Privacy Policy
Draft. This policy will be finalised before paid subscriptions open.
The short version
- Speech recognition runs entirely on your computer. Audio recordings of your voice never leave your device.
- When cloud formatting or translation is on, the recognized text is sent to an AI provider to process it. Our server does not save the text and does not write it to logs.
- In Offline mode, none of your text leaves your computer.
- We do not sell your data and do not use it for advertising.
1. Who is responsible
The controller of your personal data is Andrei Ulianov, a sole trader in Lisbon, Portugal. For any privacy question or request, write to support@poemaapp.com.
2. What we collect and why
- Account. Your email address and name. If you sign in with Google, we receive your name, email address and profile picture from Google. We use them to create your account and sign you in.
- Computers. An identifier and the name of each computer where you use Poema, so that you can use up to two computers and unlink one.
- Subscription. Whether your trial or subscription is active, its dates, your country and the price you pay. Payment details, such as your card, are handled by Link and Stripe. We never see your card number.
- Dictated text, only when cloud features are on. The recognized text of a dictation and the dictionary terms that appear in it, to format or translate it and send the result back to your computer.
- Usage counts. How much cloud processing your account has used this month, to apply the fair-use limit. This is a number, not your text.
- Technical data. For security, our server keeps request time, IP address and errors for up to 7 days, without the text.
Your dictation history, your dictionary and your settings are stored only on your computer.
3. Legal bases
- Providing the Service you asked for, including your account, subscription and cloud processing: performance of a contract (GDPR Art. 6(1)(b)).
- Keeping the Service secure and preventing abuse: our legitimate interest (Art. 6(1)(f)).
- Keeping billing records: legal obligation (Art. 6(1)(c)).
You have to give us an email address to have an account. Everything else is optional or needed only for the features you use. We do not make automated decisions that have legal or similarly significant effects on you.
4. Who receives data
- AI language model providers process the dictated text for cloud formatting and translation, on our behalf. Under their contracts with us, they may keep the text for up to 30 days solely to detect abuse, then delete it. They do not use it to train their models.
- Hosting provider (Cloudflare) runs our server and this website, on our behalf.
- Link and Stripe sell the subscription and process payments. They act as independent controllers under their own privacy policy: stripe.com/privacy.
- Google, if you choose to sign in with Google.
- Email delivery provider, to send sign-in links and messages about your subscription.
We share data only as described here, or when the law requires it.
5. International transfers
Some of these providers process data in the United States. Transfers rely on the EU-US Data Privacy Framework or on the European Commission’s Standard Contractual Clauses. Our AI providers process data in the EU and the US.
6. Google user data
If you sign in with Google, we request only your basic profile: name, email address and profile picture. We use them only to create your account, sign you in and contact you about your account. We do not use Google user data for advertising, do not sell it, and do not share it with anyone except the processors listed above. Poema’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
7. How long we keep data
- Dictated text: not stored on our server. AI providers may keep it for up to 30 days, as described above.
- Technical data: up to 7 days.
- Account, computers and subscription: while your account exists. When you delete your account, we delete this data within 30 days.
- Billing records: as long as tax law requires.
8. Cookies
This website uses only cookies that are strictly necessary to sign you in to your account. We do not use analytics or advertising cookies.
9. Your rights
You can ask us to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format. Write to support@poemaapp.com. You can also complain to the Portuguese data protection authority, CNPD (cnpd.pt), or to the authority in your country.
10. Children
Poema is not meant for anyone under 18, and we do not knowingly collect data from children.
11. Changes
If we change this policy in a way that matters, we will tell you by email before the change takes effect.