← VoiceFlow
Legal

Privacy Policy

Version 2.0 · August 2026 · 152-FZ (Russia)

In brief

This Policy describes what personal data the Iskrio service processes, for what purposes, on what legal grounds and for how long, and what rights you have. We process the minimum amount of data and store it within Russia.

Three promises

  • Your voice leaves no trace: neither the audio nor the recognised text is stored on the recognition side.
  • Your data is not used to train AI models.
  • We do not sell your data or share it with advertisers.

Who processes your data

The personal-data operator is Individual Entrepreneur Irina Nikolaevna Rybnikova (INN 781428329987, OGRNIP 326784700298085, St. Petersburg, Korolyova Ave. 30). For any data-related questions, write to support@iskrio.ru. This Policy explains what data we process and how we protect it; it is drawn up under Federal Law No. 152-FZ of 27 July 2006 "On Personal Data".

How your voice is processed

The recorded audio is recognised by the provider Yandex (Russia). Neither the audio nor the recognition result is stored on the provider's side. If you choose AI processing, the recognised text is sent to GigaChat (Russia) for formatting and processed under GigaChat's policy; we do not store this text on our side. In "Verbatim" mode the AI step is skipped. The final text is inserted into your active application. All processing takes place on servers in Russia.

What is sent to the server during dictation

DataWhereRetention
Audio recordingYandex (RF)Not stored
Recognition resultYandex (RF)Not stored
Text for AI processingGigaChat (RF)Per GigaChat's policy; not stored by us
App contextGigaChat (RF)Not stored
Dictionary termsGigaChat (RF)Not stored

The name of the specific application is not sent to the server — only an anonymised category.

What stays on your device only

  • Your personal dictionary of terms
  • Settings: hotkey, AI mode, language
  • Dictation history — in the app and in the MCP integration with your IDE

What data we collect

  • Email address — when you sign in (via a code sent to your email or via Yandex ID / VK ID)
  • Name and account identifier — if you sign in via Yandex ID or VK ID and the provider shares them
  • Technical data: IP address, device, browser and operating-system type
  • Usage statistics: number of recognition minutes and requests — for plan accounting
  • Cookies — see the separate "Cookies" page
  • Anonymised visit analytics — only with your consent

Payment data — card numbers and details — is processed exclusively by the payment service YooKassa. We neither see nor store your card numbers: we keep only an anonymised payment-method token and the last 4 digits of the card for display in your account.

Why we process data

  • To create and manage your account
  • To provide the speech recognition and processing service
  • To accept payment and manage your subscription
  • To count usage within your plan
  • To respond in support and ensure security
  • To improve the service based on anonymised statistics
  • To send service emails: sign-in confirmation, payment, renewal, security

Legal basis

We process data on the basis of your consent (clause 1, part 1, article 6 of 152-FZ), given at registration, and to perform the contract — the Public Offer (clause 5, part 1, article 6 of 152-FZ). Consent to optional informational emails is requested separately and can be withdrawn at any time.

Signing in

You can sign in with a one-time code sent to your email, or via Yandex ID or VK ID. All three methods work through Russian services and your data stays in Russia — no cross-border transfer of personal data outside the RF takes place.

How long we keep data

  • Account data (email, profile) — for the whole period of use and 1 year after account deletion
  • Audio and recognition result — not stored
  • Text for AI processing — under GigaChat's policy; not stored on our side
  • Dictation history — on your device, until you delete it
  • Payment information — as required by RF law (at least 5 years for accounting documents)
  • Payment-method token — until you unbind the card
  • Usage logs — in anonymised form

Your rights

  • Obtain information about how we process your data
  • Request that it be corrected, blocked or deleted
  • Withdraw your consent to processing
  • Delete your account with all associated data
  • Complain to Roskomnadzor (rkn.gov.ru) if you believe your rights have been violated

To exercise these rights, write to support@iskrio.ru stating your account email. We will respond within 14 days.

Data stays in Russia

The personal data of RF citizens is stored and processed in a database located within the Russian Federation, as required by part 5, article 18 of 152-FZ. No cross-border transfer takes place.

Changes to this Policy

We may update this Policy. The current version is always available at iskrio.ru/privacy. If you continue using the service after changes, you accept the updated version.

Contact us

Questions about data processing — support@iskrio.ru.