Privacy policy

Last updated: 27 July 2026

Who processes the data

Data controller: Roberto Collura, Strada Casanova 5, 42024 Castelnovo di Sotto (RE), Italy. Italian tax code CLLRRT80L10H223G. For any request: collu1980collu@gmail.com.

The underlying principle

Dimmi Tutto is designed to process as little data as possible. In offline mode transcription happens entirely on the user's device, and no voice or text content reaches our systems or anyone else's.

What is processed, and why

• Dictation audio. In offline mode it never leaves the device. In cloud mode it is sent to the transcription provider for as long as it takes to produce the text, and is not retained by us.
• Transcribed text. Stored locally in the history on the user's device. It is not uploaded to our servers.
• Personal dictionary. Synced to our servers only if the user is on a plan that includes syncing.
• Account data (email address). Only for users who create an account: used to authenticate them and manage the subscription.
• Word count. For plans with a quota, the number of words transcribed in the period — a number, not the content.
• Payment data. Handled by the payment provider; we neither see nor store card details.

Legal bases

Performance of the contract for the service's functions and subscription management; legitimate interest for security and abuse prevention; legal obligations for tax records.

Third-party providers

• Paddle.com Market Ltd (United Kingdom) — payment and subscription handling, as seller towards the end customer.
• Supabase Inc. (United States) — account backend and personal dictionary syncing.
• Groq Inc. (United States) — cloud speech transcription.
• OpenRouter Inc. (United States) — automatic correction of the transcribed text in cloud mode.
• Cloudflare Inc. (United States) — website delivery and hosting.
• Google Ireland Ltd — only for people who choose to sign in with a Google account: we receive the verified email address in order to create and recognise the account. Anyone signing up with email and password never touches it.

Standard contractual clauses apply to transfers outside the European Union.

Retention

Audio sent in cloud mode is not retained beyond processing. Account data is kept for as long as the account exists and is deleted within 30 days of closure, except for records the law requires to be kept.

Your rights

Access, rectification, erasure, restriction, portability and objection to processing, by writing to the address above. You may also lodge a complaint with your national data protection authority.

Cookies and local storage

This site uses no profiling cookies and no analytics that identify visitors, which is why no consent banner appears. We load no fonts, scripts or images from third-party domains.

One exception, and only if you ask for it. When you press “Start the subscription” in your account area, the browser loads Paddle’s payment script at that moment, which opens the secure window where you enter your card details. Before that click it is never contacted: visiting the site, signing in and looking at your usage make no requests to third-party domains. The script is strictly necessary for the payment you asked for, and your card details go to Paddle, not to us: they never pass through our systems.

On the sign-in pages and in your account area, the browser keeps in its own local storage the token that holds your session open, so you are not asked for your password on every page; for the length of the visit only, it also remembers whether you dismissed the language notice. These are strictly necessary technical items: they do not follow your browsing and need no consent. They are cleared when you sign out or clear the site data in your browser.

Use of artificial intelligence

Dimmi Tutto transcribes speech and polishes the text using artificial intelligence models: the processing is automatic and no person is involved. No automated decisions are taken that produce legal effects for the user.