no network at all.

A website’s Deixis mic

A website can put the Deixis mic beside its own text fields. If Deixis on your computer has answered that site before, the mic records on your computer, as the app always does. If it has not, or is not running, or you are on a phone, the website can have the mic work through the cloud instead, and a small red cloud beside the mic, named “Transcribed in the cloud by Deixis”, marks every such take.

Then your browser records that one take and sends it to our service, which hands it to Whisper, an open speech model, run on Cloudflare Workers AI, and passes the text back to the page. Along with the recording go the website’s key terms (product names it wants spelled right), and what any web request carries: the website’s address and your IP address. Before the recording is sent, Cloudflare’s Turnstile checks in your browser that a person is using the mic, under Cloudflare’s own privacy terms.

We keep none of it. The recording exists in our service only for that request. We do not store or log the recording or the text, and Cloudflare’s terms for Workers AI rule out training on them. What we do record is that a take happened, for which website and how many seconds it lasted, because the website pays for those seconds. Our request logs hold each request’s address and headers, as they do for every request to our service, and never its body. The website receives the text, which it would have had if you had typed it.

Meetings processed in the cloud

On Android, a finished meeting is transcribed again at the best quality, and by default the phone does that itself. In Settings › Meetings you can turn on Deixis cloud processing instead. It is off until you turn it on, and it is included with Pro and with the trial, up to 20 hours of meetings a month.

With it on, after a meeting ends the phone sends the meeting’s audio to our service in pieces of at most 90 seconds, each its own request, with your vocabulary terms and any names or words you gave Deixis for that meeting, so they are spelled right. Our service hands each piece to Whisper on Cloudflare Workers AI, the same model a website’s Deixis mic uses, and passes the text back to the phone. Telling the speakers apart happens on the phone, as before. The notes and the meeting’s name are made the way they always are, from the transcript: through our service to an AI provider when your settings send them there, as the table above says.

The phone sends a meeting on Wi-Fi, or on another connection that is not metered. On mobile data the meeting waits for Wi-Fi, and the app offers Send now on mobile data on it, with about how much data that meeting would use; pressing it sends that one meeting and no other. To send every meeting on mobile data without waiting, turn on Use mobile data for Deixis cloud, under the cloud switch in Settings › Meetings. It is off until you turn it on.

We keep none of it. Each piece exists in our service only for its own request. We do not store or log the audio, the text or the words sent with them, and they travel in the body of the request, which our request logs never hold. Cloudflare’s terms for Workers AI rule out training on them. What we do record is how many seconds of audio your account has had processed this month, because the allowance is counted in seconds, and one service log line for each piece: your account, whether it worked, how many seconds it was and how long each step took — never a word of it. Past the allowance, the phone processes the meeting itself; a meeting that reaches the allowance part-way has sent some of its pieces before the phone takes over.

Who else receives your text

When a cloud feature runs, the text travels from your device to our service, and from there to a large-language-model provider that does the actual rewriting. Today the model is gpt-oss-120b, an open-weights model published by OpenAI, run on Cerebras hardware and reached through OpenRouter. If Cerebras is unavailable the same model is served by Groq or Baseten, and by nobody else. We may change the provider or model; this page is updated when we do, and the guarantees below hold for whatever we change to.

Nothing in that chain keeps your text. Our service passes it through and returns the result; it logs how long the request took and how many characters it carried, never the characters themselves. Every request tells OpenRouter to route only to zero-data-retention endpoints, where prompts and answers are not stored and are not used to train models, and to refuse any endpoint whose policy collects inputs. If no endpoint qualifies, the request fails and Deixis falls back to the local rules engine, rather than sending your words somewhere that would keep them. OpenRouter itself does not store prompts and does not train on them.

That guarantee is about retention and training. The text is still processed on someone else’s computer for the second or so it takes to rewrite, which is why cleanup ships on When it helps — most utterances never leave the machine — and why Nowhere, or a model on your own computer, is the right setting if the content must not.

Who processes your data, and in what role:

Cloudflare — runs our service in its data centre near our database, in the eastern United States, and stores shared files. Sees cloud requests in transit; our service logs none of their content. For a website’s Deixis mic, and for a meeting you have Deixis process in the cloud, it also runs the speech model (Workers AI), which sees that audio and trains on nothing. For the Deixis mic only, it also runs the Turnstile check in your browser.
OpenRouter (United States) — routes cleanup, translation, notes and unsure-word requests to the model. Stores no prompts, trains on nothing.
Cerebras (United States), or Groq or Baseten if it is unavailable — runs the model, on zero-data-retention endpoints. No storage of prompts or answers, no training.
Neon — the database holding accounts and subscription state, and how many seconds of meeting audio each account has had processed in the cloud each month, and the words of anything you share as a link. Never holds audio.
Polar — the merchant of record for subscriptions, which is also why your receipt carries their name.
Hugging Face — hosts the speech model file you download once.

We do not hold a HIPAA agreement, an independent security audit report or a standing data-processing agreement for organisations. When we do, it will be on this page; until then, do not read one into anything above.

We do not sell your data, and we do not share it with anyone for advertising. There is no advertising in Deixis.

Deixis on Android, and the accessibility service

On Android, the dictation bubble — the microphone that appears beside a text field in another app — is built on Android’s accessibility service, because that is the only way an app may offer to type into another app. This section says exactly what that permission is used for, because it is a powerful one and you are entitled to know.

