Privacy policy

Last updated: October 3, 2026

Who we are

Dictero (www.dictero.com) is run by Jixon, Brossard, Québec, Canada, which is responsible for the personal information described here.

The person in charge of the protection of personal information at Jixon can be reached at contact@dictero.com, for any question about your data or to use your rights.

What we collect

  • Your account: your e-mail address, your password (stored encrypted by our sign-in provider; we never see it), your display name and the language you chose. If you sign in with Google, Google gives us your name and e-mail address.
  • Your dictations: the word lists, sentences and texts you type in or photograph, their titles, the generated sentences, the voice recordings, your folders and, if you set one, the password that hides the answers.
  • Photos of a book or notebook: they are sent to our AI provider to read the words, and are not stored by Dictero. The words read are kept (without the photo, and without any link to you), so the same photo is never read twice.
  • Your credits: your balance and the history of each movement (credits received, bought, spent or refunded).
  • Your purchases: when you buy credits, the pack, the amount, the date, the card type and its last four digits, and a link to the receipt. Your card number is typed into the payment form of our payment provider, Stripe, and never reaches Dictero.
  • If you start a dictation without an account: the dictation in progress (never its password) and how many free AI actions you used, under an anonymous visitor number, so you can come back to it, even after confirming your e-mail on another device. To limit abuse, a keyed fingerprint of your IP address (never the address itself) caps the free actions per device.
  • If you arrive through one of our ads: which ad it was and, for 30 days, the Dictero pages you open and the steps you reach (for example: started a dictation, sent a sign-up, made a dictation), under the same anonymous visitor number, so we can see where an ad's visitors stop. It is linked to your account if you create one. No advertising tracker is involved.
  • Messages you send us: your name, e-mail address, the topic and the message you write in the contact form (or in an e-mail to us).
  • Technical data: sign-in cookies, a log of AI requests (their time and type) to limit abuse, and the connection logs (such as IP addresses) kept by our hosting provider for security.

We do not use advertising, advertising trackers or audience measurement tools.

Why we use it

  • To provide the service you ask for: create your account, write sentences, record the voices, keep your dictations and credits, take the payment when you buy credits, and send the e-mails needed to sign in and to confirm a purchase, with its receipt (performance of our contract with you).
  • To answer the messages you send us from the contact page or by e-mail (our legitimate interest in answering you, or the steps you ask for).
  • To keep Dictero safe and working: limit abuse, prevent fraud and fix problems (our legitimate interest).
  • Only if you accept the cookies: to measure which of our ads bring visitors to Dictero and lead to an account (Google Ads; your consent, which you can withdraw at any time).
  • To meet our legal obligations, such as keeping payment records for accounting and tax purposes, or when the law requires us to hand over some data.

We do not sell your data, we do not use it to show you ads or to target anyone with ads (Google Ads only counts what our ads bring) and we do not send you marketing e-mails.

Children

Dictero is meant for parents, teachers and other adults who prepare dictations. An account must be created by an adult (at least 18 years old). A dictation can only be played while signed in to a Dictero account: children use it on a device where an adult is signed in, and we do not knowingly collect personal data about children.

Please do not put a child's name or other personal details in a word list, a text or a dictation title.

Who processes your data

We use a few trusted providers, only for what they do for Dictero:

  • Supabase: database and sign-in.
  • Amazon Web Services: hosting of the website, storage of the voice recordings and sending of e-mails (servers in the United States).
  • OpenAI: writing and checking the sentences, reading the photos, checking the spelling of your list or text when you ask for it, creating the voices, checking that each recording says the whole text, and finding when each word is said (to light it up in the answers). Under its terms for businesses, OpenAI does not use this data to train its models and keeps it for a limited time (up to 30 days) to detect abuse.
  • Stripe: payments for credits (card, Apple Pay, Google Pay), fraud prevention and receipts. Stripe receives your card details directly, with your e-mail address.
  • Google: if you choose to sign in with Google; and, only if you accept the cookies, Google Ads, which measures which of our ads brought visitors to Dictero.

