Privacy Policy

Last updated: 11 July 2026

This privacy policy covers the Vocelion iOS app and the vocelion.app website.

This is a convenience translation. The German version (vocelion.app/datenschutz) is authoritative.

Vocelion is deliberately built so that as little data as possible exists in the first place: no account, no server of our own, no tracking. Your recordings stay on your device.

1. Controller

sydacos GmbH
Hasenböge 17
21514 Klein Pampau, Germany
Email: contact@vocelion.app

2. At a glance: what happens to your data?

3. Processing in the app

3.1 Audio recordings and transcription (on-device)

Your voice recordings are stored exclusively on your iPhone and converted to text there using Apple's SpeechAnalyzer. Audio is never transmitted to us or to third parties. You control retention yourself (default: audio files are automatically deleted after 30 days; transcripts remain until you delete them — both configurable in Settings). Legal basis: Art. 6(1)(b) GDPR (providing the feature you requested).

3.2 AI task extraction (EU servers)

When a recording is processed, we send only the transcript text (never audio) to our processor Mistral AI SAS (France), which processes it on EU servers to suggest tasks, dates, and people. Mistral does not use your content to train AI models and does not retain it permanently. No data is transferred to countries outside the EU. Every AI suggestion is shown to you for review — nothing becomes a task or is exported without your confirmation. Legal basis: Art. 6(1)(b) GDPR. Note: you alone determine the content of your dictations; please do not dictate third-party data you are not permitted to have processed.

3.3 iCloud sync (optional)

Transcripts, tasks, and optional place tags are backed up and synced between your devices via CloudKit in your private iCloud. The provider is Apple; the data lives in your Apple account, and we have no access to it. Audio is not synced. You can disable iCloud for Vocelion in iOS Settings.

3.4 Place tag (optional, opt-in)

If you enable "Save location with recording", the app determines a coarse place name once at the start of a recording (e.g. "Hamburg, Rathausstraße") via Apple's geocoding service and stores it with the recording — private on your device and in your iCloud. Legal basis: Art. 6(1)(a) GDPR (consent, revocable at any time in Settings).

3.5 Voice commands (optional, opt-in)

If you enable voice commands ("Vocelion Stopp/Pause/weiter"), an additional speech recognizer runs during a recording — entirely on-device. No data is transmitted for this.

3.6 Purchases

Subscriptions and one-time purchases are handled by Apple via the App Store. We receive no personal data from you; purchase entitlement is verified locally via StoreKit.

3.7 Permissions

The app requests permissions only for the respective feature: microphone (recording), speech recognition (transcription), Reminders/Calendar (exporting tasks you approved), location (optional place tag), Face ID (optional app lock — the biometric check is performed entirely by iOS; we never receive biometric data).

4. Website (vocelion.app)

The website is static and uses no cookies; nothing is stored on or read from your device. When you visit, our hosting provider (Vercel Inc., USA — certified under the EU-US Data Privacy Framework) processes technically necessary connection data (IP address, time, page requested) in server logs to provide and secure the service. We also use Vercel Web Analytics, a cookieless, anonymous page-view measurement: it counts visits, does not permanently store IP addresses, places no identifiers on your device, and cannot track you across sites (visits are distinguished only by a daily-rotating, non-reversible hash). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation and anonymous reach measurement).

5. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). Since your content lives on your device, you can view, export, and delete it directly in the app at any time ("Delete all recordings" in Settings permanently removes audio, transcripts, and tasks). For requests, contact us at contact@vocelion.app. You also have the right to lodge a complaint with a data protection supervisory authority — competent for us: Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany.

6. Changes

We will update this policy when the app or the legal situation changes. The current version is always available at https://vocelion.app/en/privacy and in the app.