Privacy Policy

Last updated: 5 November 2026

1. Who we are

Voxly is a voice dictation app for Windows ("Voxly", "we", "us"). This policy explains what information the Voxly app, the Voxly Cloud service and this website handle, and why. It applies to everyone who downloads or uses Voxly.

2. What we collect

Data	When	Where it goes
Account details: email address, a securely hashed password (if you use one), and your name and email from Google if you sign in with Google	When you create an account or sign in	Supabase (our account provider)
Usage counts: seconds of audio and number of corrections per day, linked to your account	Each time you use Voxly Cloud	Supabase, to apply fair daily limits
Audio recordings of what you dictate	Only while you hold or toggle the hotkey, and only with a cloud speech engine	Processed by Groq and returned as text. Not stored by Voxly
Text to correct: your transcript, your vocabulary hints, the writing style for the app you are in, and (if "Use what's on screen" is on) up to about 1,500 characters of visible text near your cursor	Only when an online AI engine corrects a dictation	Processed by the AI provider and returned. Not stored by Voxly
Selected text	Only when you click an action on the selection button (Fix grammar, Rephrase, Shorter, Professional)	Processed by the AI engine you chose

We do not collect your contacts, files, browsing history, keystrokes, or screenshots. Voxly never takes screenshots.

3. How engines handle your words

Voxly lets you choose where speech recognition and correction happen. You can change this at any time in Settings.

• Voxly Cloud (default when signed in). Your audio or text is sent over an encrypted connection (HTTPS) to a Voxly server function hosted on Supabase, which forwards it to Groq for processing and returns the result. The server checks your sign-in and records only usage counts. It does not save your audio or text.
• Your own API key (Groq or Google Gemini). If you add your own key, Voxly sends your audio or text directly from your PC to that provider under your own account and that provider's terms. Your key is stored on your PC.
• This PC (offline). Speech recognition (Whisper) and the optional offline AI run entirely on your computer. Nothing you say is sent over the internet. If you also use Ollama, it runs on your own machine.
• Automatic fallback. If an online engine fails or the internet drops, Voxly falls back to the engines on your PC.

Third-party providers process data under their own privacy terms. You can read Groq's privacy policy, Supabase's privacy policy and, if you use your own Gemini key, Google's privacy policy.

How Voxly picks a writing style

To format text for email, chat or documents, Voxly reads the program name, the website address (only up to the first "/", for example mail.google.com/mail) and the label of the box you are typing in. This happens on your PC in a few milliseconds. Only the style name and its instructions are sent to the AI, never the window title or full web address. You can turn this off under Dictation, then "Match the app you are typing in".

"Use what's on screen"

When this setting is on, Voxly reads the visible text near your cursor to recognise names and words you might say. It is kept in memory for one dictation only, never saved or logged, and sent to the online AI only as context for that correction. You can turn it off in Settings.

4. What stays on your PC

• Dictation history: your most recent 50 dictations, so you can copy or review them. You can turn history off in Settings.
• Vocabulary and Slack lingo: words you add, and anything learned from a Slack export you import. Slack exports are read on your PC and are not uploaded by Voxly. Only import messages you are authorised to use.
• Settings and API keys you enter.
• Diagnostic logs, stored in %APPDATA%\Noroze\VoiceType\logs. Logs record events, timings, sizes and errors. They never contain what you said or typed. Logs stay on your PC unless you choose to send them to us for support.
• Downloaded models for offline speech and AI.

Uninstalling Voxly and deleting that app data folder removes this data from your PC.

5. How we use data

• To turn your speech into text and correct it, which is the service you asked for.
• To run your account and keep you signed in.
• To apply fair daily usage limits and prevent abuse.
• To deliver app updates.
• To answer support requests you send us.

We do not sell personal data, use it for advertising, or use your dictations to train AI models. Where data protection laws require a legal basis, we rely on performing our agreement with you (providing the service), our legitimate interest in keeping the service secure and fair, and your consent where you give it (for example, signing in with Google).

6. Who we share it with

We share data only with service providers that help us run Voxly, and only as needed:

• Groq: speech recognition and AI correction for cloud engines.
• Supabase: accounts, sign-in, usage counts and the Voxly Cloud server function.
• Google: only if you choose Google sign-in or your own Gemini key.
• GitHub: hosts app updates and this website. When Voxly checks for or downloads an update, GitHub receives standard request information such as your IP address.
• Hugging Face: hosts the offline speech and AI models. When you download one, Hugging Face receives standard request information.

These providers may process data in countries other than yours, including the United States and Japan. We may also disclose information if required by law, or to protect the rights and safety of users or others.

7. How long we keep it

• Audio and text sent to the cloud engine are not stored by Voxly after the result is returned. Providers may keep request data briefly under their own policies, for example to prevent abuse.
• Account details are kept until you ask us to delete your account.
• Daily usage counts are kept with your account and deleted when your account is deleted.
• Data on your PC stays until you delete it or uninstall Voxly.

8. Your choices and rights

• Use the "This PC" engine to keep your voice and text off the internet.
• Turn off history, "Use what's on screen", app style matching, or the selection button in Settings.
• Sign out at any time.
• Ask us to access, correct, export or delete your account data by contacting us (see below). Depending on where you live, you may also have the right to object to or restrict processing and to complain to your local data protection authority.

9. Security

Data sent between Voxly and online services is encrypted with HTTPS. The Groq key used by Voxly Cloud is stored as a server secret and is never shipped inside the app. Passwords are handled by Supabase Auth and are not visible to us. No system is perfectly secure, so please use a strong, unique password.

10. Children

Voxly is not intended for children under 13 (or the minimum age required in your country), and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

11. This website

This website does not use cookies, analytics or advertising trackers. It is hosted on GitHub Pages, which may log standard request information such as IP addresses for security. The page asks GitHub for the latest Voxly version number so the download button points to the newest installer.

12. Changes and contact

We may update this policy as Voxly changes. We will change the "Last updated" date above, and for significant changes we will let you know in the app or on this site.

Questions, data requests or concerns: please email the Voxly team (our support address will be listed here shortly).