The short version

This website does not track you. The VoiceFlow apps work locally on your device by default; audio only leaves your machine if you explicitly choose a cloud transcription engine.

1. About this policy

This policy describes how VoiceFlow ("we", "us") handles information on the marketing website at voiceflow.synccy.com and inside the VoiceFlow macOS and iOS apps. By using the website or the apps you agree to this policy.

2. What the website collects

The website has no analytics, third-party scripts, advertising pixels, or cross-site trackers, and sets no cookies. The only place it collects personal data is the optional early-access signup form — described below. If you never submit that form, we collect no personal data from your visit beyond the short-lived server access logs noted further down.

The site uses localStorage to remember one preference: your light/dark theme choice (key vf-theme). This value never leaves your browser. You can clear it by clearing site data in your browser settings.

On desktop, the 3D scenes load two small static files from public code CDNs — a GPU-benchmark list (unpkg.com) and font data (cdn.jsdelivr.net) — so they can render at the right quality. These are plain asset requests: no cookies, no identifiers, no analytics, and nothing about you is sent. They are the only third-party requests the site makes.

Server access logs (request line, status code, byte count, referrer, user agent, timestamp, IP address) are kept for up to 14 days for the sole purpose of operating the site (debugging, abuse mitigation). Logs are stored on hardware we control and are not shared with third parties.

Early-access signup

When you submit the early-access form, you consent to receive launch and product-update emails. We store the email address you provide, plus — as proof of that consent — the consent text you agreed to, a timestamp, a one-way hashed version of your IP address and your browser user-agent string (legal basis: consent, GDPR Art. 6(1)(a)). There is no pre-ticked box: submitting the form is the affirmative action. These are processed by our own waitlist service on hardware we control and are never sold or shared with advertisers.

You can unsubscribe at any time via the link in every email, or ask us to delete your data entirely by writing to privacy@synccy.com. We keep signup records only until launch + 12 months, or until you ask us to erase them — whichever comes first.

3. What the VoiceFlow apps collect

The apps are designed to be private by default. There are three transcription engines, with different data flows:

Apple Speech — runs on-device. No audio leaves your Mac/iPhone.
On-device Whisper — runs on-device. No audio leaves your Mac/iPhone. Air-gapped mode actively blocks all network I/O while dictating; this is verifiable with tools such as Little Snitch.
Cloud (ElevenLabs) — opt-in. Your audio is sent to ElevenLabs for transcription using your own API key. We have no servers in this path. Refer to ElevenLabs's own privacy policy for their handling of audio.

AI text enhancement (rewriting, summarization) uses Anthropic Claude via your own API key, again with no servers of ours in the path. Snippet definitions, dictionary words, and your settings are stored locally and synced via your own iCloud account if you enable iCloud sync.

We do not collect crash reports, telemetry, usage analytics, feature flags, or A/B test signals. The apps do not phone home.

4. Payments

App purchases are processed exclusively by Apple via the App Store. We never see your payment details. We receive aggregate sales reports from Apple identifying purchase country, plan, and unit count, with no personally identifiable customer information.

5. Email contact

If you email us at hello@synccy.com we keep that correspondence as long as needed to answer your question and any reasonable follow-up. You can ask us to delete it at any time.

6. Your rights (GDPR / UK Data Protection Act)

Because we collect almost nothing, most rights have little to act on. Where applicable you may request:

Access to any personal data we hold about you
Correction of inaccurate data
Deletion of your data ("right to be forgotten")
A copy of your data in a portable format
Withdrawal of any consent you previously gave

Send any such request to hello@synccy.com and we will reply within 30 days.

7. Children

VoiceFlow is not directed at children under 13 (or under 16 in jurisdictions where that is the consent age for online services). We do not knowingly collect data from children.

8. Security & responsible disclosure

The website is served over HTTPS with HSTS, a strict Content Security Policy, and standard hardening headers. The apps ship as notarized macOS / iOS binaries from the App Store.

If you believe you have found a security vulnerability, please report it privately to hello@synccy.com — include steps to reproduce and any proof-of-concept. Please give us a reasonable window to fix it before any public disclosure; we will acknowledge your report and keep you posted. We do not currently run a paid bug-bounty, but we are grateful for and will credit good-faith reports. Machine-readable contacts live at /.well-known/security.txt.

9. Changes to this policy

When we change this policy, the "Last updated" date at the top changes. We'll surface material changes in the footer of the site for at least 30 days.

10. Contact

VoiceFlow / Invictus Media
Email: hello@synccy.com