Privacy Policy

The short version

tebDictate turns your phone into a wireless dictation microphone for any computer.

• Your speech audio never leaves your phone. Speech is recognized on the device by Apple's on-device recognizer (iOS) or Android's on-device recognizer. If a language has no on-device speech pack installed, tebDictate refuses to dictate rather than sending your audio anywhere.
• There are no accounts. We do not ask for your name, email, or phone number. We hold no user records, because there is no user record to hold.
• Dictated text sent to your computer is end-to-end encrypted. Our relay server carries ciphertext it cannot read, and deletes it within minutes.
• We do not sell data, and we do not use anything you dictate to train models.

What happens to your dictation

On the phone

Your microphone audio is converted to text on the device and is never uploaded. Recognized text is kept in memory for the session. If you use the Dictation pad, History, Snippets, or Voice Form Fill, that text and those files stay on your phone. Dictation history is encrypted at rest with a key held in the device Keychain/Keystore. You can delete all history at any time from Settings ▸ Privacy & data ▸ Delete all history, and deleting the app removes everything.

On the way to your computer

When you scan the pairing QR code shown by tebchart.com/dictate, your phone and the browser perform an X25519 key exchange, derive a shared AES-256-GCM key (HKDF-SHA256), and every dictation message is encrypted with that key before it is sent. The browser's public key reaches the phone through the QR code — off the network — so the relay cannot substitute its own key.

On our relay

Our relay stores only:

• the ephemeral public keys used to set up the encrypted channel, and
• the encrypted message envelopes themselves.

It has no ability to read your dictation. Envelopes and pairing sessions expire automatically (pairing tokens within about 15 minutes; stored envelopes within about 20 minutes) and are then deleted. We keep no transcript, no audio, and no record tying a session to you.

IP addresses

To stop abuse, our relay reads the requesting IP address when a pairing session is created and uses it to rate-limit how many sessions a single address can start. The address is used for that check and is not stored in our application database.

Relay analytics

We record product-analytics events when a pairing session is created and when dictation messages are relayed. These events record that something happened and when; they never include your dictated text, which we cannot read.

Third-party components

Google ML Kit (on-device). Voice Form Fill (text recognition), Translate mode, and Interpreter run Google's ML Kit models on your device. Your photos, documents, and text are processed on the phone and are not uploaded for these features. ML Kit itself reports diagnostic information to Google: device manufacturer, model and OS version, our app's bundle identifier and version, a per-installation identifier that is not intended to identify you, timings, event types (for example that a model initialised or a detection ran), error codes, and — for Translate — the language pair you selected. Google documents this at developers.google.com/ml-kit/ios-data-disclosure. We cannot switch it off; if you prefer to avoid it, do not use Voice Form Fill, Translate mode, or Interpreter — everything else in tebDictate works without them.

WhisperKit model download (iOS, optional, Pro). If you turn on the optional Whisper accuracy engine, the app downloads a speech model (about 486 MB) once from Hugging Face. Model files come down; nothing about you goes up. The transcription itself runs entirely on your phone.

Apple and Google. Purchases and subscriptions are handled by the App Store or Google Play. We never see your payment details. Apple's or Google's own privacy policy governs that transaction.

What we do not do

• We do not track you across apps or websites, and we do not use Apple's App Tracking Transparency permission because we do not track.
• We do not show advertising.
• We do not sell, rent, or share your data with data brokers.
• We do not use anything you dictate to train any model.
• We do not knowingly collect information from children under 13.

Your choices and rights

Because there are no accounts, we hold no personal profile to export or delete. Everything tebDictate keeps about you is on your own phone and under your control:

• Delete all dictation history: Settings ▸ Privacy & data ▸ Delete all history.
• Revoke microphone, speech recognition, camera, or photo access at any time in your phone's Settings. The app keeps working; dictation-dependent features tell you what is switched off.
• Delete the app to remove everything it stored.

If you believe we hold information about you and want it deleted, or you want to exercise a right under the GDPR, UK GDPR, CCPA/CPRA, or another privacy law, write to privacy@tebiq.com and we will respond. In practice our answer is usually that we hold nothing that identifies you.

Security

Dictation in transit is protected by end-to-end encryption (X25519 key agreement, HKDF-SHA256 key derivation, AES-256-GCM with a fresh initialisation vector and a replay-resistant message counter). All network connections use HTTPS. Dictation history on the phone is encrypted at rest with AES-GCM under a key held in the device's secure keystore. No system is perfectly secure, and we make no guarantee that it is.

Changes

If we change this policy we will update the effective date above, and material changes will be described in the app's release notes.

Contact

TebScribe LLC — privacy@tebiq.com