Privacy Policy
Last updated: May 22, 2026
1. Data Controller
Florian Rothenbühler
c/o F2BII E-Commerce#511
Hintergoldingerstrasse 30
8638 Goldingen, Switzerland
fr@florianrothenbuehler.com
2. Website (whistype.com)
This website is hosted on Cloudflare Pages (Cloudflare, Inc., San Francisco, USA). We use Cloudflare Web Analytics, a cookieless, privacy-friendly analytics service that does not track individual users, does not use cookies, and does not store personal data.
No personal data is collected when you visit the website without interacting with forms or payment flows.
3. Application — Local Mode
In local mode, all data processing happens entirely on your device:
- Audio: Recorded from your microphone, processed by a local speech-to-text model, and immediately discarded after transcription. Audio is never stored or transmitted.
- Settings: Your preferences (hotkeys, recording mode, provider selection) are stored locally on your device.
- Transcription history: Past transcriptions are stored locally on your device. You can delete them at any time.
In local mode, no data leaves your device. No account is required. No internet connection is needed.
4. Application — Cloud Mode
In cloud mode, audio data is sent to a third-party transcription provider for processing:
- Audio transmission: Your recorded audio is sent to the selected provider (e.g. OpenAI, Deepgram, Groq) via an encrypted connection (TLS). The audio is transcribed and discarded by the provider. Whistype does not store your audio.
- Provider selection: You can see which provider is active at any time and switch between providers.
- BYOK mode: When using your own API keys, audio is sent directly from your device to the provider. Whistype does not route the audio through its own servers.
- Managed mode: When using a Whistype subscription, audio is routed through the Whistype API proxy to the provider. The proxy does not store audio data.
Third-party transcription providers
| Provider | Location | Privacy Policy |
|---|---|---|
| OpenAI | USA | openai.com/privacy |
| Deepgram | USA | deepgram.com/privacy |
| Groq | USA | groq.com/privacy-policy |
5. Account and Subscription Data
If you create a Whistype account or purchase a subscription:
- Email address: Used for account identification and communication.
- Subscription status: Managed by Paddle (see Section 7).
- Usage statistics: Word count and usage quota tracking to manage your plan limits. No transcription content is stored on our servers.
Account data is stored in a Supabase database (hosted in the EU). Access is protected by row-level security policies.
6. Application Updates
The Application checks for updates periodically. This check transmits your current application version and operating system to our update server. No personal data is transmitted during this process.
7. Payment Processing
Payments are processed by Paddle.com Market Limited, who acts as the Merchant of Record. When you purchase a subscription, Paddle collects and processes your payment data (e.g. credit card, PayPal). The Provider does not have access to your full payment details.
Paddle's privacy policy: paddle.com/legal/privacy
8. Your Rights
Under the Swiss Federal Act on Data Protection (revDSG) and the EU General Data Protection Regulation (GDPR), you have the following rights:
- Access: Request information about what personal data we store about you.
- Rectification: Request correction of inaccurate data.
- Deletion: Request deletion of your personal data.
- Data portability: Request an export of your data in a machine-readable format.
- Objection: Object to the processing of your personal data.
To exercise any of these rights, contact fr@florianrothenbuehler.com. We will respond within 30 days.
9. Data Retention
We retain your account data for as long as your account is active. If you delete your account, all associated data is removed within 30 days. Anonymized usage statistics may be retained for analytical purposes.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via the Website or within the Application. The "Last updated" date at the top reflects the most recent revision.
11. Contact
For questions about this Privacy Policy or data processing:
Florian Rothenbühler
c/o F2BII E-Commerce#511
Hintergoldingerstrasse 30
8638 Goldingen, Switzerland
fr@florianrothenbuehler.com