Privacy Policy

VoisIT Keyboard

Last Updated: February 12, 2026 | Effective Date: February 12, 2026

Introduction

iSolveIT (“we”, “our”, or “us”), established in the Faroe Islands, is the data controller responsible for the processing of your personal data in connection with VoisIT Keyboard (“the App”). We are committed to protecting your privacy and processing your personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Danish Data Protection Act, applicable Faroese legislation, and other relevant data protection laws.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, who we share it with, and what rights you have. This Privacy Policy forms an integral part of our Terms of Service available at https://voisit.fo/keyboard-terms. By downloading, installing, or using the App, you acknowledge that you have read and understood this Privacy Policy.

Please read this Privacy Policy carefully. If you do not agree with our data practices as described herein, you should not use the App.

1. Data Controller and Contact Information

The data controller for the purposes of the GDPR and other applicable data protection laws is:

iSolveIT

Faroe Islands

Email: support@voisit.fo

Website: https://voisit.fo

If you have any questions about this Privacy Policy or our data practices, or if you wish to exercise any of your data protection rights, please contact us at the details above. We will respond to privacy-related inquiries within 30 days.

2. Legal Bases for Processing

Under the GDPR, we must have a valid legal basis for each type of data processing we perform. The legal bases we rely upon are:

2.1 Performance of a Contract (Article 6(1)(b) GDPR)

Processing your audio data for transcription and delivering the core functionality of the App is necessary for the performance of the contract between you and iSolveIT (i.e., our Terms of Service). Without this processing, we cannot provide the transcription service.

2.2 Consent (Article 6(1)(a) GDPR)

Where we process your data based on consent (e.g., sending transcribed text to OpenAI GPT-4o for optional text improvement), you may withdraw your consent at any time by disabling the relevant feature in the App settings. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

2.3 Legitimate Interest (Article 6(1)(f) GDPR)

We process certain data (such as anonymous usage statistics, crash reports, and device information) based on our legitimate interest in improving the App, ensuring security, and resolving technical issues. We have conducted a balancing test and determined that these interests do not override your fundamental rights and freedoms, particularly as this data is anonymized and/or aggregated and cannot be used to identify you.

2.4 Legal Obligation (Article 6(1)(c) GDPR)

We may process and retain certain data where required to comply with a legal obligation, such as responding to lawful requests from public authorities or retaining records for tax and accounting purposes.

3. Information We Collect

3.1 Audio Data

What: Voice recordings captured when you actively use the dictation feature.
Purpose: To transcribe your speech to text via the OpenAI Whisper API.
Retention: Audio is transmitted to OpenAI servers, processed, and the audio file is not permanently stored by us. OpenAI may retain audio data for up to 30 days for abuse and misuse monitoring purposes in accordance with their data retention policies.
Legal basis: Contract performance.
Important: Audio is only recorded when you actively initiate dictation. The App does not record audio passively, in the background, or when the dictation feature is not in use.

3.2 Transcribed Text

What: The text output generated from your voice recordings.
Purpose: To provide the transcription service; optionally, to improve text quality via OpenAI GPT-4o.
Retention: Stored locally on your device until you choose to delete it. If text improvement is enabled, text is temporarily sent to OpenAI for processing.
Legal basis: Contract performance (transcription); Consent (text improvement).

3.3 Subscription Information

What: Subscription status (active/inactive/expired), product identifier, subscription period.
Purpose: To verify your subscription and enable/disable premium features.
Retention: Duration of your subscription plus 1 year for record-keeping.
Legal basis: Contract performance.
Note: All payment processing is handled exclusively by Apple. We never receive, access, process, or store your payment card details, billing address, or other financial information.

3.4 Usage Statistics (Anonymous and Aggregated)

What: Number of transcriptions performed, word count statistics, feature usage patterns, session duration.
Purpose: To understand usage patterns, improve the App, and guide feature development.
Retention: Indefinitely, in anonymized and aggregated form only.
Legal basis: Legitimate interest.
Important: This data is fully anonymized at the point of collection and cannot be linked back to you or your device. Anonymized data is not considered personal data under the GDPR.

