Privacy Policy

Last updated: August 9, 2026

The short version

Tinta Voice is a standalone macOS app designed to be local-first. Audio processing and transcription run on your Mac. We do not collect, store, or transmit your audio, transcripts, or the text you create with Tinta Voice.

We collect only the personal data needed to sell, license, support, secure, and improve Tinta Voice.

Controller

The controller responsible for processing your personal data is:

Mikhail Kamaev - sole proprietor (preduzetnik)
Vojvode Stepe 249, 11010 Belgrade, Republic of Serbia
Email: [email protected]

Personal data we collect

• License and purchase data - your email address, order ID, product purchased, license key, and license status when you purchase or activate Tinta Voice.
• Payment and invoicing data - billing country, tax/VAT information, payment method details, receipts, and invoices are collected and processed by our Merchant of Record (Lemon Squeezy / Sold through Link, LLC, as applicable). We receive limited order metadata such as order ID, product purchased, country, tax status, customer email, and customer name from the order. We never see full card numbers.
• Support data - if you contact us, we process the email address, message content, order/license details, and any files or screenshots you choose to send.
• Crash and diagnostic data - when diagnostics are enabled in the app, Tinta Voice may send pseudonymized technical information such as macOS version, device model identifier, app version, stack traces, transcription model used, language setting, success/failure flag, and coarse error category. We do not collect audio, transcript text, clipboard content, filenames, full file paths, your name, email, or IP address as part of crash data. Crash reporting is provided by Sentry and is configured for the EU region (Frankfurt).
• Model download and update metadata - Tinta Voice may contact third-party download servers to download the speech recognition model and app updates. Those providers may receive standard HTTP metadata such as your IP address, user agent, request time, and requested file URL.
• Tinta Meetings inquiries - if you request early access by email, we process your email address and message as support data and use it only to contact you about Tinta Meetings.
• Website and purchase measurement data - on tinta.one we send only page views, download starts, contact clicks, purchase starts, completed purchases, and completed refunds. Website events contain the page name and, when relevant, a short action name or DMG version. Purchase and refund events contain only the USD amount. Every event also carries one short source label such as direct, organic, a campaign name, or an affiliate label. The browser sends website events to our own server endpoint, which validates every field before forwarding them to Amplitude Cloud's EU region. Cloudflare Web Analytics may separately collect page-load and Core Web Vitals performance metrics without browser storage or cross-page identity. We hash the Lemon Squeezy order identifier and do not send the customer name, email, raw order ID, license key, receipt URL, card data, audio, transcript content, dictated text, filenames, or key content to analytics.
• Affiliate referral data - when you visit tinta.one through a Lemon Squeezy affiliate link, we add the validated affiliate code to a relevant destination only when you choose that link, and pass it to the Lemon Squeezy checkout. We do not run Lemon Squeezy's affiliate tracking script or create an affiliate cookie on tinta.one.

What we do not collect

• Audio recordings
• Transcriptions or any text you create
• Personal information from your documents
• Advertising identifiers
• Behavioral advertising or cross-site tracking data
• Microphone or system audio streams

Purposes and legal bases for processing

• Purchase, license activation, and license verification - to deliver Tinta Voice, validate your license, provide receipts, and prevent abuse. Legal basis: performance of contract (Art. 6(1)(b) GDPR / UK GDPR).
• Payment, tax, and accounting - to comply with tax, accounting, and legal obligations. Legal basis: legal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f)).
• Crash and diagnostic reports - to maintain and improve the stability and security of Tinta Voice, fix bugs, and ensure compatibility. Legal basis: legitimate interest (Art. 6(1)(f)).
• Customer support - to answer your questions. Legal basis: performance of contract (Art. 6(1)(b)) or legitimate interest (Art. 6(1)(f)).
• Early-access inquiries - to respond when you email us about Tinta Meetings. Legal basis: consent (Art. 6(1)(a)) or legitimate interest where permitted by law.
• Website measurement and affiliate attribution - to understand which pages and source labels lead to downloads, contact, purchase starts, completed purchases, and refunds, and to credit affiliate referrals. Legal basis: legitimate interest (Art. 6(1)(f)).

