Privacy policy

In short: Uvinta needs no account for the trial or with a license key and has no analytics or telemetry. Buying, and using a subscription, need a sign-in on this site with your email address. Speech is recognized on your Mac: the audio never leaves it. Text you translate, check or dictate stays on your Mac with the local models; it goes to an online model only if you subscribe to Uvinta Cloud and use its model. We learn who you are only when you buy a license or a subscription, sign in to your account or write to us. A key you bought is activated online: we learn which Macs it is in use on, not what you do with it.

1. Who is responsible

The controller of the personal data described here is Maksym Vzhesnievskyi, (“we”), established in Poland. Contact: info@uvinta.com.

2. The app: what stays on your Mac

• Your settings, the texts in the app's windows and, only if you turn them on, saved interpreter sessions and their recordings (both are off by default).
• Your license key and this Mac's activation permit, your subscription's token and pass, and the app's session of your account, in the macOS keychain.
• The date your trial started, in the keychain and in the app's data folder.
• The downloaded models and a log of errors.

We have no access to any of this. Settings → Appearance → Uvinta data shows how much space it takes and deletes it all; the date the trial started is kept so that the trial is not given twice.

3. The app: what leaves your Mac, and to whom

The app sends nothing else: no usage statistics, no crash reports, and no identifier other than the hash of your Mac and the sessions named above.

4. The typing assistant, the microphone and system sound

To suggest words and corrections where you type, the typing assistant uses the macOS Accessibility and Input Monitoring permissions to read the text of the field you are in and to notice when you stop typing. It does not record keystrokes, never reads password fields, and passes text only to the model you chose (section 3). Voice input uses the microphone while you dictate. The interpreter listens to the microphone or to the sound your Mac plays only while it is on; audio is processed on your Mac and kept only if you turn recording on. If you transcribe or record other people, telling them and getting their consent where the law requires it is your responsibility.

5. Buying a license

Licenses are sold by Paddle (Paddle.com Market Limited or its affiliate named on your receipt) as the seller of record. Paddle collects your payment details and handles the order under its own privacy policy; we never see your card. Paddle tells us the name, email address and country of the order and what was bought. Paddle decides about its own processing: it is a controller in its own right, not our processor. We use what it tells us to create your license key (it contains your name, email address and order number, and the app shows them to you), to send it to you, to answer your questions, to handle a withdrawal or a complaint, and to defend our rights if there is a dispute. The legal bases are the contract with you, our legal obligations and our legitimate interest in defending claims (GDPR Article 6(1)(b), (c) and (f)). Nobody is obliged to give us data, but a key cannot be issued without the name and email address of the order. If you use the withdrawal form or the refund request form, we process what you enter in it (name, order, email address, the purchase, the reason you choose and your note) for the same purposes: each becomes a request with a number, and the letters about it, ours and yours to refunds@uvinta.com, are kept with it so that we can handle it.

License records are stored with Cloudflare, which also delivers the email with the key (hosting and email delivery). Cloudflare processes the data for us under a data processing agreement. We keep license records for as long as we sell and support Uvinta, so that a lost key can be sent again, and for six years after that (the limitation period for claims in Poland); withdrawal statements, refund requests with their letters, and complaints for six years; a document that tax or accounting law requires for the time that law sets (in Poland five years from the end of the tax year). Ask us and we delete your license record earlier: the key you have keeps working. A lost key can be sent again: on the lost key page you enter the email address of the purchase, and the key goes to that address only. To find the purchase we keep a hash of the address with the license record; of the request itself we keep only a mark for ten minutes, so that the form cannot be used to fill your mailbox.

Activation. For each key we keep the list of the Macs it is in use on: the Mac's hash and model, the version of Uvinta, and when its place was taken and last confirmed. We use it to count the Macs a license covers and to end a license whose purchase was refunded (the contract with you and our legitimate interest in keeping keys from being misused: GDPR Article 6(1)(b) and (f)). An entry is deleted when you deactivate Uvinta on that Mac or when the purchase is refunded; the note that a purchase was refunded stays with the license record.

Subscriptions. A subscription is sold by Paddle in the same way, and Paddle charges it every month until you cancel. For each subscription we keep its number, the plan, the paid period and whether it was cancelled or refunded, its token, a hash of your email address (to find the subscription when you sign in and to tell you how to use it if you ask), the list of the Macs it is in use on (as for a license), and the number of the key that OpenRouter counts the month's use of the model under, with the cost of that use added up by feature (the interpreter, text translation, grammar and completion) so that Uvinta can show you what used the allowance: only these sums, never the text or when a request was made. We use this to give your Macs their passes, to keep the use of the model within your plan and to end a subscription that was refunded (the contract with you and our legitimate interest in keeping the service from being misused: GDPR Article 6(1)(b) and (f)). For the text you send to the subscription's model we are the controller only for passing it on: section 3 says to whom, and we keep none of it. The legal basis is the contract with you (GDPR Article 6(1)(b)) and, for what the text says about other people, our legitimate interest in providing the feature you asked for (Article 6(1)(f)). If you use the subscription in a business for text that holds other people's personal data, we pass it on as your processor instead, under our data processing agreement. When you subscribe, we note that you asked for the subscription to start at once: your email address, the plan, the time and the wording you saw, as proof of that request. We keep the record of a subscription, with the list of its Macs and that request, for as long as it runs and for six years after it ends (the limitation period for claims in Poland).

