Privacy Policy
Effective date: 8 November 2026
Last updated: 8 November 2026
1. Who we are
Voicelit is made and operated by Onner Tech Company Limited ("Onner", "we", "us").
- Registered address: 41/28 Soi Vibhavadi Rangsit39, Don Mueang 10210, Thailand
- Contact for privacy questions and requests: onnertech@gmail.com
This policy covers the Voicelit apps for iPhone, Android, Mac and Windows, and the Voicelit service behind them.
2. The short version
- Your recordings stay on your device. Audio leaves your device only to be turned into text, and it is never synced.
- To turn speech into text and to write minutes, Voicelit sends your audio and text to AI model providers through our servers. They do not train on your content. They may keep it for up to 30 days under their own terms.
- If you turn on sync, your notes, transcripts, minutes and to-dos are end-to-end encrypted on your device before upload. Onner stores only ciphertext it cannot read.
- Onner can see your account email and name, your device names, how much you use the AI features, and basic facts about synced data such as its size and times (section 6).
- If you belong to a company, its admins can see your name, email, role and when you last used Voicelit. They never see your content.
- You can delete your account in the app at any time, or on the web. Section 11 says what is removed and what stays.
- We do not show ads, we do not sell your data, and we do not track you across other companies' apps or websites.
3. What we collect, and why
| What | Examples | Why | Where it lives |
|---|---|---|---|
| Account | Email address, name (from Google or Apple sign-in), which sign-in method you used | To create and secure your account | Our server |
| Devices | The device name (often a person's name or a computer name), platform, when it last connected | To keep your sessions and sync working, and to let you remove a device | Our server |
| Usage records | For each AI request: your account and device, the kind of request, the model, token counts, audio seconds, cost, how long it took, when. No content | To enforce usage limits, bill, and run the service | Our server |
| Synced content | Notes, transcripts, minutes, to-dos, speaker names, dictionary, writing styles, voice recognition data (section 7), and optionally dictation history | Only if you turn on sync | Our server, encrypted so we cannot read it |
| Sync metadata | The kind of item, its size, when it changed, whether it is deleted, plus encrypted keys | To make sync work | Our server |
| Content sent for AI processing | Audio you dictate or record, text of transcripts and notes, dictionary terms, and calendar event titles, attendee names and attendee emails where they help name speakers | To turn speech into text and to write cleanup, minutes, translation and speaker names | In transit through our server, then at the AI providers (section 5). We do not store it |
| Calendar | Events on your phone or computer calendar, and Google Calendar events if you connect Google | To show upcoming meetings and name recordings | Read on your device. Calendar events are not stored on our servers in readable form |
| Account deletion requests | The email address you enter and an optional note, if you use the web form | To confirm and carry out the deletion | Our server |
| Technical logs | Time, route, status and timing of each request; no IP address (section 9) | To run and secure the service | Our service logs, 30 days |
We do not collect your location, contacts or photos, and the app does not read an advertising identifier. The camera is used only to scan a QR code that links another of your devices; the image is not stored or sent.
The Voicelit apps contain no analytics or crash-reporting service that sends data. The mobile crash reporter is switched off in code. The desktop apps carry no analytics or crash-reporting library, and the usage summary they show (word counts and dates) is kept on your device only.
4. Your recordings and your device
- Recordings of dictation and meetings are stored only on your device. They are never synced to your other devices and never stored on our servers.
- To get the text, the app sends the audio to our server, which passes it straight on to a speech-to-text provider (section 5). That is the only time audio leaves your device.
- You can delete a recording at any time. Removing the app removes what it stored on that device.
- Notes, transcripts and minutes that you do not sync stay on your device only.
- Backups. Backups of Voicelit follow your phone's or computer's own backup settings. On iPhone, your notes and recordings can be part of your iCloud or computer backup, and Apple's Advanced Data Protection makes iCloud backups end-to-end encrypted. On Android, Voicelit's notes and recordings are left out of Google backups and device transfers. On Mac, the search index is left out of Time Machine.
5. AI providers
Voicelit does not run its own AI models. To work, it sends your content to AI providers:
- Your device sends the request to the Voicelit server (our gateway, hosted on Google Cloud in Bangkok).
- The gateway sends it on through OpenRouter, a routing service.
- OpenRouter passes it to the company that runs the model chosen for that job. We choose the models; you do not pick one, and the models and providers change over time. They have included Anthropic, Google, Microsoft, DeepSeek, OpenAI and ElevenLabs.
What is sent: the audio you dictate or record (for transcription), and the text each job needs: cleanup, minutes, translation, speaker naming, writing styles. Calendar event titles and attendee names or emails can be included where they help name speakers. We do not send your whole notes library.
What the providers may do:
- They do not train on your content. Every request carries a setting that forbids training, and the app cannot change it.
