Contents
  • 1. Introduction
  • 2. Legal Ground for Processing
  • 3. What Personal Data We Collect
  • 4. Keeping Your Data Safe
  • 5. How We Process Your Data
  • 6. Data Sharing
  • 7. Your Rights
  • 8. Data Retention
  • 9. Changes to This Policy
  • 10. Contact Us

Privacy Policy

Last updated: November 9, 2026

1. Introduction

This policy explains what personal data VoiceKnight handles, why, who else processes it and how long it is kept. VoiceKnight is a notes app for the web and iOS with voice capture and an optional AI assistant, Oracle.

Your notes, note types, chats and files are end-to-end encrypted on your device before they are uploaded. We store them, but we cannot read them.

3. What Personal Data We Collect

Account

  • Your email address, used to sign in and to email you about your account
  • Your password, which never leaves your device in readable form
  • Your encryption key material, wrapped so that only your password or recovery phrase can open it
  • Your display name, end-to-end encrypted
  • An account ID, the account creation date and the public keys of your signed-in devices

Your content

  • Notes, note types, Oracle chats, files and settings, end-to-end encrypted. We store them but cannot read them.
  • Technical details needed to sync them, such as IDs, sizes, version numbers and dates
  • Your VoiceKnight contacts and who you share notes or files with, if you use those features

AI features

  • When you turned on AI, and which version of the AI terms you accepted
  • How much of your AI allowance you have used. We record amounts, not content.

Feedback

When you send feedback, we receive your message, any screenshots or files you attach, the screen you were on, your app version and your device’s operating system. Feedback is not end-to-end encrypted, because it is a message to us. Nothing is sent unless you submit it.

Payments

Apple handles payments in the iOS app, through RevenueCat. Paddle handles payments on the web. We receive your plan, subscription status and dates, and the provider’s customer and transaction IDs. We never receive your card details.

What we do not collect

VoiceKnight has no analytics, advertising or tracking tools, and does not record your searches or how you use the app. Our server logs record which kind of request was made, its result and how long it took. They do not record your IP address, your account or your content. Your IP address is held only in memory, briefly, to limit abuse such as repeated sign-in attempts.

4. Keeping Your Data Safe

Your content is encrypted on your device with keys derived from your password, and those keys never reach our servers. All traffic is encrypted in transit, and our database and file storage are encrypted at rest.

Because we cannot read your encrypted content, we also cannot recover it if you lose both your password and your recovery phrase.

5. How We Process Your Data

We use your data to run your account, sync your encrypted content between your devices, provide the AI features you turn on, handle your subscription, answer your feedback and protect the service from abuse.

OpenAI provides Oracle chat and voice transcription. When you enable AI, VoiceKnight sends your messages, relevant note content and recordings to OpenAI for processing. If you turn on web search, Oracle's search queries go through OpenAI's web search, which may use third-party search providers.

AI requests are encrypted in transit, but VoiceKnight and OpenAI can read them during processing. VoiceKnight does not store these requests or responses as plaintext. Saved notes and chats remain end-to-end encrypted.

6. Data Sharing

We do not sell your data, use it for advertising or share it for tracking. These providers process data on our behalf:

  • Fly.io: runs our servers (Sweden).
  • Neon: hosts our database.
  • Cloudflare R2: stores your encrypted files.
  • Vercel: hosts the website and web app.
  • Postmark: sends account emails such as verification and password reset.
  • OpenAI: Oracle chat and voice transcription, only when AI is turned on.
  • Apple and RevenueCat: payments and subscriptions in the iOS app.
  • Paddle: payments and subscriptions on the web. Paddle is the seller of record and keeps the transaction records it needs for tax and accounting.

Some of these providers are based outside the EU/EEA, mainly in the United States. Where data leaves the EU/EEA, it is covered by the provider’s data processing terms, using the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

We also disclose data when the law requires it. If VoiceKnight is ever sold or transferred, this policy continues to apply to your data, and we will tell you in advance.

7. Your Rights

You can ask to access, correct, delete or export your personal data, ask us to restrict processing, object to processing based on legitimate interest and withdraw consent at any time. You can also complain to the Norwegian Data Protection Authority (Datatilsynet).

To exercise these rights, please contact us at support@voiceknight.com. We will respond without undue delay and within one month.

Deleting your account

You can delete your account in the app or on the web, in Settings. You can also request account deletion by emailing support@voiceknight.com from the email address currently registered to your account. We handle these requests manually. We send a separate email to the address recorded on your account asking you to reply to confirm deletion. We require that confirmation before deleting the account; the sender address on the original request alone is not sufficient. We never ask you to email your password or recovery phrase.

After receiving your confirmation, we process the deletion and let you know when it is complete. You can withdraw the request before deletion is carried out by replying to our email.

8. Data Retention

  • Account and content: kept until you delete them. Deleting your account removes your account, encrypted content, files and feedback from our database at once. Copies in our database backups expire automatically.
  • AI requests: not stored by VoiceKnight.
  • Server logs: kept for a short period by our hosting provider. They contain no IP addresses, accounts or content.
  • Billing records: deleting your account cancels a web subscription and its Paddle customer is archived rather than erased. Only Apple can cancel an App Store subscription, so cancel it in your Apple account settings. Apple, Paddle and RevenueCat keep transaction records where law or accounting rules require it.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

  • Posting the updated policy on our website
  • Sending you an email notification
  • Displaying a notice in our application

Your continued use of our service after any changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

  • Operator: MKODE DUSTAN (sole proprietorship), org. no. 926 127 829
  • Address: Hans Tanks gate 11, 5008 Bergen, Norway
  • Privacy and support: support@voiceknight.com

We are committed to resolving any privacy concerns you may have and will respond to your inquiry within one month.