Privacy Policy
Last updated: 2 June 2026 · Applies to saytogo.com and the Say2Go apps for Windows, macOS and Android
Say2Go turns your speech into text. We've built it to collect as little as possible: your audio is streamed for transcription and then discarded — it is not stored on our servers or used to train AI models. This policy explains exactly what we do collect, why, and the rights you have.
1. Who we are
Say2Go is operated by RoraLabs Ltd ("we", "us", "our"), the data controller for the personal data described in this policy.
- Registered company: RoraLabs Ltd, company number 17174536, England & Wales
- Contact: [email protected]
- ICO registration: ZC152425
2. The data we collect
| Data | Why we collect it | Lawful basis (UK GDPR) |
|---|---|---|
| Email address (paid plans) | To create and manage your account and licence | Contract |
| Word count / usage stats (words today, WPM, streak) | To enforce trial limits and show your usage | Contract / Legitimate interests |
| Anonymous device identifier | To link a licence to your devices (device limits) | Legitimate interests |
| Settings you choose (language, custom vocabulary, auto-corrections) | To make the app work the way you set it | Contract |
| Voice audio | Streamed to produce your transcription, then discarded (see §4) | Contract |
| Payment details | Handled by Paddle — we never receive your card number (see §5) | Contract |
We may also store support emails you send us and server-side request logs (including IP addresses) for security and debugging purposes. Logs are retained for no more than 90 days.
3. How we use your data
- To provide transcription and the app's features.
- To create, secure and manage your account and subscription.
- To enforce trial limits and device limits.
- To respond to support requests and important service notices.
- To comply with our legal obligations.
4. Your voice & audio — what actually happens
When you dictate, your audio is streamed over an encrypted (TLS) connection to our transcription service at whisper.saytogo.com, which uses the Deepgram Nova-3 speech model. The text is returned to your device and the audio is discarded immediately after processing. We do not keep voice recordings on our servers, and we have enabled model-improvement opt-out so your audio is not used to train models.
In Meeting mode, the audio is temporarily stored on your device only while the recording is in progress. When you stop the recording, that audio is sent to our server for transcription and then deleted from both the server and your device. No audio is retained after processing completes.
5. Who we share data with (sub-processors)
We share the minimum necessary data with service providers who help us run Say2Go:
- Deepgram — speech-to-text transcription.
- Paddle — our payment provider and Merchant of Record. Paddle handles checkout and your card details; we do not see or store full card numbers. See Paddle's privacy notice.
- Hetzner Online GmbH — server infrastructure and hosting (EU-based data centres).
We do not sell your personal data.
6. International transfers
Some providers may process data outside the UK/EEA. Where they do, transfers are protected by appropriate safeguards (such as the UK International Data Transfer Agreement / Standard Contractual Clauses).
Deepgram processes data in the United States. Paddle processes data in the United States and EU. Hetzner processes data in the EU (Germany). Where data is transferred outside the UK, appropriate safeguards are in place, including Standard Contractual Clauses or the UK IDTA.
7. How long we keep data
- Voice audio: not retained — discarded after transcription.
- Account & usage data: kept while your account is active and deleted within 30 days of account closure, except records we are required to retain for legal or tax purposes.
8. Your rights
Under UK GDPR you have the right to access, correct, delete, restrict or object to our use of your personal data, to data portability, and to withdraw consent where we rely on it. You can delete your account from within the app. To exercise any right, email [email protected].
You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
9. Cookies & similar technologies
Our website uses only what's necessary to function. The checkout is provided by Paddle, which may set cookies needed to process your payment.
The site currently uses no analytics or advertising cookies. We do not use tracking pixels or fingerprinting. Paddle may set functional cookies during checkout — these are necessary to process your payment and are not used for advertising.
10. Security
We use encryption in transit (TLS), our own transcription infrastructure rather than a third-party consumer app, and we limit the data we store. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your data.
11. Children
Say2Go is not directed at children under 13 and we do not knowingly collect their data. If you become aware that a child under 13 has provided us with personal data, please contact us at [email protected].
12. Changes to this policy
We may update this policy from time to time. We'll change the "last updated" date above and, for significant changes, notify you where appropriate.
13. Contact
Questions about this policy or your data? Email [email protected].