Pysar
Features How it works Platforms FAQ
Download

Pysar/Privacy Policy

Legal

Privacy Policy

In force from 20 August 2026. Covers the pysar.app site, the Pysar app and the licence purchase.

In short. Pysar recognises speech on your device; audio is not sent anywhere. Notes leave the device only when you turn on sync yourself, and only encrypted (section 7). The only personal data we process is your email address and the licence record, which we need to fulfil your order and provide updates. We do not use cookies, analytics or any trackers.

1. Who is the data controller

The controller of personal data within the meaning of Article 4(7) of the General Data Protection Regulation (GDPR) is:

FOP Yefremenko Dmytro Kostiantynovych
Contact email: [email protected]

For any question about this policy or the processing of your data, write to the address above. The details of the seller (the legal entity that takes the payment) are given on the Contact page.

2. What data we process

We keep the minimum needed to sell a one-time licence and support updates:

  • The buyer's email address, the one you entered at checkout.
  • The licence record (entitlement): the fact of purchase, the date, the product version, the activation status; tied to your email address, not to a device or an account.
  • Technical payment data, processed by the payment provider (section 4), not by us directly; we receive only the payment confirmation and the email address.

We do not collect audio recordings, transcripts, note contents, dictation history or any other content you create in the app. It does not leave your device (see section 7).

3. Legal basis for processing

Processing of the email address and licence record is based on Article 6(1)(b) GDPR: processing is necessary for the performance of a contract to which you are a party (selling and supporting the licence), and for taking steps at your request before entering into a contract (for example, issuing the trial).

4. Who receives the data

Data is shared only with the following categories of recipients, and only to the extent their function requires:

  • Payment provider (merchant of record): processes card payment and sales taxes and issues the invoice in its own name. It sees the payment data and your email address.
  • Cloudflare (hosting and licence server): hosts the site and the service that issues and checks licence keys. It processes the email address and licence record to perform this function.

We do not sell your data or share it with third parties for marketing. Both recipients may process data on servers outside Ukraine or the EEA; in that case the transfer is based on standard contractual clauses (SCC) or an equivalent mechanism provided for in their own privacy policies.

5. Retention period

We keep the email address and licence record while your licence is valid and for as long as needed to support it and deliver updates, and also for the period set by law for keeping records of business transactions (usually up to 3 years from the date of the last transaction). After that period the data is deleted or anonymised.

6. Your rights

As a data subject under the GDPR you have the following rights:

To be informed

To know what data we process and why. This page does exactly that.

Access

To get a copy of the personal data we hold about you.

Rectification

To ask us to correct inaccurate or incomplete data, for example a different email address.

Erasure ("right to be forgotten")

To ask us to delete your data when it is no longer needed for the purpose of processing.

Restriction of processing

To ask us to pause processing temporarily, for example while the accuracy of the data is disputed.

Data portability

To receive your data in a structured, machine-readable format and pass it to another controller.

Objection

To object to processing carried out on the basis of legitimate interest.

Rights related to automated decisions

We make no automated decisions and do not profile you; this item is listed for completeness.

To exercise any of these rights, write to [email protected]. We reply within one month of receiving the request. If you believe the processing of your data violates the GDPR, you have the right to lodge a complaint with a supervisory authority: in Ukraine this is the Ukrainian Parliament Commissioner for Human Rights, and for residents of the EU, the data protection authority of your country of residence.

7. Audio, transcripts and sync

Speech recognition in Pysar happens entirely on your device. Audio and transcripts are never sent to our servers or any third-party servers, not for recognition, not for analytics and not for improving the model.

Notes leave your device only when you turn on sync yourself, and only encrypted. The encryption key is derived from your sync password right on the device and is not sent anywhere, so neither we nor the cloud owner can read the contents.

You choose where the data is stored. Your own cloud (for example iCloud or Google Drive): the encrypted files sit in storage that belongs to you and do not pass through our servers at all. Pysar Sync: the encrypted files pass through our server to reach your other device; we see only their number, size and the time of access, not their contents.

You can remove them from there yourself at any time: the settings have a button that permanently deletes all your files from our server. The notes on your computer stay; only what was stored with us disappears.

8. Cookies, analytics, trackers

The pysar.app site does not use cookies, analytics scripts, pixels or any other trackers, so no cookie consent banner is needed: there is nothing to consent to. The app itself has an anonymous statistics switch, off by default; see section 10.

9. Problem report

If the app misbehaves, you can send us a report, but only by pressing a button in the settings, and only after you have seen what exactly will be sent. Before sending, Pysar shows the list of files in the report, and the report itself stays on your computer whether you send it or not.

The report contains technical details about how the app runs: service records of launches and errors, the app and system version, the list of installed models, the amount of memory. It never contains audio, dictated text, your notes, history, passwords or access keys.

Reports are kept for 90 days and then deleted. Your IP address is not recorded. Consent is asked for anew every time: there is no "don't ask again" here and there will not be.

10. Anonymous statistics

The settings have an anonymous statistics switch. It is off, and until you turn it on, nothing is sent. Next to it is a button that shows the live data of your own device: not a sample, but the exact set that will be sent if you agree.

What it contains: the app and system version, the device type, the amount of memory, which recognition model you chose, how fast it runs, the interface language and how many days the app has been installed. Along with this, a random installation number is sent; it is created when you turn the switch on, disappears when you turn it off, and is needed only so that the same computer is not counted twice.

What it does not contain: dictated text, notes, recordings, file paths, the number of your notes or dictations, the languages you dictate in, or your IP address. Data is sent no more than once a week and kept for 180 days. We cannot extend this list silently: every new field requires new consent.

11. Changes to this policy

We may update this policy when the product or the law changes. The date at the top of the page always shows the latest update; we will notify you of material changes at the email address you gave at purchase.

12. Contact

Questions about this policy or requests about your data: [email protected]. General support questions and the imprint are on the Contact page.

Download Captivo Features FAQ Privacy Terms Refunds Contact
Made in Ukraine