What the service reads

Which app is in front, and what kind of field has focus — that it is editable, and its role and label (“Text message”, “Search”). This is what decides whether to show the bubble at all, and it is sent with a cleanup request so the wording suits where it is going.
The text already in the field — only the 400 characters before your cursor, only when you have switched on “send surrounding text” under Cleanup, and only at the moment you dictate. It is off by default.
The text you selected, when you choose “Translate the selection” from the bubble.

What it never does

It never reads password fields. The bubble does not appear on one.
It does not read, log or transmit what you or anyone else types, outside the one disclosed setting above.
It is not used for analytics, advertising, profiling or building any record of your activity. Nothing it reads is stored on our servers.
It does not run in other apps for any purpose other than showing the bubble and placing your dictated text into the field you chose.

Turning it off

The service is off until you switch it on, Deixis works without it (you can dictate inside the app and copy the result), and you can turn it off at any time in Android Settings › Accessibility, or from Deixis’s own Settings screen. Uninstalling Deixis removes it.

What stays on the phone

Meeting recordings, their transcripts, your dictation history, your notes and your dictionary are written to Deixis’s private storage on the device. They are not backed up to us and not readable by other apps. Deleting them in the app, or uninstalling Deixis, removes them.

What we store, and for how long

Your account — email address, when your trial or subscription started and ends, the labels of the devices signed in, and the partner you came from, if any, as recorded once at sign-up. Kept while the account exists.
Subscription and payment records — the amount, date and status of each payment, so an invoice can be explained. Kept as long as tax and accounting law requires. We never hold card numbers.
Shared files — the note, screenshot or screen recording behind a link you made on the desktop, or the words of a dictation, note or meeting you shared from the Android app. Fourteen days by default and a year at the most, unless you chose to keep a link until you revoke it, and gone the moment the link expires or you revoke it — revoking deletes the objects rather than hiding them.
Meeting cloud processing, if you turn it on — how many seconds of meeting audio your account has had processed in each calendar month, to count the allowance. Never the audio or the text. Kept while the account exists.
Service logs — ordinary operational logs, which record that a request happened and whether it failed, not the text of it. For a piece of a meeting processed in the cloud, the line also carries your account, how many seconds the piece was and how long each step took. Kept briefly, for reliability.
Waitlist emails, if you gave us one on this site, until you ask us to remove it or we launch and it has served its purpose.

Beyond that list, your dictations, notes, meetings, recordings, history and dictionary are not stored by us. They live on your own device. A meeting you have Deixis process in the cloud passes through our service in pieces, each its own request, on its way to the speech model, and we keep none of it.

The exception is the one you create yourself: anything you share as a link is uploaded and hosted by us for as long as the link lasts — that is what a share link is. A shared file is stored in a bucket of its own and shared words in our database, both kept apart from everything else, served to whoever holds the link, and deleted when the link expires or you revoke it. Links last fourteen days by default and a year at the most. The desktop app also offers Until I revoke it: that link has no end date and stays until you revoke it or delete your account. Any link opens only while your account is covered — by a subscription of your own, a team seat or a trial — and for the payment provider's retry window after a payment fails. You can share from the desktop app and from the Android app. The Android app shares words only — a dictation, a note, or a meeting’s notes or transcript — never a recording, and its links run from a day to a year.

Your choices

Turn the cloud off. Set where the model runs to Nowhere, or to a model on your own computer. Everything that runs on your device keeps running.
Keep meetings on the phone. Deixis cloud processing for meetings is off until you turn it on in Settings › Meetings; leave it off and a meeting’s audio never leaves the phone.
Use your own key. Enter your own provider key and your requests are billed to you and never to us.
Delete your account, yourself. Settings › Account › Delete account in the app removes your account, every sign-in on every device, and anything you shared as a link — at once, without asking us. If the app is gone, email support@deixis-voice.com instead. What is deleted, and what is kept.
See what we hold. Email support@deixis-voice.com and we will send you a copy of your account data.
Revoke a share at any time from Settings; the files go immediately.
Say no to product news, or change your mind. The switch is unticked when you sign in and turning it off later is the same switch. Nothing about your account depends on it either way.

Depending on where you live you may have rights under the GDPR, the UK GDPR, POPIA or the CCPA — to access, correct, export, delete or object. The email above is how to exercise any of them, and we answer within 30 days. If you are unhappy with the answer you may complain to your data protection authority; in South Africa that is the Information Regulator.

Product news, only if you ask for it

We do not email you about the product unless you have said we may. The box is on the sign-in screen, it is off unless you turn it on, and signing in works exactly the same either way — agreeing is never a condition of having an account. We record the date you agreed, because consent you cannot evidence is not consent.

Turn it off in Settings › Account, with the same switch, at any time. It takes effect immediately and changes nothing else. Service email — your sign-in code, a receipt, a notice that a payment failed — is not marketing and is not covered by that switch: it is part of having an account, and there is no way to have one without it.

Children

Deixis is a tool for work and is not directed at children. We do not knowingly collect anything from a child under 13 (or under 16 where local law sets that age). If you believe a child has given us their email address, write to us and we will remove it.

Security

Traffic to our service is encrypted in transit. Your sign-in token is stored in the operating system’s own protected store — the Android Keystore on a phone, DPAPI on Windows, the Keychain on macOS. Share links are long random values that cannot be guessed.

Changes to this policy

If we change what leaves your device, we change this page and move the date at the top. For a change that materially affects you — a new recipient of your text, say — we will tell you in the app rather than relying on you re-reading this page.

Contact

Dappit (Pty) Ltd · support@deixis-voice.com