Privacy Policy

1. Who We Are

MRVoice is a product of MR'ai, Inc. ("we", "us", "our"). We operate the MRVoice desktop application and the website at mrvoice.xyz. For questions about this policy, contact us at agent@mr-ai.xyz.

2. Data We Collect

Account Information

• First name and last name
• Email address
• Password (hashed by Supabase — we never see or store plaintext passwords)

Voice & Transcription Data

• Voice audio recordings are processed in memory and immediately discarded after transcription. We do not permanently store audio files.
• Transcription text (raw and cleaned versions) is stored locally on your device only.
• When using Local Whisper mode, audio is processed entirely on-device — nothing leaves your machine.

Usage Statistics

• Words transcribed per month
• Characters cleaned per month
• Number of transcriptions per month

Payment Information

Payment processing is handled entirely by Stripe. We never receive, store, or have access to your credit card numbers or bank details. We only store a Stripe customer ID and subscription ID to manage your plan.

App Preferences

• Language, hotkey configuration, speech-to-text engine choice, and active style — stored locally on your device.

3. Data We Do NOT Collect

• We do not store audio recordings
• We do not sell or share personal data with advertisers
• We do not track browsing activity or use analytics cookies in the desktop app
• We do not use third-party marketing or tracking cookies

4. How We Use Your Data

We process your personal data under GDPR Article 6(1)(b) (contract performance) and Article 6(1)(f) (legitimate interests) for the following purposes:

• To create and manage your account
• To provide the voice-to-text transcription and AI cleanup service
• To process payments and manage subscriptions
• To track usage for plan limits (free tier word count enforcement)
• To communicate important service updates

5. Where Your Data Is Stored

6. Third-Party Services

We share data with the following third parties solely to provide our service:

Each third party processes data under their own privacy policies. We have reviewed these to ensure they meet adequate data protection standards.

7. International Data Transfers

Your database is hosted in EU-West-1 (Supabase/AWS). Some third-party processors (Groq, Stripe, Google) may process data outside the EEA. These transfers are protected by Standard Contractual Clauses (SCCs) or adequacy decisions as applicable under GDPR Chapter V.

8. Data Retention

• Account data: Retained until you delete your account.
• Usage statistics: Retained per calendar month while your account is active.
• Voice recordings: Not retained — processed in memory and immediately discarded.
• Payment data: Managed by Stripe per their retention policy.
• On account deletion: All server-side data (profile, usage, auth record) is permanently and irrecoverably erased via cascading delete.

9. Your Rights Under GDPR

If you are in the European Economic Area, you have the following rights:

• Right of access (Art. 15): Request a copy of all personal data we hold about you.
• Right to rectification (Art. 16): Request correction of inaccurate data.
• Right to erasure (Art. 17): Delete your account and all associated data at any time via Account → Delete Account.
• Right to data portability (Art. 20): Your local history and diary are stored as JSON files on your device, which you can access directly.
• Right to restrict processing (Art. 18): Contact us to restrict processing of your data.
• Right to object (Art. 21): Object to processing based on legitimate interests.
• Right to withdraw consent (Art. 7): Where processing is based on consent, you may withdraw it at any time.
• Right to lodge a complaint: You have the right to file a complaint with your local data protection authority.

To exercise any of these rights, email agent@mr-ai.xyz. We will respond within 30 days.

10. Cookies & Local Storage

The MRVoice website uses minimal storage:

We do not use analytics cookies, advertising cookies, or any third-party tracking cookies. Since we only use strictly necessary storage, no consent is required under the ePrivacy Directive. We still display a cookie notice for transparency.

11. Children's Privacy

MRVoice is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact us and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or a notice on our website. Continued use of MRVoice after changes constitutes acceptance of the updated policy.

13. Contact

For privacy-related questions or to exercise your data rights:

MR'ai, Inc.
Email: agent@mr-ai.xyz