Privacy Policy

1.What stays on your computer

Everything LoudFlow uses to make speech stays on your computer: the text you paste or select, the audio it makes, the voices it ships with, the recordings you make, your settings and its own diagnostic log.

Making speech needs no internet. That is the product, not a setting.

The app uses your welcome-tour answers on your computer to set itself up. Example: it starts in the fast mode when your computer is slow. This use never leaves your computer.

Each account keeps its own voices, texts and settings. Two accounts on one computer never see each other’s things. A new account starts empty.

2.Your language and region

The app reads which language Windows uses, so it speaks your language. It reads your Windows region, so voices with your accent come first.

Both stay on your computer. We do not receive them, do not save them with your account and do not use them for statistics.

We never try to find out where you live. Not from your IP address, not from your email address, not in any other way.

Change the app’s language anytime in Settings › General.

The app’s language reaches us in two cases only: with your agreement to the Terms, so we know which wording you saw. And with your welcome-tour answers, if you said yes to sharing them.

3.What we hold when you sign in

Your account: your email address, an account identifier and the times you signed in.

What you agreed to: which version of the Terms you agreed to, which version of this page you saw, in which language and when. You agree with the tick on the sign-in screen (see “Agreeing” in the Terms).

Your answer to “Help us improve?”, with its time.

That is what an account is. We send you no marketing emails.

Each computer you use: its name as Windows reports it, its operating system, the app version, a public key and when it was last seen. No content. We use this record for one thing only: to know which computers are yours.

4.Your welcome-tour answers, only with a yes

Right after your first sign-in, LoudFlow asks “Help us improve?” and shows what would be sent. Yes and No are two buttons of the same size. Nothing is sent until you choose Yes.

Change your answer anytime: on the first page of the welcome tour, or in Settings › Data & privacy.

With a Yes, we save with your account: your choices in the tour (what you want read to you, why you listen, speed or best voice, whether you made your own voice or picked one), which tour pages you saw and for how long, which version of the tour you saw, the app version and language, and, after your first day, how many texts were read and how fast your computer made speech.

Never your texts, recordings, voices or name.

How reading feels to you (easy, okay, tiring or very hard) needs a second switch, right under that question. It is off until you turn it on. A Yes to the first question does not include it.

This answer can say something about your health. So we take it only with that separate, explicit yes. Without it, the answer stays on your computer.

These answers are linked to your account, so they are not anonymous. Your account can read only its own row. We, the makers, can read all rows in our database’s admin view.

We use them for two things only: to see which version of the tour works better, and to understand whom LoudFlow helps, for example how many people find reading hard, so we build it for them. Never for advertising. Never sold. Never passed on.

Turn the first switch off (in the tour or in Settings), and we delete what was sent. Turn off only the second switch, and we remove your reading answer. Otherwise they stay until you delete your account.

Totals from many people together, for example how many chose the fast voice, point to nobody. We keep them after you stop sharing.

5.Error reports, only if you switch them on

Switch on error reports in Settings, and the app sends PostHog (servers in Frankfurt, Germany) the app version, your Windows version and what went wrong. Never your texts, your name or your voices.

The report carries no IP address. PostHog’s servers see the address of the connection, as any server does.

Switch it off, and the random identifier the reports used is deleted.

6.Visiting this website

We count visits to loudflow.ai with PostHog (servers in Frankfurt, Germany). We want to see which pages help, where people stop and where something breaks, so we can fix it.

With every page you open, your browser sends:

• the address of the page and of the page that sent you here (without anything after a “?”, except the utm_ tags that say which link it was)
• your browser and its version
• your operating system and its version
• the kind of device (computer, tablet or phone)
• the size of your screen and window
• the language your browser is set to.

On top of that:

• which links and buttons you press, with their wording and where they lead
• that you left a page, and how far down you had scrolled
• which parts of a page you reached
• on the waitlist: whether its window opened and closed, whether you tapped the email field, pressed Join or left without pressing it. Never what you typed.
• errors in the page’s own code, with the message and where it happened.

Not collected:

• anything you type into a form
• screen recordings and mouse movements
• your time zone and your location
• your IP address (see below).

