Data & privacy
Updated 26 September 2026. Everything below was checked against the code and the database on that day.
The website (sign-in page)
The public pages have a single form — sign-in: login, password and, after several failed attempts, a simple arithmetic check. No consent boxes, no "name, phone, email" fields — there is no self-registration.
No third-party trackers or scripts: no Google Analytics, no Yandex.Metrica, no social pixels, no chat widgets. The Roboto font is served from our own server, not from Google. The page contacts no third-party server at all: outsiders cannot even see that you opened it.
Server logs
The web server (Caddy) keeps no access log for voice.europiir.io. The application writes a technical log — time, request path, response code — without visitor addresses: behind the proxy it only sees an internal address.
The exception is the sign-in journal. Every sign-in to the web office or the apps records: login, time, device ("Laptop 4F2A", "Phone 91C0" — no computer name or phone model), success or failure, and the IP address truncated to the first two octets (e.g. 2.132.x.x). The full address is not recorded anywhere. This is enough to see where sign-ins to your account came from and to notice password guessing. The journal is kept for 90 days; older entries are deleted automatically.
Web office and apps
Your account is created by the Europiir administrator; you cannot register yourself. The database holds about you:
| What | Why | How long |
|---|---|---|
| Login | sign-in | while the account exists |
| Password — as an irreversible hash only | sign-in; we do not know the password and cannot recover it | while the account exists |
| Email (optional, empty by default) | only for the "forgot password" link; no mailings | until you clear it in the office |
| Device keys: device kind with a short number ("Laptop 4F2A"), last use, app version | so the app works without a password and you can disconnect a lost laptop | until you revoke the key |
| Dictation history: recognised text, "what the model heard", language, duration, name of the app you dictated into | to find and copy a text again | last 500 entries; any can be deleted, the whole history with one button |
| Minutes and words per day | weekly limit and statistics — no text | indefinitely |
| Reports: your description of a problem and the app's technical log | to investigate a failure; sent only on your action or when the app crashes | until closed |
Audio matters most. The microphone recording is sent for recognition and deleted from the server right after the reply, whatever the outcome. There is not a single stored recording on the server. On your device a recording lives only until it is sent (without network — up to a day, no more than three recordings), then it is deleted.
The Windows app's technical log that goes with a report contains only the type of window you dictated into (e.g. "browser window", "Qt window") — no titles, chat names or computer name. It contains no dictated text. When the Android app crashes, the phone model is included in the report: a crash cannot be investigated without it.
Cookies
One cookie — vt_session: a random session number so you do not retype
the password on every office page. It lives 30 days, is invisible to scripts, is sent
over HTTPS only and is cleared by "sign out". The site stores and tracks nothing else
in your browser.
Who we share with
| Who | What | Why |
|---|---|---|
| Groq (USA) | the audio and the recognised text; with them, the company's list of names and terms for correct spelling | speech recognition and text clean-up. Under Groq's terms, API data is not used to train models |
| Brevo (EU) | your email address and login — only if you pressed "forgot password" and an email is set | delivering the reset link |
| Telegram | a notice to the administrator: login and the first line of a report or feedback | so the developer learns about a problem at once |
Nobody else. Ad networks, data brokers, payment services — nothing: there are none here.
Where it is stored
On a single rented server in the United Kingdom (Hostinger, Manchester). A database backup is taken once a day and kept there for two weeks. Backups hold the same truncated addresses. We have no servers in Russia — one of the reasons we keep the data set minimal.
How to see what is recorded about you
Everything is visible in the web office: "History" — your dictations, "Password and devices" — your keys, sign-ins with addresses and email, "Reports" — your reports. There is nothing hidden beyond this; the full list of database fields is above.
How to delete
- History — the "delete" and "clear my whole history" buttons in the office, immediately.
- A device key — "revoke" in the office, immediately.
- Email — clear the field and save.
- The whole account — write to the administrator; login, password, keys, history and reports are deleted. Minute counts remain without a link to the login (needed for the company's costs); the sign-in journal disappears by itself after 90 days.
Contact
For any data question — Igor Tintunen, Europiir Logistics: igor@ailema.com.tr.
← Back to the site