3.5 Device and Technical Information

What: iOS version, device model, App version, keyboard language settings, general locale.
Purpose: To ensure compatibility, optimize performance, and diagnose technical issues.
Retention: For the duration of your use of the App; aggregated in anonymous analytics.
Legal basis: Legitimate interest.

3.6 Crash and Error Reports

What: Diagnostic data related to App crashes or errors, collected via Apple’s crash reporting infrastructure.
Purpose: To identify and fix bugs and improve App stability.
Retention: 90 days.
Legal basis: Legitimate interest.
Note: Crash reports are provided through Apple and are subject to Apple’s privacy practices. You can opt out of sharing crash data with developers through your iOS device settings.

3.7 Information We Do NOT Collect

For clarity, we do not collect:

Your name, email address, or contact information (unless you contact us for support)
Location data or GPS coordinates
Contacts, photos, or other personal files on your device
Browsing history or activity outside the App
Keystrokes typed outside of the dictation feature
Advertising identifiers or cross-app tracking data
Biometric data

4. How We Use Your Information

4.1 Core Service Delivery

Processing your audio recordings to generate text transcriptions.
Optionally improving transcription quality via AI text enhancement.
Verifying your subscription status and enabling premium features.
Storing transcription history locally on your device.

4.2 Service Improvement and Analytics

Analyzing anonymized usage patterns to understand how the App is used.
Identifying and resolving bugs, crashes, and technical issues.
Developing new features and improving existing functionality.
Monitoring service performance and reliability.

4.3 Communications

Responding to your support inquiries and requests.
Notifying you of material changes to the App, Terms of Service, or this Privacy Policy.
Providing service-related notices (e.g., maintenance schedules, outages).

We do not use your information for marketing, advertising, profiling, automated decision-making, or any purpose not described in this Privacy Policy.

5. Data Sharing and Third Parties

We share your personal data only with the third parties described below, and only to the extent necessary for the purposes set forth in this Privacy Policy.

5.1 OpenAI (Whisper API and GPT-4o)

Data shared: Audio recordings (for transcription); transcribed text (for optional text improvement).
Purpose: To perform speech-to-text transcription and AI-powered text enhancement.
Their privacy policy: https://openai.com/privacy
Data retention by OpenAI: OpenAI may retain API input data for up to 30 days for abuse and misuse monitoring, after which it is deleted. OpenAI states that API data is not used to train their models. However, OpenAI’s practices are governed by their own policies, which may change over time.
Relationship: OpenAI acts as a data processor on our behalf for the purpose of providing transcription and text improvement services.

Important disclaimer: While we have selected OpenAI as our processing partner based on their stated privacy and security practices, we cannot guarantee or assume responsibility for OpenAI’s actual data handling, security measures, or compliance with their stated policies. Your audio and text data, once transmitted to OpenAI, is subject to OpenAI’s own privacy policy and data practices, which are outside our direct control. We encourage you to review OpenAI’s privacy policy independently.

5.2 Apple Inc.

Data shared: We do not directly share personal data with Apple. Apple manages subscription payments and crash reporting through its own systems.
Purpose: Subscription and payment management; crash diagnostics.
Their privacy policy: https://www.apple.com/legal/privacy
Data access: We receive only subscription status information (active/inactive/expired) from Apple. We never receive your payment details.

5.3 Parties We Do NOT Share Data With

We do not sell, rent, lease, trade, or otherwise share your personal data with:

Advertisers or advertising networks
Data brokers or data resellers
Social media platforms
Marketing or analytics companies (beyond anonymized, aggregated analytics)
Any other third parties not explicitly listed in this Privacy Policy

We do not sell your personal data. We have not sold personal data in the preceding 12 months and have no plans to do so.

