Bedrock Dictate Privacy Policy
Last updated: 30 October 2026
The short version
- Your voice and your dictations never leave your computer. Speech is turned into text on your PC, and Auto-edit, which tidies your text, runs on your PC too. We never receive your recordings or your text, and we do not want them.
- Your account holds only what is needed to run it and your subscription: your email, your name, your profile picture if you add one, a scrambled (hashed) version of your password, your plan, and the settings you sync between devices.
- We do not sell your data, show ads, or use tracking or analytics in the app.
- You can download your account data or close your account at any time, from the app, and ask us to erase your details for good.
Who we are
Bedrock Dictate is a product of Made by Bedrock, a brand operated by Jamie Nudelman, a self-employed trader based in Malta ([business address]). We are responsible for the personal data described here. Contact us at [email protected].
What stays on your computer
These are stored only on your PC. We cannot see them and they are not part of your account:
- Audio from your microphone. It is only recorded while you dictate, turned into text, and then discarded.
- The text of your dictations and your dictation history.
- Which apps you dictate into, and how much in each.
- Settings that belong to this PC: your shortcut keys, microphone, whether Auto-edit is turned on, start with Windows, and the speed check result.
- A diagnostics file with timings and technical errors, never your words. It is only sent to us if you choose to attach it to a support request.
When you use per-app styles, the app reads the name of the app you are dictating into and, for web browsers, the title of the current tab, to choose a writing style. This happens on your PC, and the tab title is never saved or sent anywhere.
Removing the app, or using Reset history and stats in Settings, deletes this data from your PC.
What your account stores on our servers
| Data | Why |
|---|---|
| Email address | To sign you in, and to send account emails (confirming your address, resetting your password, renewal reminders) |
| First name, last name | To show on your profile |
| Profile picture (optional) | To show on your profile. We shrink it to 256 by 256 pixels and remove hidden photo data such as location. |
| Password, hashed | To check your password when you sign in. We never store or see your actual password. |
| Synced settings: your vocabulary, word replacements, snippets, writing styles, per-app style choices (app names and the group you put them in), and sound, color and display choices | So your settings follow you to every device you sign in on. Your dictations are never part of this. |
| Sign-in sessions: when you signed in, your IP address, and your device and app version | To keep you signed in, and so you can see and sign out of your devices |
| Short-term records of sign-in attempts by IP address | To block people trying to guess passwords |
| Which version of these documents you agreed to, and when | To show what you agreed to, and to ask again when they change |
| Minutes of speech per week, per PC (a number only, never the audio or the words) | For the free plan's weekly allowance |
| Your plan, when your free trial started and ends, and when you closed your account if you did | To give you the right plan |
| Your subscription details from Paddle: your Paddle customer and subscription numbers, monthly or yearly, status, and renewal or end dates. Never your card details. | To show your plan and renewal date, and to let you manage your subscription |
| Which achievement badges you have earned, and when | So your badges follow you to every device |
| Daily totals for each of your devices: number of dictations, word count, and time spent speaking and processing. Numbers only, never the words you said or which apps you used. | So your word counts, time saved, speaking speed and streak are the same on every device you sign in on |
| A scrambled (hashed) id for each PC you dictate on, made from Windows' machine id | To add up minutes across your PCs, and so each PC gets one free trial |
| Whether you want product news by email, and every change to that choice with the wording you agreed to | To send product news only if you said yes, and to show you agreed. You can turn it off at any time in the app. |
Payments
Paddle.com is our reseller and the Merchant of Record for all orders. When you buy Pro, you give your card, billing and tax details to Paddle, not to us. Paddle handles them under its own privacy policy, as the seller. Paddle tells us what we need to run your plan: the details in the table above.
Product news emails
If you said yes to product news, we send occasional emails about Bedrock Dictate through Resend. These emails record whether they were opened and which links were clicked, so we can tell which news is useful. Account emails, such as password resets, are always sent and are not used for this. Every product news email has a link to unsubscribe, and you can turn product news off in the app at any time.
The launch waitlist
If you join the waitlist on madebybedrock.com, we store your first name, your email address, when you signed up, which version of these documents you agreed to, and whether you confirmed your email. We use them to email you about Bedrock Dictate: the launch, news and updates, and occasional offers. The waitlist is separate from accounts. Every email has a link to leave, and you can also leave with the link on the confirmation page or by emailing us. When you leave, your details are deleted.
Support requests
When you contact us through the help center's contact form or by email, we receive your email address, your message, the area and problem you chose, and your app version. If you attach the diagnostics file, we receive that too. We use them only to help you, and keep support conversations with your account records, so we have the history of earlier requests when you contact us again.
