Privacy Policy
Effective March 17, 2026 · Last updated March 17, 2026
This Privacy Policy explains how TalkyPaste ("the Service"), operated by Ralph Cohen, based in the Netherlands, collects, uses, and protects your personal data. We comply with the GDPR and applicable data protection laws.
1. Data Controller
Ralph Cohen · hello@talkypaste.com · The Netherlands
2. What We Collect
Device UUID (generated locally), device model/OS version, voice transcription text (processed in real-time, not stored), usage count, and payment data (via Lemon Squeezy).
3. What We Do NOT Collect
Audio recordings (Apple converts speech to text on-device), names, email addresses, phone numbers, location data, contacts, photos, or other device data.
4. How We Use Your Data
Processing voice queries, tracking usage limits, service notifications, debugging, and improving the Service based on aggregated patterns. We do not sell, rent, or share your data with third parties for marketing.
5. Third-Party Services
Transcribed text is sent to an AI provider (e.g., OpenAI or Anthropic) — only message content, no UUID or device info. Payments handled by Lemon Squeezy, LLC. API hosted on Vercel. Data stored in Upstash Redis, encrypted at rest and in transit.
6. Data Retention
Device UUID stored while active. Voice transcriptions processed in real-time, not persistently stored. Payment data managed by Lemon Squeezy.
7. International Transfers
Some providers may process data outside the EEA, protected by Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.
8. Your Rights (GDPR)
Access, rectification, erasure, restriction, data portability, objection, and withdrawal of consent. Contact hello@talkypaste.com with your device UUID. Response within 30 days.
9. Security
HTTPS encryption, encryption at rest, access controls, regular security reviews.
10. Children
Not directed at children under 16. We do not knowingly collect data from minors.