5.4 Legal and Regulatory Disclosures

We may disclose your personal data if we believe in good faith that such disclosure is necessary to:

Comply with a legal obligation, court order, subpoena, or other legal process.
Respond to lawful requests from government authorities, including law enforcement.
Protect and defend the rights, property, or safety of iSolveIT, our users, or the public.
Investigate or prevent suspected fraud, security incidents, or violations of our Terms of Service.

Where permitted by law, we will make reasonable efforts to notify you before disclosing your personal data in response to legal process, unless doing so is prohibited by law or would jeopardize an investigation.

5.5 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, asset sale, or similar business transaction involving iSolveIT, your personal data may be transferred as part of that transaction. We will notify you via the App or email of any change in data controller and any changes to this Privacy Policy resulting from such a transaction.

6. International Data Transfers

Your personal data may be transferred to, and processed in, countries other than the country in which you reside. Specifically:

Destination	Purpose	Recipient	Safeguard
Faroe Islands / Denmark	App operation and management	iSolveIT	Adequacy (EEA territory)
United States	Speech-to-text transcription, text improvement	OpenAI	Standard Contractual Clauses (SCCs); DPF where applicable
United States / Ireland	Payment processing, subscription management	Apple Inc.	SCCs; Apple’s data processing terms

Where personal data is transferred outside the European Economic Area (EEA) or a country with an adequate level of data protection, we ensure that appropriate safeguards are in place as required by the GDPR, including Standard Contractual Clauses adopted by the European Commission, adequacy decisions, or other approved transfer mechanisms.

Acknowledgment of risk: Despite the safeguards described above, you acknowledge that data transfers to the United States or other jurisdictions may involve a different level of data protection compared to your home jurisdiction. By using the App, you consent to such transfers as described in this Privacy Policy. We cannot guarantee that foreign governments will not access data processed in their jurisdiction.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The specific retention periods for each type of data are set out below:

Data Type	Retention Period	Storage Location	Legal Basis
Audio recordings	Deleted immediately after transcription (seconds/minutes)	Amazon servers (in transit)	Contract performance
Transcribed text	Until you delete it	Your device only	Contract performance
Text sent to GPT-4o	Deleted after processing; OpenAI may retain up to 30 days	OpenAI servers	Consent
Usage statistics	Indefinitely (anonymized/aggregated)	Our analytics systems	Legitimate interest
Subscription info	Duration of subscription + 1 year	Apple servers	Contract performance
Support inquiries	2 years from resolution	Our email/support systems	Legitimate interest
Crash/error logs	90 days	Apple servers	Legitimate interest

When personal data is no longer necessary for the purposes described above, or upon your valid request for deletion, we will securely delete or anonymize such data. Where deletion of specific data is technically impracticable (e.g., data in backups), we will ensure that such data is securely isolated and protected from further processing until deletion becomes feasible.

Third-party retention: Please note that third-party service providers (including OpenAI and Apple) maintain their own data retention schedules, which are governed by their respective privacy policies and are outside our direct control.

8. Data Storage and Security

8.1 Technical Security Measures

All data transmitted between the App and our servers or third-party APIs is encrypted in transit using HTTPS/TLS protocols.
Transcription data stored locally on your device is protected by iOS platform security, including hardware encryption and secure enclave technology.
We use secure, authenticated API connections for all communications with OpenAI.
We implement access controls limiting access to personal data to authorized personnel only.

8.2 iOS App Group Data

The App uses iOS App Groups to share data between the main application and the keyboard extension. This data remains stored locally on your device within iOS’s secure sandboxed environment and is not transmitted to external servers except as described in this Privacy Policy.

8.3 iCloud Backup

If you have iCloud Backup enabled on your device, your transcription history stored within the App may be included in your device backup. This backup is managed by Apple and subject to Apple’s privacy policy. You can exclude the App from iCloud Backup in your device settings.