The website’s own code switches these off. So nobody can turn them on in PostHog without changing this page first.

Counting needs no cookies and stores nothing in your browser (unless you ask not to be counted, see below). To tell visitors apart for a single day, PostHog’s server mixes your IP address and your browser with a random value that changes every day. It keeps only the result and does not store the IP address.

Nothing links one day to the next. Nothing links a visit to a person or to a LoudFlow account. PostHog keeps these counts for one year.

If your browser sends Do Not Track or Global Privacy Control, the counting script does not even load.

Do not want to be counted? Open loudflow.ai/?count=off once. Your browser then keeps one marker (“lf.nocount”) and is not counted again. loudflow.ai/?count=on removes it. Automated and test browsers are not counted either.

Feedback page: we keep your message, the page you came from, the time and, only if you give it, your email address. We forward it to our mailbox.

Waitlist: we keep your email address, the kind of computer your browser reports (Windows, Mac, phone or other) and the time. We forward it to our mailbox. We use the address for one thing: to tell you when LoudFlow is ready for your computer.

In both cases PostHog is told only that it happened: for feedback, from which page and whether you left an address; for the waitlist, which kind of computer. Never what you wrote, never your address.

7.A free month for your answers

On loudflow.ai/free-month you can get a free month of Pro. You give LoudFlow one to five stars and say in a few words what you like and what could be better.

You sign in first, so the month reaches your account. To check that it is you, we ask Supabase whom your sign-in belongs to. Your answers never go there.

We keep: your stars, your two answers, the time, your account identifier and email address, the end date of your month, and that you ticked “I agree that LoudFlow reads my answers to improve the app.”

What for: we read your answers to make LoudFlow better. Never for advertising. Never sold. Never passed on.

Where: at Cloudflare, and as an email in our mailbox at Gmail, so we can answer you. PostHog is told only that it happened. Never your stars, your answers or your address.

How long: one year, even if you delete your account sooner. Then the stored answers delete themselves. The email stays until you ask us to delete it.

Changed your mind? Write to loudflow.app@gmail.com, and we delete your answers. The free month stays yours.

8.When you use a second computer

Sign in on another computer with the same account, and a computer of yours that already has your voices lets it in by itself, then tells you its name. Not you? Remove it there with one click.

The switch “Sync with my other devices” (on the last page of the welcome tour, and in Settings › Devices) decides it. Switch it off, and nothing travels. We record which wording it carried, and when.

What travels: the voices you saved (the short reference recording, its name, language and transcript, and the settings measured from it) and your reading statistics. Not your texts, and not the generated audio.

How: your computer encrypts everything before it is uploaded (AES-256-GCM). The key passes from one of your computers to the next, sealed with that computer’s own key, and every computer signed in to your account receives it. We store only the encrypted files and never hold the key. Because signing in is enough, keep your Google or email sign-in safe.

When it goes: once you are back to one computer, because you removed the other one in the app or it went unused for 60 days, we delete the encrypted copy at the next check. Removing a computer signs it out of your account.

A voice can identify a person. So we treat saved voices as sensitive data: they travel only encrypted, only to computers signed in to your account, and we never hold the key.

A recording of somebody else’s voice is their personal data. Only save a recording you made yourself, or one they allowed you to use.

9.Who else is involved

Supabase, our database and sign-in, servers in Zurich, Switzerland. It works on our instructions. Rules in the database let an account read only its own rows and its own files.

Google, only if you sign in with Google. Google tells us your email address and name, and knows that you signed in to LoudFlow. It handles that under its own privacy policy. Our mailbox is at Gmail, so Google also holds what you send through the feedback page, the waitlist or the free-month form, and anything you write to loudflow.app@gmail.com.

Resend (United States), only if you sign in with your email address. It delivers the email with your sign-in code, so it receives your email address and the code.

Cloudflare (United States) runs this website, including the page you come back to after a Google sign-in. Like every web host, it logs your IP address and the page you asked for, to deliver the site and keep it secure. It deletes those logs after a short time. It also stores what you send through the feedback page, the waitlist and the free-month form.