Password safety check
We check new passwords against a public list of passwords known from data breaches (the "Have I Been Pwned" service). Only the first few characters of a scrambled version of the password are sent, never the password itself.
Who helps us run the service
We use these companies to run Bedrock Dictate. They only process data on our instructions:
| Company | What for | Where |
|---|---|---|
| Neon | Stores account data | Germany (AWS, Frankfurt) |
| Railway | Runs our account server and our support inbox | Netherlands (Amsterdam) |
| Cloudflare | Delivers our website and app downloads, protects them from attacks, and forwards emails sent to [email protected] | Worldwide |
| Resend | Sends account emails and product news | Ireland (EU) |
| Google (Gmail) | Receives support emails | Worldwide |
Paddle, our reseller, handles payments as the seller under its own privacy policy (see Payments above).
Some of these are outside the European Economic Area. Where that is the case, transfers are covered by the EU-US Data Privacy Framework where the company is certified under it, and otherwise by the EU Standard Contractual Clauses (with the UK addendum for UK data), as provided in each company's data processing terms.
People who work with us
As Bedrock Dictate grows, people who work with us, such as a support assistant, may see your account details and support messages, only to help you. They are bound to keep them confidential.
Downloads from other sites
When you install the speech model or Auto-edit, the app downloads them directly from Hugging Face and GitHub. Those sites see your IP address when you download, as with any download, under their own privacy policies. After that, speech recognition and Auto-edit work offline. The app also checks for updates by downloading a small file from our download site, which sees your IP address in the same way.
Our legal basis (for people in the EU and UK)
- To provide your account (sign in, emails, profile): because it is necessary for our agreement with you.
- To keep the service secure (rate limits, breach checks, session records): our legitimate interest in protecting you and the service.
- To run your plan (weekly minutes, trial dates, subscription details): because it is necessary for our agreement with you. Keeping hashed trial records after an account is closed or erased: our legitimate interest in offering one free trial per person.
- To keep records after you close your account (who you are, when you signed up, your plan and payment history, what you agreed to): our legal obligations for accounting and tax, and our legitimate interest in handling disputes and questions about past purchases.
- To email you about Bedrock Dictate (waitlist): with your consent, which you give by signing up and confirming your email. You can take it back at any time by leaving the waitlist.
- To send product news by email, and to see whether it is opened and clicked: only with your consent, which you give by ticking the box when you create your account and can take back at any time in the app.
- To answer support requests: our legitimate interest in helping you.
How long we keep data
- Account data: for as long as you have an account. When you close it, your profile picture and synced settings are deleted straight away, and the rest (your name, email, sign-up date, plan and payment history, and what you agreed to) is kept for as long as the law requires us to keep accounting and tax records, then deleted, unless you ask us to erase it sooner and the law allows it.
- Sign-in sessions: until you sign out, or 30 days after you last used the app.
- Sign-in attempt records: a few minutes.
- Waitlist sign-ups: until you leave the waitlist. Sign-ups never confirmed are deleted after 30 days.
- Weekly speech minutes and daily totals: for as long as your account is kept.
- Support conversations: for as long as your account records are kept, then deleted with them, or sooner if you ask us to erase your details.
- Free trial records: a scrambled (hashed) version of your email address and of each PC's id that has had a trial are kept after your account is closed or erased, only so the same person or PC cannot start a new free trial. They cannot be turned back into your email address.
- When we erase your details, they are deleted straight away. Copies in our database provider's backups are removed within 1 day.
Your rights
Wherever you live, you can:
- See and download your data: in the app, Profile, Download my data.
- Correct it: change your name, email and picture in the app.
- Close your account: in the app, Profile, Close account. You are signed out on every device and get no more product news. Signing in again reopens it. With a paid subscription, cancel it first; the app lets you close it once the time you paid for has ended. To have it closed sooner, email [email protected].
- Have your details erased: email [email protected] and we erase everything we hold on you, except what the law requires us to keep. Payment records are held by Paddle, our reseller, under its own legal duties.
- Object to or restrict processing, or ask any question: email [email protected].
We answer within one month.
If you are in the EU or UK and are unhappy with how we handle your data, you can complain to your local data protection authority. In Malta, that is the Information and Data Protection Commissioner.
If Bedrock Dictate is sold
If Bedrock Dictate is sold, your account data passes to the new owner, who must keep the promises in this policy. We tell you before it happens.
Children
Bedrock Dictate is not meant for children. You must be at least 16 to create an account.
Changes
If we change this policy in a way that matters, we tell you in the app or by email before the change takes effect.
Version 2026-09-30-draft