8.4 Security Limitations

No method of electronic transmission or storage is 100% secure. While we implement commercially reasonable technical and organizational measures to protect your personal data, we cannot guarantee absolute security. We cannot guarantee the security of data transmitted to or stored by third-party service providers. You acknowledge that you provide your personal data at your own risk, and we are not responsible for any circumvention of privacy settings or security measures contained in the App or on your device.

9. Your Data Protection Rights

Under the GDPR and other applicable data protection laws, you have the following rights with respect to your personal data. These rights are not absolute and may be subject to conditions or limitations under applicable law.

9.1 Right of Access (Article 15 GDPR)

You have the right to request confirmation of whether we process your personal data, and if so, to obtain a copy of that data along with information about how it is processed.

9.2 Right to Rectification (Article 16 GDPR)

You have the right to request correction of inaccurate personal data and, where relevant, to have incomplete personal data completed.

9.3 Right to Erasure (Article 17 GDPR)

You have the right to request deletion of your personal data, subject to certain exceptions (e.g., where we are required to retain data for legal compliance). You can delete transcription history directly within the App. To request erasure of any other data, contact us at support@voisit.fo.

9.4 Right to Restriction of Processing (Article 18 GDPR)

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or have objected to processing.

9.5 Right to Data Portability (Article 20 GDPR)

Where processing is based on consent or contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

9.6 Right to Object (Article 21 GDPR)

You have the right to object to processing of your personal data based on legitimate interest. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

9.7 Right to Withdraw Consent (Article 7(3) GDPR)

Where processing is based on your consent, you may withdraw consent at any time by disabling the relevant feature in the App settings or by contacting us. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

9.8 Right to Lodge a Complaint

If you believe that our processing of your personal data violates your rights under the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement. The relevant supervisory authority for the Faroe Islands is the Datatilsynet (Danish Data Protection Agency), which can be contacted at https://www.datatilsynet.dk.

9.9 Exercising Your Rights

To exercise any of the above rights, contact us at support@voisit.fo. We may need to verify your identity before processing your request. We will respond to valid requests within 30 days, or within such longer period as permitted by applicable law (in which case we will inform you of the extension and the reasons). There is generally no fee for exercising your rights, but we may charge a reasonable fee for manifestly unfounded or excessive requests.

10. Children’s Privacy

The App is not directed to, and is not intended for use by, children under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children under 16. If we become aware that we have inadvertently collected personal data from a child under 16, we will take reasonable steps to delete such data promptly. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us immediately at support@voisit.fo so that we can take appropriate action.

11. Cookies, Tracking, and Automated Decision-Making

11.1 No Cookies or Trackers

The App does not use:

Cookies or similar tracking technologies
Third-party analytics SDKs (other than Apple’s built-in crash reporting)
Advertising identifiers (IDFA) or advertising SDKs
Cross-app or cross-site tracking
Fingerprinting techniques

11.2 No Automated Decision-Making or Profiling

We do not engage in automated decision-making or profiling that produces legal effects or similarly significantly affects you. The AI processing performed by OpenAI is used solely for transcription and optional text improvement, and does not involve decisions about you as an individual.

12. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights:

12.1 Right to Know

You may request information about the categories and specific pieces of personal information we have collected, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share personal information.

12.2 Right to Delete

You may request deletion of personal information we have collected from you, subject to certain legal exceptions.

12.3 Right to Correct

You may request correction of inaccurate personal information.

12.4 Right to Opt-Out of Sale or Sharing

We do not sell or share (as defined by the CCPA/CPRA) your personal information. We have not sold or shared personal information in the preceding 12 months.

12.5 Right to Limit Use of Sensitive Personal Information

We do not process sensitive personal information for purposes that would trigger the right to limit under the CPRA.

12.6 Non-Discrimination

We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you services, charge you different prices, provide a different level of service, or suggest any of the foregoing in response to your exercise of these rights.