Website scripts and cookies

The current website uses essential technology needed to serve and secure the site. Website measurement does not set analytics cookies or use local storage or session storage. A random page identifier exists only in memory until the page is closed or reloaded; it is not reused across pages. When you choose an internal link, one validated source label may be added to that destination so the source remains available after navigation; the site's original links stay clean and the label does not identify a person. Our Amplitude measurement does not create persistent person profiles, automatically capture interactions, record sessions, create heatmaps, collect mouse coordinates, capture form values, or collect performance and error traces. Cloudflare's separate Web Analytics beacon may collect page-load and Core Web Vitals performance metrics from browser performance APIs; Cloudflare states that the beacon does not use cookies or browser storage and does not retain the source IP for this measurement. Global Privacy Control and browser “Do Not Track” signals disable our Amplitude website measurement. For checkout links, we pass only the validated source label to Lemon Squeezy. Purchase and refund events are sent separately by our server after verifying Lemon Squeezy's signature and removing direct customer identifiers.

The Lemon Squeezy affiliate tracking script is not installed on tinta.one. If a validated affiliate code is already present in the page URL, we add it only when you choose a relevant internal link and pass it directly to the Lemon Squeezy-hosted checkout. Google Analytics, Umami, Google Signals, ads personalization, ad conversion tags, Amplitude's browser SDK, and session-replay tools are not installed.

Processors and recipients

We use a small number of specialized service providers to run Tinta:

• Lemon Squeezy / Sold through Link, LLC (United States) - acts as Merchant of Record for purchases. Handles payment processing, invoicing, tax/VAT collection, receipts, and license management. See Lemon Squeezy's privacy policy.
• Sentry (Functional Software, Inc.) (United States, with EU region used for Tinta Voice) - provides crash reporting and diagnostics. We configure Sentry to avoid collecting audio or transcript content. See Sentry's privacy policy.
• Hugging Face (United States / global CDN) - hosts the speech recognition model that Tinta Voice may download during setup or when you choose a model. See Hugging Face's privacy policy.
• Cloudflare (United States / global CDN) - may serve website files, downloads, update feeds, and related static assets, process standard HTTP metadata to deliver and secure those files, and provide cookieless Web Analytics page-performance metrics. See Cloudflare's privacy policy and RUM beacon documentation.
• Amplitude Cloud (EU region) - receives the limited, server-filtered website and privacy-filtered transaction events described above. We do not use Amplitude's browser SDK, identity storage, automatic interaction capture, or session replay. See Amplitude's privacy policy.

These providers may process personal data in the United States and other non-EU countries. Where required, transfers are based on an adequacy decision or on Standard Contractual Clauses approved by the European Commission, together with additional safeguards where necessary.

Retention

We keep your license and order data for as long as necessary to provide your license, comply with legal and tax obligations, prevent abuse, and resolve disputes. In practice this usually means up to 10 years after your last purchase, in line with applicable accounting and tax rules in the Republic of Serbia.

Crash and diagnostic data are retained by Sentry only for as long as needed to investigate and fix issues and are automatically deleted after 90 days.

Early-access requests sent by email are kept until Tinta Meetings launches, until you ask us to remove them, or until we decide not to continue that list.

Website and transaction analytics events are kept only while needed to measure the website, acquisition tests, purchases, and refunds, then deleted or aggregated.

Locally stored content, such as audio files you choose to transcribe and resulting transcript text, remains on your device until you delete it; we never store it on our servers.

Your rights

If GDPR or UK GDPR applies to you, you may have rights to access, rectify, erase, restrict, port, or object to processing of your personal data. To exercise rights, email [email protected]. We may need to verify your identity before responding.

You also have the right to lodge a complaint with a data protection authority, including your local EU supervisory authority, the UK Information Commissioner's Office, or the Serbian Commissioner for Information of Public Importance and Personal Data Protection.

Automated decision-making

Tinta does not use your personal data for automated decision-making or profiling that produces legal effects or similarly significant impacts on you within the meaning of Article 22 GDPR / UK GDPR.

AI models

Tinta Voice uses a Whisper-family speech recognition model optimized for Apple Silicon. Speech recognition runs locally on your Mac. Audio is not sent to OpenAI, Apple servers, or any cloud speech recognition service for transcription.

App privacy and tracking

Tinta Voice does not track you across other apps or websites and does not use advertising identifiers. Speech recognition runs locally on your Mac.

Other jurisdictions

Depending on where you live, you may have additional rights under local data protection laws, including Brazil's LGPD, Canada's PIPEDA, or Serbia's Personal Data Protection Act. We will honor those rights where applicable; please contact us at [email protected].

Changes to this policy

We may update this policy from time to time, for example to reflect new features, vendors, or legal requirements. When we do, we will update the "Last updated" date at the top and, where appropriate, notify you in the app or by email.

Contact

Questions about privacy? Email [email protected].