6. This website and email

This site sets no cookies of its own, except the sign-in cookie of your account while you are signed in (section 6, “Your account”), stores nothing else in your browser except, for the moment it takes to open the checkout, the plan you chose on the account page (in the tab's session storage, gone when the tab closes) and loads no analytics or tracking code. The one thing we count is how many times the installer is downloaded: a number for each day, page language and country, with nothing about who downloaded it. The site does not track you across sites, so a “Do Not Track” signal changes nothing. We do not sell or share personal data. To limit how often the sign-in and the forms can be used, our service keeps a count per network address for a few hours, a few days at most. Its host, Cloudflare, keeps short-lived technical logs (IP address, time, page) to operate and protect the site (our legitimate interest, GDPR Article 6(1)(f)). When you open the checkout, Paddle loads its own code and may set cookies needed for the payment. If you write to us, by email or with the contact form of the legal notice, our mail provider processes the message for us, and we keep it for as long as it takes to answer it and to keep track of the matter, at most six years.

Letters. We keep a copy of the emails we send you (your key, a sign-in code with the code itself hidden, acknowledgements, our answers) and of the letters you send to info@, no-reply@ or refunds@uvinta.com, with Cloudflare (section 5), so that we can answer and handle your matter; a copy of each letter we receive also goes to the publisher's own mailbox. With a refund request or a withdrawal we note whether its sender's mail server confirmed the address, and we look up the country of the purchase's billing address at Paddle and whether a business bought it, to know whether the right of withdrawal applies. This is our legitimate interest in handling your requests and our legal obligations (GDPR Article 6(1)(c) and (f)). Letters are deleted after six years at most.

Reviews. If you send a review with the review form, we store what you put in it: the rating, the text, the language of the page and, if you give them, your name and email address. We use it to improve Uvinta (our legitimate interest, GDPR Article 6(1)(f)) and publish it on this site only if you tick the box that allows it (your consent, Article 6(1)(a)); your email address is never published. Write to info@uvinta.com to withdraw the consent or to have the review deleted. Reviews are stored with Cloudflare and kept for as long as Uvinta is on sale, or until you ask us to delete them.

Your account. You may sign in on this site with the email address of your purchase, to see your licenses and subscriptions with their payments and invoices, manage your subscription (cancel it, change its card) and let Uvinta on your Mac sign in. The payments, the card and the invoices stay with Paddle; we ask Paddle for those of your own purchases when you open them, and pass the invoices on to you without keeping them. If you tick the box for invoice details, the company name, tax or VAT number and address you enter go to Paddle, which puts them on your invoices (a legal obligation of the seller, GDPR Article 6(1)(c), and the contract with you); we keep only Paddle’s references to them, and delete those when you ask us to. Signing in by code: we mail a six-digit code to the address you enter and keep only a hash of it, for ten minutes. We then keep a session: a hash of a random token, your email address, and when the session began and ends (it ends after 15 minutes without activity, after 30 days at most, or when you sign out). The token itself is in one cookie of your browser, sent only to this site’s /api, which is strictly necessary for the account and needs no consent. When Uvinta on your Mac signs in, it gets the subscription token of that address (a license key is entered in Uvinta by hand) with a one-time code that works for five minutes, and stays signed in with a session of its own: we keep a hash of it, your email address and when it was made and last used, until Uvinta signs out (which also happens when you sign out in Uvinta) or the session goes unused for 90 days. We use this to give you access to your own purchases (the contract with you: GDPR Article 6(1)(b)) and, for the limits on how many codes one network may ask for in an hour, our legitimate interest in keeping the service from being misused (Article 6(1)(f)). Using Uvinta in the trial or with a license key never needs an account.

Email from us. We write to the address of a purchase about the purchase itself: the key, a sign-in code, a reply, the acknowledgement of a withdrawal and, when there is one, a notice you need about what you bought, such as a security issue and its fix, a change of the license or of these terms, or a problem with a payment. That needs no consent: it is part of the contract or a duty of the manufacturer (GDPR Article 6(1)(b) and (c)), and we send it only when there is something you need to know. News about Uvinta, such as new features and offers, a few times a year at most, we send only if you tick the box for it in your account (your consent, GDPR Article 6(1)(a)); the box is not ticked unless you tick it. Every news mail has a link to a page where one button unsubscribes you at once, without signing in, and you can also untick the box; unsubscribing does not stop the notices about your purchase. For news we keep your email address, the language of the page, and when you agreed and when you unsubscribed. After you unsubscribe we send you no news and keep that record for three years, to show what you had agreed to, then delete it. The mails go out through Cloudflare (section 5).

7. Transfers outside your country

Paddle is established in the United Kingdom, which the European Commission recognises as giving adequate protection. Paddle and Cloudflare may also process data in the United States; such transfers rely on the EU–US Data Privacy Framework or on standard contractual clauses. OpenRouter, which receives the text sent to a subscription's model, is in the United States and processes it for us under a data processing agreement with the European Commission's standard contractual clauses; the companies that run the model for it may be in the United States or elsewhere.

8. Your rights

You may ask us for access to your data, for its correction or deletion, for restriction of its use, to object to its use, and for a copy to take elsewhere. Write to info@uvinta.com; we answer within a month. We make no automated decisions about you and do no profiling. You may complain to the data protection authority: for us it is the President of the Personal Data Protection Office in Poland (Prezes UODO, uodo.gov.pl), and you may also turn to the authority of the country where you live.

9. Children

Uvinta is not directed at children under 16, and we do not knowingly collect their data.

10. Changes

If this policy changes, the new version is published here with its date. A change that affects how the app handles your data is also described in the notes of the update that brings it.