Privacy Policy

Last updated: May 22, 2026

The short version

Tinta Voice is a standalone macOS app designed to be local-first. Audio processing and transcription run on your Mac. We do not collect, store, or transmit your audio, transcripts, or the text you create with Tinta Voice.

We collect only the personal data needed to sell, license, support, secure, and improve Tinta Voice, and to run the optional Tinta Meetings early-access list.

Controller

The controller responsible for processing your personal data is:

Mikhail Kamaev - sole proprietor (preduzetnik)
Vojvode Stepe 249, 11010 Belgrade, Republic of Serbia
Email: [email protected]

Personal data we collect

• License and purchase data - your email address, order ID, product purchased, license key, and license status when you purchase or activate Tinta Voice.
• Payment and invoicing data - billing country, tax/VAT information, payment method details, receipts, and invoices are collected and processed by our Merchant of Record (Lemon Squeezy / Sold through Link, LLC, as applicable). We receive limited order metadata such as order ID, product purchased, country, tax status, customer email, and customer name from the order. We never see full card numbers.
• Support data - if you contact us, we process the email address, message content, order/license details, and any files or screenshots you choose to send.
• Crash and diagnostic data - when diagnostics are enabled in the app, Tinta Voice may send pseudonymized technical information such as macOS version, device model identifier, app version, stack traces, transcription model used, language setting, success/failure flag, and coarse error category. We do not collect audio, transcript text, clipboard content, filenames, full file paths, your name, email, or IP address as part of crash data. Crash reporting is provided by Sentry and is configured for the EU region (Frankfurt).
• Model download and update metadata - Tinta Voice may contact third-party download servers to download the speech recognition model and app updates. Those providers may receive standard HTTP metadata such as your IP address, user agent, request time, and requested file URL.
• Tinta Meetings early-access data - if you join the Tinta Meetings early-access list, we collect your email address and product interest. The form is stored in Supabase. We use this data only to contact you about Tinta Meetings.

What we do not collect

• Audio recordings
• Transcriptions or any text you create
• Personal information from your documents
• Advertising identifiers
• Behavioral advertising or cross-site tracking data
• Microphone or system audio streams

Purposes and legal bases for processing

• Purchase, license activation, and license verification - to deliver Tinta Voice, validate your license, provide receipts, and prevent abuse. Legal basis: performance of contract (Art. 6(1)(b) GDPR / UK GDPR).
• Payment, tax, and accounting - to comply with tax, accounting, and legal obligations. Legal basis: legal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f)).
• Crash and diagnostic reports - to maintain and improve the stability and security of Tinta Voice, fix bugs, and ensure compatibility. Legal basis: legitimate interest (Art. 6(1)(f)).
• Customer support - to answer your questions. Legal basis: performance of contract (Art. 6(1)(b)) or legitimate interest (Art. 6(1)(f)).
• Early-access list - to notify you about Tinta Meetings. Legal basis: consent (Art. 6(1)(a)) or legitimate interest where permitted by law.

Website scripts and cookies

The current website uses essential technology needed to serve and secure the site and to submit the Tinta Meetings early-access form. We use Umami Cloud for privacy-friendly, cookie-less aggregate page-view analytics; Umami does not use cookies, does not collect personal data, and does not track you across other sites. Google Analytics and Amplitude are not installed.

If additional website measurement is added later, we will update this policy before activation, describe the data collected, and implement any required consent flow. Google Signals, ads personalization, and ad conversion tags are not part of the current implementation.

Processors and recipients

We use a small number of specialized service providers to run Tinta:

• Lemon Squeezy / Sold through Link, LLC (United States) - acts as Merchant of Record for purchases. Handles payment processing, invoicing, tax/VAT collection, receipts, and license management. See Lemon Squeezy's privacy policy.
• Sentry (Functional Software, Inc.) (United States, with EU region used for Tinta Voice) - provides crash reporting and diagnostics. We configure Sentry to avoid collecting audio or transcript content. See Sentry's privacy policy.
• Hugging Face (United States / global CDN) - hosts the speech recognition model that Tinta Voice may download during setup or when you choose a model. See Hugging Face's privacy policy.
• Cloudflare (United States / global CDN) - may serve website files, downloads, update feeds, and related static assets, and may process standard HTTP metadata to deliver and secure those files. See Cloudflare's privacy policy.
• Supabase (United States / EU infrastructure depending on project configuration) - stores Tinta Meetings early-access email submissions. See Supabase's privacy policy.
• Umami Cloud (Umami Software, Inc.) - provides privacy-friendly, cookie-less aggregate page-view analytics for the website. Umami does not use cookies and does not collect personal data. See Umami's privacy policy.

These providers may process personal data in the United States and other non-EU countries. Where required, transfers are based on an adequacy decision or on Standard Contractual Clauses approved by the European Commission, together with additional safeguards where necessary.

Retention

We keep your license and order data for as long as necessary to provide your license, comply with legal and tax obligations, prevent abuse, and resolve disputes. In practice this usually means up to 10 years after your last purchase, in line with applicable accounting and tax rules in the Republic of Serbia.

Crash and diagnostic data are retained by Sentry only for as long as needed to investigate and fix issues and are automatically deleted after 90 days.

Early-access email addresses are kept until Tinta Meetings launches, until you ask us to remove them, or until we decide not to continue that list.

Locally stored content, such as audio files you choose to transcribe and resulting transcript text, remains on your device until you delete it; we never store it on our servers.

Your rights

If GDPR or UK GDPR applies to you, you may have rights to access, rectify, erase, restrict, port, or object to processing of your personal data. To exercise rights, email [email protected]. We may need to verify your identity before responding.

You also have the right to lodge a complaint with a data protection authority, including your local EU supervisory authority, the UK Information Commissioner's Office, or the Serbian Commissioner for Information of Public Importance and Personal Data Protection.

Automated decision-making

Tinta does not use your personal data for automated decision-making or profiling that produces legal effects or similarly significant impacts on you within the meaning of Article 22 GDPR / UK GDPR.

AI models

Tinta Voice uses a Whisper-family speech recognition model optimized for Apple Silicon. Speech recognition runs locally on your Mac. Audio is not sent to OpenAI, Apple servers, or any cloud speech recognition service for transcription.

App privacy and tracking

Tinta Voice does not track you across other apps or websites and does not use advertising identifiers. Speech recognition runs locally on your Mac.

Other jurisdictions

Depending on where you live, you may have additional rights under local data protection laws, including Brazil's LGPD, Canada's PIPEDA, or Serbia's Personal Data Protection Act. We will honor those rights where applicable; please contact us at [email protected].

Changes to this policy

We may update this policy from time to time, for example to reflect new features, vendors, or legal requirements. When we do, we will update the "Last updated" date at the top and, where appropriate, notify you in the app or by email.

Contact

Questions about privacy? Email [email protected].