1. Controller
Wizard Dynamics eGbR, Wieselweg 6, 85540 Haar, Germany. Represented by Deyar Zakir. Email: kontakt@wizarddynamics.com.
2. Core principle: local processing
Dictum transcribes your speech entirely locally on your device (Whisper, Apple Silicon Metal backend). Audio recordings are held only transiently in memory, discarded immediately after transcription, and never transmitted to us or any third party. No cloud-based speech recognition takes place.
3. Optional AI cleanup (text transmission)
If you enable the optional "AI cleanup" feature, the transcribed text (not the audio) is sent for linguistic refinement to a processor: Anthropic PBC, San Francisco, USA, technically routed through a proxy we operate at Cloudflare, Inc. The transfer is encrypted. Anthropic processes the content solely to provide the cleanup and, under its commercial terms, does not use it to train models.
The legal basis is Art. 6 (1) (b) and (f) GDPR. The transfer to the USA is safeguarded by the EU Standard Contractual Clauses. The feature is optional and can be disabled in settings at any time; without it, no text leaves your device.
Note for professionals bound by confidentiality. If you are subject to legal, medical or other professional secrecy (§ 203 German Criminal Code), note that enabling AI cleanup transmits content to a provider in the USA. Verify admissibility beforehand or keep the feature disabled. Local transcription is not affected.
4. Account and sign-in
For the trial and subscription you create an account via an emailed sign-in link. Your email address is processed. The authentication service is Supabase, Inc. Legal basis: Art. 6 (1) (b) GDPR. Where processing occurs outside the EU, it is safeguarded by Standard Contractual Clauses.
5. Payment processing
Payments are processed via Stripe (Stripe Payments Europe Ltd., Ireland; Stripe, Inc., USA). Name, billing address, VAT ID where applicable, and payment data are processed. Full card details are handled exclusively by Stripe; we do not receive them. Legal basis: Art. 6 (1) (b) GDPR.
6. Website hosting
This website is hosted by Vercel Inc. (USA). On access, technically necessary server log data (including IP address, time, requested resource) are processed. Legal basis: Art. 6 (1) (f) GDPR; the transfer is safeguarded by Standard Contractual Clauses.
7. Analytics
We use Plausible Analytics, a cookie-free, privacy-friendly statistics tool hosted in the EU. No personal profiles are created and no cross-device tracking takes place. Legal basis: Art. 6 (1) (f) GDPR.
8. Updates
The app checks for updates at launch and downloads them from GitHub (GitHub, Inc., USA). Your IP address is transmitted in the process. Legal basis: Art. 6 (1) (f) GDPR.
9. Local logs
Diagnostic logs of the app are stored only locally on your device and are not transmitted to us.
10. Retention
Account and billing data are stored for the duration of the contractual relationship and within statutory retention obligations (up to ten years under commercial and tax law). Audio and transcripts are not stored permanently, as described above.
11. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). To exercise them, contact the address above.
You also have the right to lodge a complaint with a supervisory authority, e.g. the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
This English text is a convenience translation. In case of doubt, the German version prevails.