Clear, without the fine print

Privacy Policy

This policy explains what data Dikto processes, where it goes, and what you can delete.

Effective July 14, 2026 · Last updated: July 14, 2026

In short

We do not use ads, analytics, or tracking. Dikto manages your account through Supabase, sends audio directly to ElevenLabs for transcription, and stores your API key and History locally on your device.

1. Account and data we collect

To download and use the app, you create a Dikto account with an email and password. This data is sent directly to Supabase Auth, our sign-in provider, in a project hosted in an EU region. We cannot access your password in readable form.

No other personal data is sent to Dikto servers. There are no analytics, advertising SDKs, profiling, or ads. We do not collect location, contacts, files, browsing history, or advertising identifiers.

2. Audio and transcription

When you dictate, the audio recording is encrypted in transit and sent directly from your device to ElevenLabs to be converted into text. Audio is shared with ElevenLabs only for this function; Dikto does not use it for advertising.

Dikto has no server that receives or stores these recordings. How ElevenLabs processes and retains data depends on its terms and your ElevenLabs account settings. Read the ElevenLabs Privacy Policy and Data Processing Addendum (DPA).

Completed dictations are stored only in local History on your device. You can delete them from the app's Settings.

3. Your ElevenLabs API key

The API key is stored locally and encrypted: with Windows DPAPI on Windows and Android Keystore on Android. It is never sent to Dikto servers. It is sent to ElevenLabs only when the app requests transcription on your behalf.

4. Android permissions

The Android version requests only the permissions needed for the features you enable:

MicrophoneRecords speech only while you dictate so the audio can be converted into text.

Display over other appsShows the optional Floating button so you can start dictation without opening Dikto.

Accessibility ServiceLocally reads only the current text in the focused editable field so it can preserve the existing text and insert dictated text in the right place. It does not read other screen content, and it does not collect, store, or send the text it reads. You enable this permission manually in system Settings. Without it, you can still dictate and paste the copied text manually.

NotificationsShows status while recording runs in the foreground.

5. Deleting your account and local data

You can delete your account at https://dikto.mk/en/account. Sign in, type “DELETE,” and confirm. The active Supabase account, email, and sign-in data are deleted immediately after successful confirmation.

You can also request deletion at support@dikto.mk; we will first verify your identity, then process the request without undue delay.

Deleting your Dikto account does not delete local History and the API key from your devices, or data in your ElevenLabs account. Delete local data in Settings or by clearing the app's data; manage ElevenLabs data from your ElevenLabs account.

6. Security and transmission

Communication with Supabase and ElevenLabs uses HTTPS. Downloads are available only to signed-in users through short-lived signed links. No system is entirely risk-free, but we use safeguards appropriate for the data being processed.

7. Changes and contact

If we change this policy, we will publish the new version on this page and update the date above. For questions about privacy, access, correction, or deletion, email support@dikto.mk.