Cloudflare also hosts the installer and the updates, at dl.loudflow.ai. Downloading LoudFlow or checking for an update shows Cloudflare your IP address. Versions before 0.4.3 ask GitHub (United States) one last time, then move over.

PostHog (Frankfurt) counts visits to this website (see “Visiting this website”). It receives the app’s error reports only if you switch them on.

Nobody else. Nobody trains anything on your voice or your texts. Not us, and not anybody we work with.

10.Sending data abroad

Resend, Google, Cloudflare and GitHub are in the United States. Supabase and PostHog are US companies too, even though our data sits on their servers in Zurich and Frankfurt.

These transfers rest on the safeguards in each provider’s data processing terms: the EU standard contractual clauses, which Switzerland recognises, or the provider’s certification under the Swiss-U.S. and EU-U.S. Data Privacy Framework.

11.Why the law lets us

Your account, your computer records, the record of what you agreed to and the sign-in emails: we need them to give you the service you signed up for, and to show what was agreed.

Website logs and counting visits: our interest in a secure website that works, kept as small as described above.

Your feedback and your place on the waitlist: you asked us to take them.

Your free-month answers: you asked for the month and agreed that we read them (the tick). Withdraw anytime by writing to us.

The encrypted copy for a second computer, your welcome-tour answers and error reports: your consent. Withdraw it anytime with the same switch, or by removing the computer.

Your answer on how reading feels: your explicit consent to that one answer (Art. 9(2)(a) GDPR, Art. 6(7) Swiss FADP). Its own switch withdraws it.

No computer alone decides anything about you.

12.Cookies

This website sets no cookies and loads its fonts from its own server. Counting visits stores nothing in your browser (see above). If you ask not to be counted, one marker remembers that (“lf.nocount”).

This website keeps a sign-in in your browser, only if you sign in here. While Google checks it is you, the tab holds a one-time check value and deletes it when you come back. After that, your browser keeps the sign-in (in its local storage, not as a cookie), so the Account page knows it is you. Sign out deletes it.

On the free-month page, the tab also remembers for a moment where to bring you back after you sign in and, if you must sign in again, your answers that were not sent yet. Both are deleted as soon as you are back, or when you close the tab.

The app sets no cookies and keeps your settings on your computer.

There is no cookie to agree to. That is why no banner asks you.

13.How long we keep it

Until you delete it. Delete your account inside LoudFlow, and one step removes your rows, your computer records, your welcome-tour answers, your encrypted copies and the account itself. We hold no separate copy and no archive of your account.

When you delete your account we keep a one-way fingerprint of your email address for up to three years, so free months can’t be claimed twice.

Our host keeps backups of the database for a short period. They roll off by themselves.

Visit counts: one year at PostHog. Feedback: until you ask us to delete it. A waitlist address: until we have told you that LoudFlow is ready for your computer, or until you ask us to delete it, whichever comes first.

Free-month answers: one year at Cloudflare, then they delete themselves. The email in our mailbox until you ask us to delete it.

If a breach of our data is likely to put you at high risk, we tell you and the authority as quickly as possible.

14.Your rights

Under Swiss data protection law and, where it applies, the GDPR, you can ask what we hold about you, have it corrected, have it deleted, have its use limited, get a copy of it, or object to how it is used.

You can withdraw a consent at any time. What happened before stays lawful.

Write to loudflow.app@gmail.com. We answer within thirty days.

You may also complain to the Swiss Federal Data Protection and Information Commissioner (edoeb.admin.ch) or to the data protection authority where you live.

The controller is Lauro Maffei, the maker of LoudFlow, canton of St. Gallen, Switzerland, reachable at loudflow.app@gmail.com. A postal address is available on request.

15.Children

LoudFlow is not intended for people under 16.

16.Changes

If this page changes, the date at the top changes with it.

If a change matters for what the app does with your data, the version changes too, and the app shows you the page again before the change applies to you.

You do not have to accept this page. It informs you.

17.Languages

This page exists in English and in German (loudflow.ai/datenschutz). Both say the same. If they ever disagree, the version more favourable to you applies.