Polityka prywatności Voxmill

What stays on your computer

Your audio and video files, the transcripts, speaker labels and file paths never leave your computer. Transcription, voice detection and speaker labelling run in the Voxmill worker process on your computer (crates/worker). Voxmill has no server of its own.

What leaves your computer, and when

• Model downloads. On first use Voxmill downloads the speech models from Hugging Face and GitHub over HTTPS (crates/models/manifest.json, each address pinned to one published revision). Those services see three things: your IP address, the file requested and the program name “voxmill” in the request. Nothing else. Voxmill checks each downloaded file against the SHA-256 digest in a signed manifest.

• Licence activation. When you enter a licence key bought through Polar, Voxmill sends the licence key and a machine fingerprint to api.polar.sh. It sends them once, then again every 30 days to confirm the licence key still stands (crates/licence; while Voxmill runs it looks every six hours at whether that check is due). The machine fingerprint is the first 16 bytes of a SHA-256 hash of two values: your machine identifier (the id your operating system gives this computer) and your user account id. Nobody can turn the fingerprint back into either value. Voxmill also uses it locally to seal the licence record in its database, so a copied record does not work on another computer. Polar stores it as the label of the activation. You can see and remove activations in Polar’s customer portal. Polar Software, Inc. is the merchant of record for the purchase, which means it is the legal seller, and it holds the purchase data (name, e-mail, payment) under its own privacy policy.

• Update check. Once when the window opens, and once a day after that, Voxmill asks tenzanlogic.com for one small file, https://tenzanlogic.com/download/voxmill-macos.json, to learn whether a newer version exists (apps/desktop/src-tauri/src/lib.rs). The address is the same for every copy of Voxmill. The request says nothing about you, your files or even which version you run. The server sees your IP address and the name of that file, as it would for any page you open. Voxmill downloads nothing until you select “Update and restart”, and it checks what it downloads against Tenzan Logic’s signature before it replaces Voxmill.

• Hand-signed licence keys. Tenzan Logic issues these directly. Voxmill checks them offline, and they send nothing.

• Links you open. These open outside Voxmill, in your own browser or mail app, and only when you click:

  • “Get Pro” opens Polar’s checkout page.
  • “Voxmill on the web”, “Licence terms” and “Privacy notice” open pages on tenzanlogic.com.
  • “Email support” opens your mail app with a subject line that names the Voxmill version and your operating system.

  apps/desktop/src-tauri/capabilities/default.json allows exactly these three destinations: Polar’s checkout, tenzanlogic.com and mail to contact@tenzanlogic.com.

Voxmill sends no telemetry, no crash reports and no usage data. If a later version adds an opt-in crash report, this notice changes first.

What Voxmill stores on your computer

• Voxmill’s local data directory holds two things: voxmill.sqlite, with the queue, transcripts, settings and the licence record (plus its -wal and -shm companions while Voxmill runs), and the downloaded models under models/. On macOS that directory is ~/Library/Application Support/com.tenzanlogic.voxmill/, where Voxmill creates the database readable by your user only. On Windows it is %LOCALAPPDATA%\com.tenzanlogic.voxmill\, which is your user’s own profile folder. A download stopped halfway leaves a .part file there until it finishes or you delete the models.
• A log file, voxmill.log, of at most 1 MB with one older copy, sits in the platform’s log directory: macOS ~/Library/Logs/com.tenzanlogic.voxmill/, Windows %LOCALAPPDATA%\com.tenzanlogic.voxmill\logs\. It records errors with the names of the files and folders involved, never their full paths, and never any transcript text. There is one exception: an update that fails to install records the updater’s own message, and that message can name where Voxmill itself sits (apps/desktop/src-tauri/src/lib.rs, watch.rs, queue.rs). “Show the log file” in About opens it for you. It exists so you can attach it to a support mail if you choose to.

Delete those two directories and nothing of Voxmill remains.

What Voxmill hands to your operating system

• Notifications. When a file finishes or fails while the Voxmill window is not in front, Voxmill posts a system notification with the file’s name (apps/desktop/src-tauri/src/queue.rs). Your operating system keeps it in its notification centre under its own rules. You can switch Voxmill’s notifications off in the system settings.
• Copy and save. “Copy text” puts the transcript on the system clipboard. “Save as” writes it to the file you pick. Both happen only when you click.

Who is responsible, on what basis, for how long

• Controller. Szymon Jędryczko, trading as Tenzan Logic, Kraków, Poland, contact@tenzanlogic.com. GDPR asks for the controller’s identity and contact details, and e-mail is the contact channel. Tenzan Logic gives a postal address on request. (An unregistered sole trader has no company registration number. Tenzan Logic updates this notice when that changes.)
• The purchase. Polar Software, Inc. (Delaware, USA) is the merchant of record and an independent controller for the purchase. It processes your name, e-mail, payment and invoice data under its own privacy policy and its own legal basis, and you can exercise your rights towards Polar directly. Tenzan Logic sees the buyer’s name, e-mail and the licence key in Polar’s dashboard in order to deliver and support the licence (the contract with you, GDPR article 6(1)(b)).
• The activation record. The activation record is the licence key, the machine fingerprint and the activation time. Polar holds it as the label of the activation, and Voxmill holds it in its own database on your computer. Two bases apply: the contract (article 6(1)(b)) for counting activations, and Tenzan Logic’s legitimate interest (article 6(1)(f)) in stopping a licence key from being shared beyond its seats. The fingerprint is a hash that identifies a computer and user account, not a person, and it is the least data that does the job. A transfer to the USA happens because Polar is there. It rests on Polar’s data processing terms with standard contractual clauses, the European Commission’s approved contract terms for sending personal data outside the EU (see Polar’s policy for the current instrument).
• Retention. The activation record lives as long as the licence key is active, plus what Polar’s own retention says. Tenzan Logic keeps purchase records for the time Polish tax law requires (five years from the end of the tax year). Tenzan Logic keeps support mail for as long as the matter is open and up to two years after, then deletes it.
• Your rights. You have the rights of access, rectification, erasure, restriction, portability and objection (GDPR articles 15 to 21). Write to contact@tenzanlogic.com. To have an activation removed, you can also do it yourself in Polar’s customer portal. You can complain to the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl), or to the authority of the country where you live.
• No profiling, no automated decisions, no sale of data.

The site’s own privacy notice covers the beta sign-up and contact form on tenzanlogic.com.