Privacy policy

Who we are

Rodani is made and sold by Theodoros Mastromanolis, based in Greece. For the data described here, Theodoros Mastromanolis is the data controller under the EU General Data Protection Regulation (GDPR).

For anything about your data, write to [email protected].

What we collect and why

• When you buy: your email address and the name you give at checkout, what you bought, the amount, the currency, the date and Stripe's reference for the payment. We need them to issue your licence, send you the key and keep the records the law requires. We never see or store your card details; Stripe handles the payment.
• Your account: an account is created with the email address you bought with, so you can see your licence again. You sign in with a one-time link we email you. There is no password.
• Licence checks: when you activate Rodani and each time it starts, the app sends us your licence key, a hashed PC id and the app version. We store the hashed id, the version, when the PC was added and when it last checked. This is how one licence is limited to 2 PCs. The id is a one-way hash of a Windows identifier: we cannot read the original from it, but it is linked to your licence.
• Update checks and downloads: the app asks this site whether a newer version exists. That request carries nothing about you or your PC. As with any request on the internet, our server sees the IP address it comes from.
• Server logs: our server keeps a technical record of events such as a licence being issued or activated. It holds internal ids of accounts, licences and payments, not email addresses or licence keys. We use it to find faults and misuse, and keep it for up to 6 months.
• Messages you send us: if you write to us, we keep the conversation for as long as it takes to help you.

The legal grounds are the contract with you (issuing and checking the licence, your account), our legal obligations (tax and accounting records) and our legitimate interest in keeping the service secure and working (logs).

We do not use analytics, advertising or tracking, on this site or in the app. We send no newsletters. We make no automated decisions about you, and we do not sell your data.

What stays on your PC and never reaches us

Rodani has no cloud of its own. The following are kept on your PC only, and we cannot see them:

• Your logbook: the text of each dictation, its time and length, the project, and the name of the app and the window title you dictated into.
• Your most recent recordings (up to 50), settings and API keys.
• A log file the app writes to help with faults. It contains dictated text and window titles, so read it before you send it to anyone.

Your transcription provider and AI clients

To turn speech into text, the app sends your audio and your glossary straight from your PC to the provider you chose (OpenAI, xAI or Mistral), with your own API key. If you turn on clean-up or ask for a summary or a prompt suggestion, the text involved is sent to the same provider. This happens under your own agreement with that provider, and its privacy policy applies. It never passes through us.

If you turn on the MCP server and approve an AI client, what that client reads from your logbook travels through ngrok to that client. That, too, is under your own accounts with them.

Cookies

This site uses only the cookies it needs to work, so there is no cookie banner to accept:

• Sign-in cookies, set when you sign in to your account, that keep you signed in.
• A language cookie ("locale"), set only if you change the language, kept for one year.

Who else handles your data

We use a small number of companies to run the service. They handle your data only to provide it:

• Stripe: payments. Stripe also uses payment data for its own purposes, such as preventing fraud, under its own privacy policy.
• Supabase: the database and sign-in, stored in the European Union.
• Resend: delivery of the two emails we send, the licence key and the sign-in link.
• Our hosting provider, which runs this website.

Data outside the EU

Some of these companies are based in the United States. Where your data leaves the European Economic Area, it is protected by the EU-US Data Privacy Framework or by the European Commission's standard contractual clauses.

How long we keep it

• Your account and licence: for as long as you have the account.
• The PCs on a licence: until you remove the PC, in the app or on your account page, or the licence is deleted.
• Purchase records: for as long as tax and accounting law requires, even after the account is deleted.
• Server logs: up to 6 months.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable form. Write to [email protected] and we will answer within one month.

To delete your account, write to us from the email address you bought with. Deleting the account also deletes your licence, so Rodani will stop working on your PCs. We keep only the purchase records the law requires.

If you think we have handled your data wrongly, you can complain to the Hellenic Data Protection Authority (www.dpa.gr) or to the authority of the EU country you live in.

Changes

If we change what we collect, we will update this page and its date.