← VoiceFlow
Legal

Privacy Policy

Version 2.2 · October 2026 · 152-FZ (Russia)

In brief

This Policy describes what personal data the Iskrio service processes, for what purposes, on what legal grounds and for how long, and what rights you have. We process the minimum amount of data and store it within Russia.

Three promises

  • Your voice leaves no trace: neither the audio nor the recognised text is stored on the recognition side.
  • Your data is not used to train AI models.
  • We do not sell your data or share it with advertisers.

Who processes your data

The personal-data operator is Individual Entrepreneur Irina Nikolaevna Rybnikova (INN 781428329987, OGRNIP 326784700298085, St. Petersburg, Korolyova Ave. 30). For any data-related questions, write to support@iskrio.ru. This Policy explains what data we process and how we protect it; it is drawn up under Federal Law No. 152-FZ of 27 July 2006 "On Personal Data".

How your voice is processed

Speech recognition and text processing are performed within the Russian perimeter through the cloud infrastructure provider Cloud.ru (OOO "Oblachnye tekhnologii"). The recorded audio is sent into this perimeter for recognition. Neither the audio nor the recognised text is stored anywhere: the request content exists only in memory for the duration of processing and is deleted immediately after the response is produced (Zero-Data-Retention, stateless processing). If you choose AI processing, the recognised text is cleaned and formatted within the same perimeter on the same terms; we do not store this text on our side either. In "Verbatim" mode the AI step is skipped. The final text is inserted into your active application. All processing takes place on servers located within Russia, in compliance with 152-FZ; data is not transferred outside the RF and is not used to train models.

What is sent to the server during dictation

DataWhereRetention
Audio recordingCloud.ru (RF)Not stored
Recognition resultCloud.ru (RF)Not stored
Text for AI processingCloud.ru (RF)Not stored
App contextCloud.ru (RF)Not stored
Dictionary termsCloud.ru (RF)Not stored

The name of the specific application is not sent to the server — only an anonymised category.

What stays on your device only

  • Your personal dictionary of terms
  • Settings: hotkey, AI mode, language
  • Dictation history — in the app and in the MCP integration with your IDE

What data we collect

  • Email address — when you sign in (via a code sent to your email or via Yandex ID / VK ID)
  • Name and account identifier — if you sign in via Yandex ID or VK ID and the provider shares them
  • Technical data: IP address, device, browser and operating-system type
  • Usage statistics: number of recognition minutes and requests — for plan accounting
  • Cookies — see the separate "Cookies" page
  • Anonymised visit analytics — only with your consent

Payment data — card numbers and details — is processed exclusively by the payment service YooKassa. We neither see nor store your card numbers: we keep only an anonymised payment-method token and the last 4 digits of the card for display in your account.

Why we process data

  • To create and manage your account
  • To provide the speech recognition and processing service
  • To accept payment and manage your subscription
  • To count usage within your plan
  • To respond in support and ensure security
  • To improve the service based on anonymised statistics
  • To send service emails: sign-in confirmation, payment, renewal, security

Legal basis

We process data on the basis of your consent (clause 1, part 1, article 6 of 152-FZ), given at registration, and to perform the contract — the Public Offer (clause 5, part 1, article 6 of 152-FZ). Consent to optional informational emails is requested separately and can be withdrawn at any time.

Signing in

You can sign in with a one-time code sent to your email, or via Yandex ID or VK ID. All three methods work through Russian services and your data stays in Russia — no cross-border transfer of personal data outside the RF takes place.

How long we keep data

  • Account data (email, profile) — for the whole period of use and 1 year after account deletion
  • Audio and recognition result — not stored
  • Text for AI processing — not stored: it exists only in memory for the duration of processing and is deleted immediately after the response (Zero-Data-Retention, stateless)
  • Dictation history — on your device, until you delete it
  • Payment information — as required by RF law (at least 5 years for accounting documents)
  • Payment-method token — until you unbind the card
  • Usage logs — in anonymised form

Your rights

  • Obtain information about how we process your data
  • Request that it be corrected, blocked or deleted
  • Withdraw your consent to processing
  • Delete your account with all associated data
  • Complain to Roskomnadzor (rkn.gov.ru) if you believe your rights have been violated

To exercise these rights, write to support@iskrio.ru stating your account email. We will respond within 14 days.

Data stays in Russia

The personal data of RF citizens is stored and processed in a database located within the Russian Federation, as required by part 5, article 18 of 152-FZ. No cross-border transfer takes place.

Changes to this Policy

We may update this Policy. The current version is always available at iskrio.ru/privacy. If you continue using the service after changes, you accept the updated version.

Contact us

Questions about data processing — support@iskrio.ru.