Skip to content

Privacy Policy

Last updated : September 25, 2026

Ondula is committed to protecting your privacy. This policy explains what data we collect, how we use it, and what your rights are.

🔒 In local mode, your voice never leaves your PC. In cloud mode, audio is sent to our transcription provider, which operates inference infrastructure in Europe (Helsinki), only for the duration of processing, then is not retained by Ondula; your account data stays in the European Union (Frankfurt).

1. Data Controller

Name : Ondula

Status : Sole proprietorship

Country : Belgium

Contact : [email protected]

2. Data Collected

Audio Data

  • ✓Transmitted for transcription only
  • ✓Not retained by Ondula after processing
  • ✓In cloud mode, sent to our transcription provider, which operates inference infrastructure in Europe (Helsinki), for the duration of processing

Account Data (if registered)

  • •Email address
  • •Anonymized hardware ID
  • •Subscription history

Technical Data

  • •Application version
  • •Usage statistics linked to the hardware ID (never the text or the audio)

3. Purpose of Processing

DataPurposeLegal Basis
AudioVoice transcriptionContract execution
EmailAccount managementContract execution
Hardware IDFraud prevention, licensingLegitimate interest
Usage statisticsCounting active users (days of use, number of dictations, country, version)Legitimate interest

4. Subprocessors

We use the following services to operate Ondula:

Authentication and database (Frankfurt, European Union)

🇪🇺 EU

Cloud-mode voice transcription (audio sent only for the time needed to transcribe it)

🇪🇺 Europe (Helsinki)

Payments and billing

Global

Website hosting and CDN

Global

Anonymous website traffic measurement, with no cookies or personal identifiers

Global

5. Data transfers outside the EU

Local mode: no transfer. Cloud mode: transfer for transcription, processed in Europe (Helsinki).

In local mode, no audio data leaves your computer. In cloud mode, your audio is sent to our transcription provider, which operates inference infrastructure in Europe (Helsinki), only for the duration of transcription; it is then not retained by Ondula. As this provider is a US company, temporary retention of logs outside the European Union cannot be entirely ruled out. Your account data (email, identifier) is hosted in the European Union (Frankfurt).

6. Data Retention

DataDuration
Audio dataNot retained by Ondula after transcription
Account dataUntil account deletion
Payment dataAccording to legal obligations (10 years max)
Usage statistics3 months, then deleted automatically

7. Your Rights

Under GDPR, you have the following rights:

Right of access

Obtain a copy of your data

Right to rectification

Correct your information

Right to erasure

Delete your account and data

Right to portability

Export your data

Right to object

Object to processing

Right to complain

File a complaint with the authority

To exercise your rights, contact us at [email protected]

8. Cookies

The ondula.ai website uses only essential cookies:

  • •Session cookie (authentication)
  • •Theme preference (light/dark)

We do not use tracking or advertising cookies.

We measure website traffic anonymously, to know which pages are viewed and how fast they load: no cookies, no personal identifiers and no cross-site tracking.

9. Security

We implement the following measures to protect your data:

  • ✓Communications via HTTPS/TLS
  • ✓Secure authentication
  • ✓Audio data not retained by Ondula
  • ✓Restricted data access

10. Changes to This Policy

We may update this privacy policy. In case of significant changes, we will notify you by email or through the application. The last update date is shown at the top of this page.

11. Deletion of your data

You can delete your account and all your personal data at any time from your account settings. If you prefer to go through us, here is the procedure:

  1. Email us at [email protected] from your account's email address.
  2. State your request to delete your account and data.
  3. We process your request within 48 hours and confirm the deletion to you.

This email procedure remains available if you prefer not to use deletion from your account settings.

Contact

For any questions about this policy or your data:

[email protected]