- They may keep your content for up to 30 days under their own terms (for example, for abuse monitoring). We cannot make them delete it sooner. There is no option to turn this off for any customer, including companies.
What we do: our server reads a request while passing it on, but it does not write the content of requests or answers to its logs, and it does not store them.
We ask for your consent before the first AI request, and you can withdraw it in the app. Without it Voicelit cannot dictate or write minutes.
6. Sync, and what Onner can and cannot read
Sync is off until you turn it on. When it is on, your content is encrypted on your device, with keys that only your own devices hold, before anything is uploaded. This is called end-to-end encryption.
What Onner cannot read: the content of your notes, transcripts, minutes, to-dos, speaker names, dictionary, writing styles, dictation history and voice recognition data. Neither can your company. If you lose all your devices and your recovery key, we cannot recover your content, and neither can a company admin.
What Onner can see:
- your account email and name;
- your device names and platforms, and when each last connected;
- usage records (section 3): counts, models, cost, timing, never content;
- sync metadata: the kind of item (for example "note" or "to-do"), its size, when it was added or changed, whether it is deleted, and the encrypted key material;
- a keyed hash of your IP address, not the address itself, in our records of account actions (section 9).
The database and its backups use the cloud provider's standard disk encryption. We do not add a second layer to the data we can read (account details and usage records).
7. Voice recognition (speaker voices)
Voicelit can learn voices so that later meetings name speakers automatically. When you confirm who a speaker is, Voicelit saves a numeric voice profile and short voice samples for that person, whether that is you, a colleague or a guest.
- They are stored on your device. If you turn on sync, they are synced end-to-end encrypted between your own devices only. Onner and your company cannot read them, and no other account receives them.
- It is on by default. You can switch it off in one tap in the Speakers panel, and you can delete any saved voice at any time. A voice that goes unmatched for 12 months is deleted everywhere.
- A company admin can switch voice recognition off for the company.
- Please tell people you record, and follow the law and your workplace rules.
8. Companies
If you sign in with an email address that belongs to a company that uses Voicelit, you join that company. An account belongs to at most one company, and the company pays for its people's AI use.
What company admins can see, for each member: name, email address, role, the date they joined, and the date they last used Voicelit (their latest successful AI request, or else the last time a device signed in). Admins also see requests to join, and who they have deactivated.
What company admins cannot see: your recordings, transcripts, notes, minutes, to-dos, speaker names, voices, or what you said. This holds for people who have left the company too. Content reaches colleagues only if its owner shares it.
Admins deactivate; they do not remove. A deactivated person stays on the admin list as a former member until they delete their account, and cannot use the company's service. Your account and content are tied to your company email: for personal notes, sign up separately with a personal email address.
Company directory (when released). The company directory is designed but not built yet. When released, it will let a company share a list of names, emails, nicknames and how many times each person's name was confirmed, so colleagues can be named in meetings. Unlike your content, this list will be stored on our servers in a form Onner can technically read, protected only by the database provider's standard disk encryption. Meeting content, recordings and voices stay end-to-end encrypted. Admins will be able to switch it off and remove a wrong nickname.
9. Logs and IP addresses
- Our hosting provider (Google Cloud) is set not to store its per-request log for the service, the log that would hold your IP address and the full address requested. Our own service log records, for each request, the time, the route (without any query string), the status and how long it took. It holds no IP address, no request content and no sign-in codes. Service logs are kept 30 days.
- Cloudflare, which provides DNS for voicelit.app and the redirect for the sign-in return address, sees connection details such as your IP address while you sign in, and handles them under its own terms. It never receives your audio or your content.
- Our own records of account actions (for example sign-in, device changes, deletion) store a keyed hash of your IP address, not the address itself. They are deleted after 1 year.
10. How long we keep things
| Data | How long | Note |
|---|---|---|
| Recordings and unsynced notes | Until you delete them or remove the app | On your device only |
| Content sent to AI providers | We do not store it. Providers may keep it up to 30 days | Their terms apply |
| Synced content (ciphertext) and keys | Until you delete it or your account | Deleted items leave a small marker so your other devices delete them too; markers are removed after a retention window |
| Account details (email, name, sign-in identities) | Until you delete your account | |
| Devices and sessions | Until you remove the device or delete your account | |
| Usage records | Up to 1 year, with no name or email | Kept without a name or email after you delete your account, until the year is up |
| Records of account actions | Up to 1 year | User id, device id, hashed IP, action. No content |
| Service logs (no IP address) | 30 days | Request logs with IP are not stored |
| Database backups | Daily backups and the change log used to restore to a point in time are kept 7 days | Deleted data can remain in a backup for that long |
| Account deletion requests (web form) | 30 days after we handle the request (90 days if it is never handled) | Holds the email and note you entered |
| Company member list | Kept while the company exists, as a nameless entry that someone was a member | Name and email are removed when the person deletes their account |
11. Deleting your account and your data
In the app: Settings, Account, Delete account. If you cannot sign in, use the web deletion form: we email the address first to confirm the account is yours.
