Privacy Policy
This Privacy Policy explains what personal data Qenzo ("Qenzo", "we", "us") collects, why we collect it, how we use it, who we share it with, and the rights you have over it. Qenzo is a voice-dictation product. We have written this policy to be honest and readable. If anything here is unclear, email us at qenzo.ai@gmail.com.
We never store your raw audio. Your speech is transcribed in memory and the audio is discarded immediately. In Private mode, nothing is stored at all.
1. Who we are
The data controller responsible for your personal data is Venture Deals, Co., a company incorporated in Delaware, USA, operating the Qenzo product. For any privacy question or request, contact qenzo.ai@gmail.com.
2. What we collect
We collect only what is needed to provide and improve the service:
- Account data. Your email address, your password (stored only as a salted hash - never in plain text), and your email-verification state.
- Dictation transcripts. When you dictate, your speech is transcribed and the resulting text is stored: both the raw transcript and the styled (cleaned) transcript. This is the core output you came to Qenzo for.
- Personal dictionary. The words, names, and spellings you add so the service writes them your way.
- Keyboard vocabulary. As you type, the Qenzo keyboard counts the words you use and the short sequences you chain them into (two- and three-word runs), so that its suggestion strip can finish your own sentences instead of a stranger's. This is a count of whole words - never a log of what you typed, never the sentences themselves, and never anything from a password, URL, email or payment field. Since the keyboard now carries it on your account, so that a new phone knows how you write instead of starting blank, that word list is stored on our servers alongside your other data. It is never shared, never used for advertising, and deleting your account deletes it. You can also clear it on its own from the app.
- Edit history. The corrections you make to transcripts, which the service can learn from (see "model improvement" below).
- Voice Message enrolment and voice clone. If you use Voice Message (a Pro feature), you record a short sample of your own voice so we can create a synthetic clone of it. That enrolment recording is sent to our voice-synthesis sub-processor, ElevenLabs, to build the clone; we do not store the recording itself, only that you are enrolled, the enrolment date, your consent timestamp, and the recording's size. When you send a voice message, the text of that message is also sent to ElevenLabs to be spoken back in your cloned voice, and the resulting audio is stored so you can replay it without paying to regenerate it, until you delete it (see "How long we keep your data" below). Only your own, consented voice is ever cloned - we never clone anyone else's voice, including the voice of someone who sent you a message.
- Subscription and payment references. Identifiers from our payment processors, such as your Stripe customer ID and subscription ID, and, for in-app purchases, your Apple transaction ID. We do not store your full card number or bank details - those are held by the payment processor.
- A device identifier. The app generates a random identifier for the device it is installed on and sends it with each request, so that the free allowance belongs to a device and not merely to an email address - otherwise anyone could reset it by registering again. We store only a one-way hash of it, never the identifier itself: the stored value cannot be turned back into anything that identifies your device. It is not an advertising identifier, it is never shared, and it is never used to track you across other apps or websites.
- A notification token. If you allow notifications, Apple issues a token for your device which we store so we can tell you when support replies. Turning notifications off, or signing out, removes it.
What we do NOT collect: we never store the raw audio of your voice. Speech is transcribed in memory and discarded. When you dictate in Private mode, no transcript, audio, or edit is stored anywhere.
3. Why we use your data, and our legal bases
Under the GDPR we must have a lawful basis for each use of your data. Here they are:
| Purpose | Data used | GDPR lawful basis |
|---|---|---|
| Provide the dictation service (transcribe, style, store and show your transcripts, apply your dictionary) | Account data, transcripts, personal dictionary | Performance of a contract (Art. 6(1)(b)) |
| Bill you and manage your subscription | Account data, subscription and payment references | Performance of a contract (Art. 6(1)(b)) |
| Improve our models using your edits (optional) | Edit history, transcripts | Consent (Art. 6(1)(a)), which you can withdraw at any time |
| Keep the service secure and prevent abuse, fraud, and outages | Account data, minimal technical/security logs | Legitimate interest (Art. 6(1)(f)) |
| Send transactional email (verification, password reset, billing notices) | Email address | Performance of a contract (Art. 6(1)(b)) |
Model improvement from your edits is optional. If you do not consent, we still provide the full service - we simply do not use your edits to improve our models.