Your information is therefore stored and processed outside Quebec, mainly in the United States. Before using these providers, we checked that they protect personal information adequately, and we are bound to them by contracts that limit what they can do with it. For users in the European Union, these transfers are covered by the European Commission's standard contractual clauses or by the EU-US Data Privacy Framework.

Shared links and shared content

  • A dictation can be shared with its link, but only someone signed in to a Dictero account can open and listen to it. If you set a password, the answers stay hidden without it. The recordings are stored at addresses that cannot be guessed.
  • To save time and credits, generated sentences and voice recordings are kept in a shared library and can be reused for another dictation that contains the same words. This library holds only the sentences and sounds, never your name, your e-mail or your account.

How long we keep it

  • Your account, dictations, folders and credit history: as long as your account exists. A dictation you delete disappears from your account; we remove it for good when your account is deleted, or sooner on request.
  • When your account is deleted, its data is erased within 30 days, apart from what the law requires us to keep. Backups are overwritten within 30 more days.
  • Sentences and recordings in the shared library may be kept after that, as they are not linked to you.
  • Payment records (amount, date, pack, card type and last four digits): kept as long as accounting and tax laws require (up to 6 years), even after your account is deleted, but no longer linked to it. Stripe keeps its own records under its privacy policy.
  • Messages from the contact form: they are not stored in Dictero; they are sent by e-mail to our team through Amazon Web Services, and kept in our mailbox as long as needed to answer you and follow up (up to 3 years), or deleted sooner on request.
  • The log of AI requests is erased after a few days (about two), and is used only to limit abuse.
  • A dictation started without an account: erased 24 hours after its last change (never more than 7 days), and the anonymous visitor record 30 days after its last visit. The steps of a visitor who came through an ad are kept up to 12 months, without any name or e-mail.

Your rights

You can ask to access your personal information, correct it, delete it, receive a copy of it in a common format, withdraw your consent, restrict its use or object to it. To do so, or to delete your account, write to contact@dictero.com from the e-mail address of your account. We answer within 30 days.

If you are not satisfied with our answer, you can file a complaint with the Commission d'accès à l'information du Québec (www.cai.gouv.qc.ca). If you live in the European Union, you can also contact the data protection authority of your country (in France, the CNIL: www.cnil.fr).

Cookies and storage on your device

Dictero uses what it needs to work, and Google Ads cookies only if you accept them.

What Dictero needs to work (no consent asked):

  • cookies that remember the language and the currency you chose (1 year);
  • if you arrived through one of our ads, a cookie that remembers which one (30 days), so we know how many accounts an ad brought;
  • a cookie with an anonymous visitor number (30 days), set when you use Dictero without an account or arrive through one of our ads: it keeps your dictation in progress and your free AI actions, and the steps of a visitor from an ad;
  • the sign-in cookies that keep you connected;
  • when you open the window to buy credits, the cookies Stripe needs to prevent fraud on payments;
  • storage in your browser for your preferences (reading speed, highlight style, folders shown or hidden) and the dictation you are creating.

With your consent only: the Google Ads cookies (up to 90 days), which tell us which of our ads brought you to Dictero (a click on an ad, then an account made). A banner asks you on your first visit; until you accept, Google Ads sets no cookie and only receives anonymous signals without any identifier. Your answer is kept in a cookie (1 year), and you can change it at any time with the button below. Refusing changes nothing else in Dictero. The Google tag is never loaded on a dictation or in the administration.

Security

Every connection is encrypted (HTTPS), passwords are stored encrypted by our sign-in provider, and access to the data is limited to what is needed to run Dictero.

Changes to this policy

We may update this policy when Dictero changes. The date at the top shows the latest version. If a change matters for your data, we will tell you by e-mail or in the app before it applies.

See also our terms of service.