Privacy Policy

1. Responsible Party

The responsible party under the GDPR and other national data protection laws is:

The CodeCave GmbH

Alfred-Nobel-Straße 29

50226 Frechen

Germany

Commercial Register: HRB 44492

Registration Court: Amtsgericht Bielefeld

VAT ID: DE 346809827

Represented by: Aleksandar Vuk Jovanovic, Tilman Kieselbach

Email: jovanovic@thecodecave.de

Website: https://vibewhisper.dev

2. General Information

VibeWhisper is a macOS application for speech-to-text transcription using the OpenAI API. The app is publicly available and can be activated after purchase using the invoice number. We take the protection of your personal data very seriously.

3. Data Processed by the Application

3.1 API Keys

Users enter their own OpenAI API key. The key is stored locally on the user's device in the macOS Keychain. We do not receive or store the API key on our servers.

3.2 Audio Data

Audio recordings are processed exclusively for transcription purposes. Audio data is transmitted directly from your device to OpenAI for transcription. We do not store any audio files on our servers.

3.3 Transcriptions

Transcribed text is returned directly to the user's device. We do not store any transcriptions.

3.4 Website Data

When visiting vibewhisper.dev, standard server log data may be processed, including IP address, browser type, and date and time of the request. This data is used for technical stability and security. For website analytics, we use Rybbit, a privacy-friendly, cookie-free analytics tool hosted on our own infrastructure. See our Cookie Policy for details.

4. Payment Data

Access to VibeWhisper is granted after a one-time purchase of $19 USD. Payment processing is handled by third-party providers. We do not store complete payment data. See our Subprocessors page for details about payment service providers.

5. Legal Basis (GDPR)

Processing is based on:

• Art. 6(1)(b) GDPR — Performance of a contract (providing the software and processing the purchase)
• Art. 6(1)(f) GDPR — Legitimate interest in security, functionality, and website analytics

6. Data Sharing

We do not sell or rent personal data. Audio data is transmitted to OpenAI solely for transcription purposes. OpenAI acts as an independent data controller for its services. See OpenAI's Privacy Policy for details on their data processing.

7. Data Storage

We do not store audio files, transcriptions, or API keys. Server logs are retained only as long as technically necessary.

8. Your Rights

Under the GDPR, you have the right to:

• Access your personal data
• Rectification of inaccurate data
• Erasure of your data
• Restriction of processing
• Data portability
• Lodge a complaint with a supervisory authority

To exercise your rights, contact us at jovanovic@thecodecave.de.

9. Security

We implement appropriate technical and organizational measures to protect data from unauthorized access. API keys are stored in the macOS Keychain, audio data is transmitted over encrypted connections, and our website enforces HTTPS with strict security headers.

10. Changes

We reserve the right to update this privacy policy. The current version is always available at vibewhisper.dev/privacy.