To submit a request under the CCPA/CPRA, contact us at support@voisit.fo. We will verify your identity before processing requests and will respond within 45 days (extendable by an additional 45 days where reasonably necessary).

13. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

Notify the competent supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach, as required by Article 33 GDPR.
Where the breach is likely to result in a high risk to your rights and freedoms, notify affected individuals without undue delay, as required by Article 34 GDPR.
Document the breach, its effects, and the remedial actions taken in our internal breach register.

Limitation: We can only notify you of breaches that we become aware of and that involve data under our direct control. We are not responsible for, and may not be notified of, breaches that occur within the systems of third-party service providers (including OpenAI and Apple). Such providers are responsible for their own breach notification obligations.

14. Data Protection Impact Assessment

Given that the App involves the processing of audio recordings (which may contain sensitive information depending on the content of speech), we have conducted a Data Protection Impact Assessment (DPIA) as required by Article 35 GDPR. The DPIA concluded that, with the safeguards described in this Privacy Policy, the processing does not result in a high risk to the rights and freedoms of data subjects. A summary of the DPIA is available upon request to the relevant supervisory authority.

15. Disclaimer Regarding Content of Audio Recordings

You are solely responsible for the content of the audio you record using the App. The App is a general-purpose transcription tool. Your audio recordings may incidentally contain sensitive personal data (such as health information, political opinions, religious beliefs, or other special categories of data as defined by Article 9 GDPR) depending on what you choose to dictate. We do not intentionally collect or process special category data. By using the dictation feature, you acknowledge that you are responsible for ensuring that your use of the App, including the content of your recordings, complies with all applicable laws regarding privacy, consent, and data protection. We disclaim all liability for any claims arising from the content of your recordings.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. If we make material changes, we will notify you by posting the updated Privacy Policy in the App and, where appropriate, by providing additional notice (such as an in-app notification) at least 30 days before the changes take effect. We encourage you to review this Privacy Policy periodically. Your continued use of the App after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated Privacy Policy, you must stop using the App and delete it from your device. The current version of this Privacy Policy is always available at https://voisit.fo/privacy.

17. Your Choices and How to Minimize Data Collection

Disable text improvement: Turn off the GPT-4o text enhancement feature in App settings to prevent transcribed text from being sent to OpenAI for improvement.
Delete transcription history: Regularly delete your transcription history within the App.
Disable crash reporting: Opt out of sharing analytics and crash data with developers in your iOS Settings > Privacy & Security > Analytics & Improvements.
Manage iCloud Backup: Exclude the App from iCloud Backup in your device settings to prevent transcription data from being backed up.
Stop using the service: Cancel your subscription, delete the App, and contact us at support@voisit.fo to request deletion of any server-side data.

18. Supervisory Authority

If you are located in the European Economic Area, the Faroe Islands, or Denmark, and you believe we have infringed your data protection rights, you have the right to lodge a complaint with a supervisory authority. The lead supervisory authority for iSolveIT is:

Datatilsynet (Danish Data Protection Agency)

Website: https://www.datatilsynet.dk

Email: dt@datatilsynet.dk

You may also contact your local data protection authority in the EU/EEA Member State of your habitual residence or place of work.

19. Summary

What we collect and why:

Audio recordings: temporarily processed for transcription, then deleted.
Transcribed text: stored locally on your device; optionally sent to OpenAI for improvement.
Anonymous usage statistics: to improve the App.
Subscription status: to manage your access.

What we do NOT do:

We do not permanently store your audio recordings.
We do not sell, rent, or trade your personal data.
We do not use advertising, tracking, or profiling.
We do not collect data beyond what is necessary for the service.

Your control:

You own your transcriptions and can delete them at any time.
You can disable optional features (text improvement) to minimize data sharing.
You have full GDPR rights including access, deletion, portability, and objection.
You can cancel your subscription and delete the App at any time.

———

By using VoisIT Keyboard, you acknowledge that you have read and understood this Privacy Policy.