Deleted right away: everything your account synced (notes, transcripts, minutes, to-dos, speaker names, voices, and the keys that open them), your sign-in identities, devices and sessions, your name and email, and your company membership. You are signed out on every device.
What stays:
- Recordings and notes that exist only on your own devices. Delete them in the app or remove the app.
- A deleted-account marker with no name, email or identities, removed after 30 days. If you were in a company it stays as a nameless entry in that company's list of everyone who ever joined.
- Usage records and records of account actions, without content, until they are 1 year old (section 10).
- Your deletion request, if you used the web form, for 30 days after we handle it.
- Backups for up to 7 days, and service logs (which hold no IP address) for up to 30 days.
Sign in with Apple. If you signed in with Apple, we also ask Apple to revoke Voicelit's access in your Apple ID. If Apple cannot be reached we keep trying for up to 14 days.
Content a provider already holds (section 5) is kept under the provider's terms, up to 30 days.
The same instructions, with a request form for people who cannot sign in, are on the account deletion page (voicelit.app/delete-account).
12. Google user data
If you sign in with Google, or connect Google Calendar, Tasks or Docs, Voicelit receives data from Google APIs. Each permission is optional. Voicelit asks for it only when you first use the feature that needs it, on Google's own consent screen. This section says what Voicelit uses each one for.
| What you allow | Google permission | What Voicelit uses it for |
|---|---|---|
| Sign in with Google | openid, email | To recognise your account and show which Google account is connected. |
| See your calendar events | calendar.events.readonly | To show your upcoming meetings and name your recordings after them. For a meeting you record, the event title and attendee names and emails help name the speakers. |
| See which calendars you have | calendar.calendarlist.readonly | To let you choose which calendars Voicelit shows. |
| Create calendar events | calendar.events | To schedule the next meeting, only when you ask for it from a meeting's follow-up. |
| Add to Google Tasks | tasks | To add a meeting's to-dos to your Google Tasks, only when you tap Google Tasks. |
| Create a Google Doc | drive.file | To create a Google Doc of a meeting's notes, only when you ask. Voicelit can open only the files it created. |
- Where it goes. Calendar events are read on your device and are not stored on our servers in readable form. Tasks, events, Docs and emails you create are sent from your device to Google with your permission. Our server is not involved.
- AI providers. For a meeting you record, the event's title and the attendees' names and emails can be included in the same request as the audio or transcript, so that speakers can be named and minutes written. That request goes to the AI providers in section 5 and follows the same rules: they are told not to train on it, they may keep it for up to 30 days, and our server does not store it.
- What we do not do with Google data. We do not use it for advertising, we do not sell it, and we do not use it to train or improve AI models, ours or anyone else's. We do not let people at Onner read it, except with your agreement (for example, when you ask us for support), to investigate abuse, or where the law requires.
- Disconnecting. You can disconnect Google in Voicelit's settings, or remove Voicelit in your Google Account permissions. Voicelit can then no longer read or create anything in your Google account.
Voicelit's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
13. Who we share data with
- Hosting: Google Cloud (Cloud Run, Cloud SQL, key management), in Bangkok.
- DNS and redirects: Cloudflare provides the domain name service for voicelit.app and the redirect for the sign-in return address (auth.voicelit.app). While you sign in it sees connection details such as your IP address and the address being requested. It never receives your audio or your content.
- AI providers: OpenRouter and the model companies behind it (section 5).
- Sign-in: Apple or Google, when you sign in.
- Google services you connect: if you choose to create Google Tasks, Calendar events or Docs from a meeting, the app sends that item from your device to Google with your permission. Our server is not involved.
- Your company, as in section 8.
- Authorities, where the law requires.
We do not sell personal data and we do not share it for advertising.
14. Where your data goes
Our servers are in Bangkok, Thailand. AI providers process your content on their own systems, which may be in other countries.
15. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or move your data, to object to processing, and to withdraw consent. In the app you can delete your account, withdraw AI consent, delete saved voices and delete notes. For anything else, write to onnertech@gmail.com.
16. Security
Traffic between the apps and our server uses HTTPS. Synced content is end-to-end encrypted on your device. Sessions use tokens that can be revoked. No system is perfectly secure, and anyone who holds your unlocked device or your recovery key can read your content.
17. Children
Voicelit is not meant for children and is intended for people aged 18 and over.
18. Changes
If we change this policy in a way that matters, we will tell you in the app before it takes effect. Earlier versions are available on request from the privacy contact.
19. Contact
Onner Tech Company Limited, 41/28 Soi Vibhavadi Rangsit39, Don Mueang 10210, Thailand, onnertech@gmail.com.