BondVoxPrivacy policy
Last updated 2 November 2026
This policy covers the BondVox app for Android (com.beviond.bondvox), the BondVox Chrome extension, the BondVox desktop app for Windows and bondvox.com, made by Beviond ("we"). Questions: [email protected].
What we collect
- Account: your email, display name and a hashed password (stored by our sign-in provider). If you turn on two-step sign-in, your authenticator secret and hashed recovery codes.
- Devices: a device name and type and when it was last active, so we can apply your plan's device limits.
- Word counts: how many words you dictate each week, for your plan's limit (Free 3,000, Plus 10,000, Pro up to 30,000 a week). We count words; we don't keep the words.
- Sync (only if you turn it on): your dictionary, snippets and recent history, stored with your account so your other devices can use them.
We don't sell your data, show ads, or use any data for advertising or tracking. We don't collect your contacts, location or files.
Your voice and text
BondVox records audio only while you are dictating (after you tap or hold the BondVox button, until you finish). The audio is sent over an encrypted connection to a speech provider only to turn it into text. The text may then be sent to an AI provider to tidy it up (remove filler words, fix punctuation, apply your style or translate). BondVox does not keep your recordings or dictated text on its servers, and training is off: audio is never used for training, we don't use your audio or text to train models, and our providers' API terms don't allow them to train on it. Providers may keep request data briefly for security and abuse monitoring as their API terms allow, then delete it.
Your account data is stored with Supabase on servers in Sydney, Australia.
Recent dictations are kept on your device in History, which you can turn off or clear. Error details shown in Settings › Last errors stay on your device and are never sent to us.
Who processes your data
| Service | What it gets | Why |
|---|---|---|
| Supabase | Account, devices, word counts, two-step data, synced items | Sign-in, database and server functions (servers in Sydney, Australia) |
| Soniox | Dictation audio, and your word list as context while Learning is on | Speech to text (audio is streamed over an encrypted connection while you dictate) |
| OpenAI | Dictation text, your style rules while Learning is on (and audio if Soniox is unavailable) | Clean-up, styles, translation, commands on selected text, backup speech to text |
| Resend | Your email address and the message | Account emails (confirm address, reset password, security alerts) |
| Cloudflare | Standard web request data | Hosting bondvox.com |
None of these services receives your password. Data is encrypted in transit (HTTPS/TLS).
Accessibility service
BondVox uses Android's Accessibility service so it can show the dictation button in the text field you're using and type your dictated words into that field. It looks at which field is focused, where it is, what kind of field it is (so it never works in password fields), which app is open (for per-app styles and apps you turned off), and the field's text and cursor at the moment it inserts your words. This information is used only on your phone, only for those purposes, and is never collected, stored, shared or sent to us. The app asks for your consent before you turn the service on, and you can turn it off at any time in Android Settings › Accessibility.
Microphone and background use
BondVox needs the microphone permission to hear your dictation. Because you dictate while another app is on screen, BondVox runs a foreground service with a visible notification while it is recording, so recording isn't cut off. The microphone is never on unless you started a dictation, and it stops when you finish or cancel.
Chrome extension
The BondVox extension for Chrome (Manifest V3) asks for these permissions:
- activeTab and scripting: to show the dictation button and type your words into the page you're on, only when you use BondVox there.
- storage: to keep your settings, recent history and snippets on your computer.
- offscreen: to use the microphone while you dictate, and the clipboard when a page won't accept typed text.
- identity: only if you choose "Sign in with Google".
- Site access: bondvox.com and our Supabase server, for your account. Access to all websites is optional: it's only asked for if you turn on the button on every site, and you can turn it off at any time. Access to api.soniox.com or api.openai.com is optional too, and only asked for if you add your own provider keys.
The microphone is used only while you dictate. Settings, history and snippets are stored in the extension's local storage on your computer. Sign-in details and any provider keys you add are stored in the extension's own database, which web pages can't read. If a page won't accept typed text (for example Google Docs), BondVox copies the text to your clipboard so you can paste it.
Windows desktop app
The BondVox app for Windows uses:
- Microphone: only while you dictate. It stops when you finish or cancel.
- Keyboard shortcut and typing: to start dictation from any app and type your words where your cursor is.
- Which app is in front: its name and window title, used only on your computer for per-app styles and the safety blocks below.
- Clipboard: used for Paste last and for commands on selected text (BondVox copies the selection to read it, or pastes the result). Your previous clipboard is put back afterwards, unless something else changed it in the meantime.
- Notifications and start at sign-in: only if you turn them on.
Safety blocks: BondVox never works in banking apps and websites. You can also add any app or website under "Never in this app", or Pause BondVox from the tray icon. While blocked or paused, the button stays hidden, the shortcut does nothing, and BondVox doesn't read or change selected text.
Settings and history are stored in your Windows user folder (%APPDATA%\com.beviond.bondvox). Any provider keys you add are kept in Windows Credential Manager.
We email you only for your account: confirming your address, password reset links, and security alerts such as "two-step sign-in was turned off". We never send sign-in codes by email.
How long we keep data
Account data is kept while you have an account. Cloud history is kept for 2 months on the Free plan, and history on your phone or computer is deleted after 2 months on the Free plan too. Turning sync off deletes the cloud copy. Deleting your account deletes everything listed above straight away. Encrypted server backups and logs at our database host clear within 7 days. Full details: bondvox.com/delete-account.
Deleting your account
You can delete your account and all its data at any time:
- In the app: Profile & Settings › Delete account. Enter your password (and your two-step code if it's on) and confirm.
- On the web: bondvox.com/delete-account. Sign in with your email and password and confirm.
- By email: if you can't sign in, email [email protected] from the address on your account. We'll delete it within 30 days.
Deleting removes your account, email, name, devices, word counts, two-step data and synced dictionary, snippets and history from our servers. Nothing is kept afterwards, except where the law requires us to keep records of a purchase.
Children
BondVox isn't directed at children under 13, and we don't knowingly collect their data.
Changes
If we change this policy we'll update the date above and, for important changes, tell you in the app.