4. Sub-processors
To run the service we share the minimum necessary data with the vetted providers below. Each is bound by a data-processing agreement (or equivalent data-processing terms) that limits them to processing your data only on our instructions.
| Sub-processor | Role |
|---|---|
| OpenRouter / Google (Gemini) | Automatic speech recognition (transcribing your dictation into text) |
| OpenRouter (Google, Z.ai, DeepSeek, Anthropic, OpenAI, Alibaba, Moonshot) | Text styling and translation. Which company's model receives your text is your own choice in the app ("Model" in the menu): Gemini (Google) by default, or GLM (Z.ai), DeepSeek, Claude (Anthropic), GPT (OpenAI), Qwen (Alibaba), Kimi (Moonshot). Only the model you picked receives it. |
| OpenRouter / DeepSeek | In-app support chat: the assistant that answers you first receives the messages you write in that chat. Used only if you open Support. |
| ElevenLabs | Voice Message: clones your voice from your enrolment recording and synthesizes voice messages spoken in that clone. We send your enrolment recording (to create the clone) and the text of each voice message you send (to speak it). Used only if you use Voice Message, and only with your explicit consent. |
| Google (Gemini text-to-speech) | Voice Message: speaks the text of your voice message when you have picked one of the ready-made voices rather than your own cloned voice. |
| Stripe | Payment processing and subscription billing |
| Resend | Sending transactional email |
| DigitalOcean | Hosting and infrastructure |
| Sign in with Google: verifies your identity and reads the email address on your Google account when you choose to sign in with Google or link a Google account to your Qenzo account. | |
| Apple | In-app purchase processing (for the iOS / Mac app) |
Each provider processes only what its role requires. Audio is sent to the speech recognition provider only to produce a transcript and is not retained by us afterward.
5. International transfers
Qenzo is operated from the United States and your data is processed in the US. Where data is transferred out of the European Economic Area or the UK, that transfer is covered by the relevant Standard Contractual Clauses (and UK Addendum where applicable) adopted by our processors, together with the data-processing terms described above. You can ask us for more detail at qenzo.ai@gmail.com.
6. How long we keep your data
- Transcripts, personal dictionary, and edit history: kept until you delete them, or until you delete your account, whichever comes first.
- Account and billing references: kept while your account is active and for as long as needed to meet legal, tax, and accounting obligations after closure.
- Raw audio: never stored. It is discarded immediately after transcription.
- Voice Message audio: the enrolment recording used to create your voice clone is not stored by us - it is sent to our voice sub-processor, ElevenLabs, and discarded on our side right after enrolment. The synthesised voice message itself (the audio you send) is stored so you can replay it without regenerating it, until you delete that message, clear your history, or delete your account.
- Between dictations (iOS persistent session): to let you dictate again without reopening the app, the iOS app can keep the microphone session active for up to 30 seconds after a dictation ends (you can stop it at any time, and iOS shows the microphone indicator while it is active). Audio captured between dictations is never stored on the device, never transmitted, and never leaves memory - it is discarded instantly.
- Private mode: nothing is stored, so there is nothing to retain.
7. Your rights
If you are in the EU/EEA or UK, the GDPR gives you the right to:
- Access the personal data we hold about you.
- Erasure ("right to be forgotten") of your data.
- Portability - receive your data in a structured, machine-readable format.
- Rectification of inaccurate data.
- Restriction of processing in certain cases.
- Objection to processing based on legitimate interest.
- Withdraw consent at any time (for example, model improvement from your edits), without affecting the lawfulness of processing before withdrawal.
If you are a California resident, the CCPA/CPRA gives you the right to know what we collect, to delete it, to correct it, and to opt out of any sale or sharing of personal information.
We do NOT sell or share your personal information, and we never have. There is no advertising, no data brokering, and no cross-context behavioral advertising.
How to exercise your rights. You can delete your account and export your data directly in the app, using Delete account and Export data. You can also email qenzo.ai@gmail.com and we will respond within the time limits the law requires. You will not be discriminated against for exercising any of these rights. If you are in the EU/EEA or UK, you also have the right to lodge a complaint with your local data protection authority.
8. Cookies and local storage
Qenzo uses no tracking cookies and no analytics cookies. We do not run
third-party advertising or analytics scripts. The only thing we store on your device is an
essential session token kept in your browser's localStorage
(under the key qenzo_token) so you can stay logged in. Because we use no
non-essential cookies, there is no consent banner to click through.
9. Children
Qenzo is not directed to children. We do not knowingly collect personal data from children under 16 in the EU/EEA, or under 13 in the United States. If you believe a child has provided us data, contact qenzo.ai@gmail.com and we will delete it.
10. Changes to this policy
We may update this policy as the service evolves or the law changes. When we make a material change, we will update the "Last updated" date above and, where appropriate, notify you by email. Continued use of Qenzo after a change means you accept the updated policy.
11. Contact
Privacy questions and rights requests: qenzo.ai@gmail.com.
General support: qenzo.ai@gmail.com.
See also our Terms of Service.