Privacy Policy

DuckType is operated by ORTH LTD, a company registered in England and Wales with company number 13816782. For privacy questions, contact hello@app.duck-type.com.

The data we process depends on how you use DuckType. Account features use your name, email address, authentication methods, session data, subscription status, and account preferences. Payment and subscription data is handled through Polar.

Desktop dictations are stored locally on your device unless you choose a cloud feature or submit content to support. DuckType Cloud transcription sends audio and prompt hints through DuckType servers to the configured processing provider. The desktop cloud transcription path is designed so DuckType does not persist the recording or transcript content in its API path.

Desktop notes, meetings, recordings, transcripts, memos, and generated summaries are stored locally on your device unless you explicitly use a cloud, support, website, or sync feature that requires server processing or storage. If you use an account-based sync or web workspace feature, DuckType may store the synced notes, meeting metadata, uploaded audio, transcript segments, memos, and generated summaries in your DuckType account so that feature can work. The public demo can store demo dictations, dictionary words, and shortcuts locally in your browser.

• To create and secure accounts, sessions, passkeys, two-factor authentication, and sign-in methods.
• To provide transcription, AI rewrite, meeting, note, billing, email, referral, and support features.
• To prevent abuse, enforce rate limits, debug failures, and protect the service.
• To send transactional emails, product updates where requested, and subscription notices.
• To understand product reliability and usage when analytics are enabled.

For UK and EU users, we rely on contract where processing is needed to provide DuckType, consent where required for marketing emails and non-essential website analytics/storage, legitimate interests for security, abuse prevention, diagnostics, and product improvement, and legal obligation where records are required for tax, accounting, or compliance.

We share data with subprocessors only where needed to provide DuckType, process payments, send email, run infrastructure, provide analytics when enabled, support users, or meet legal obligations. The current subprocessor list is published at /subprocessors.

If you use your own API key or connect a third-party provider, your content is sent to that provider under the terms and privacy policy you have with them. DuckType does not receive your provider API key when it is stored locally in the desktop app.

Local desktop data stays on your device until you delete it or remove the app data. Account data is kept while your account is active and then deleted or retained only as needed for billing, security, abuse prevention, legal obligations, and support records.

You can delete local app data from the desktop app. You can request account deletion from the website or desktop account settings. Deleting an account removes the account and associated cloud data, subject to limited records we must keep or reasonably need to prevent abuse.

Depending on where you live, you may have rights to access, correct, delete, export, or object to certain processing of your personal data. You can contact hello@app.duck-type.com to make a request. You may also complain to your local data protection authority.

DuckType is not intended for children under 13, and it is not intended for UK or EU children under 16 without appropriate consent from a parent or guardian.