Your voicestays yours.

1. Who we are

Drop is made by [company legal name], [registered address], company registration number [number] (“we”, “us”). We are the data controller for the personal data described here. Questions about privacy: [email protected].

2. Your voice and your words

Your recordings

Your voice stays private. Your iPhone turns your speech into text, on the device when it can, otherwise through Apple’s speech service, like dictation. Drop never uploads your audio. Only the text is sent to sort it, and Drop’s server doesn’t keep it.

When Apple’s speech service is used, Apple processes the audio under its own privacy policy, in the same way as keyboard dictation. On Android, speech is turned into text by [Android speech service — confirm].

Your recordings and transcripts are saved in your Library on your device. You choose whether the audio is kept or deleted once it has been transcribed. [If Library sync or backup is offered, describe it here.]

Sorting your words

To split what you said into tasks, ideas and lists, the transcript text is sent over an encrypted connection to Drop’s server. Our server passes the text to [AI provider] to process it, returns the result to your phone, and does not store the text. [AI provider] processes it on our behalf under a data processing agreement and does not use it to train its models. [Confirm against the provider’s terms and retention period.]

3. Other information we handle

• Connected apps. When you connect Google Calendar, Notion, Apple Notes, Reminders or another service, Drop sends the items you approve to that service. From then on, that service’s own privacy policy applies. Access keys for these connections are stored securely on your device. [Confirm where tokens are stored.]
• Your account. Signing in with Apple or Google is optional. If you do, we receive your [name and email address] to link your subscription and settings across devices.
• Subscription and payments. Payments are handled by the App Store or Google Play. We never see your card details. We receive your subscription status, through [RevenueCat], to unlock Drop.
• Sort usage. We count how many sorts your account uses, so we can apply your free sorts, your monthly allowance and top-ups. We store the counts, not what you said.
• Diagnostics. [Crash reporting / analytics tool and what it collects — or state that none is used.]
• Messages to us. If you write to us through the contact form, we use your name, email and message only to answer you, and delete them when we’re done.

4. What we never do

• We never show ads. Drop is paid for by its subscribers.
• We never sell or rent your personal data.
• We never share your data with advertisers or data brokers.
• We never use your recordings or transcripts to profile you, or to train AI models.

5. Why we can process your data

We process your data to provide the service you signed up for (performance of a contract), to keep Drop secure and prevent abuse (our legitimate interest), and with your permission for the microphone, speech recognition and each app you connect (consent). You can withdraw a permission at any time in your phone’s settings or in Drop.

6. How long we keep it

• Transcript text sent for sorting: not stored on our server; it is deleted as soon as the result is returned.
• Recordings, transcripts and your Library: on your device, until you delete them or remove the app.
• Account and subscription details: while you have an account, then [period].
• Sort usage counts: [period].
• Messages sent through the contact form: until we’ve answered, and at most 90 days.
• Records we must keep by law: for the period the law requires.

7. Where your data is processed

Drop’s server runs in [region — e.g. the EU]. If a provider processes data outside the European Economic Area, we use safeguards approved by the European Commission, such as Standard Contractual Clauses. [List the transfer and the safeguard per provider.]

8. Your rights

You can ask to access, correct, delete or receive a copy of your personal data, object to or restrict how we process it, and withdraw consent. You can delete any recording, or everything, directly in Drop. For anything else, write to [email protected] and we’ll reply within one month.

You can also complain to a data protection authority — in Hungary, the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), or the authority in the country where you live.

9. Children

Drop is not meant for children under [16], and we don’t knowingly collect their data.

10. Security

Data is encrypted in transit, access to our systems is limited to the people who need it, and the text we sort is not stored. [Add any further measures.]

11. Changes to this policy

If we change this policy in a meaningful way, we’ll tell you in the app before the change applies. The date at the top always shows the latest version.

12. Contact

[Company legal name], [address]. Email: [email protected].