Privacy Policy

Information and purposes

Account email and authentication information support sign-in. Language, preferences, dictionary entries and snippets support personalization. Audio, original and cleaned transcripts, and surrounding text/app information supplied by features support dictation. Usage duration, request times, subscription and order identifiers support quotas and billing. Connection/error information and correspondence support security, reliability and customer service. Minimal automatic desktop error reporting is enabled by default and can be turned off in the app’s Privacy settings. When reporting is enabled and you are signed in, predefined error codes, operation stages, times, app version, operating-system type and random diagnostic identifiers are sent to mora servers and linked to your verified account. Diagnostics exclude audio, transcripts, raw error messages, stacks, file paths, device names and authentication tokens. Diagnostic records expire 30 days after the error occurred and are regularly deleted. You can turn reporting off in app settings.

Audio and transcript history

When you start recording, audio is sent over encrypted connections to mora servers and Soniox real-time speech recognition. mora's real-time dictation path does not save raw audio files. Original and cleaned text are saved to your account for history. Dictionary terms, surrounding text and app information supplied for recognition can also be processed by Soniox. Soniox states that it neither stores real-time content nor uses it for model training.

Providers and international processing

Supabase hosts account and history databases in Tokyo, Japan. Google Cloud runs the speech API in Singapore; Soniox provides real-time recognition in the United States; Vercel hosts the website and processes related requests. Channel Corporation processes support chats that you start by pressing the contact button. It may process your message, access time, IP address, browser and device details, and the cookies or local storage needed to provide the chat. US-based Resend sends account-related messages such as the welcome email after signup confirmation and may process the recipient email address, language and delivery result. Vercel and provider support/operations may process information internationally, including in the United States. Korea-based Payple handles Korean payments; US-based Polar handles payments in Japan and other supported regions. They receive account email, customer/order identifiers and payment results. mora servers do not collect full card numbers or security codes.

Retention and deletion

Transcript history, dictionary entries and snippets are retained until you delete them, using deletion features available in the app or website. After identity verification, account deletion requests are processed within 30 days of receipt. Transaction/dispute records required by law are retained separately only for that purpose and deleted when the obligation ends. Deleted data may be removed from backups according to backup retention cycles and is not returned to ordinary service use.

Cookies, permissions and choices

The website uses cookies for sign-in sessions and language preferences. The Channel Talk script and its support-chat storage load only after you press the contact button. Clearing browser storage and cookies may disconnect an earlier support conversation. Microphone permission enables recording; accessibility permission supports shortcuts and text insertion in other apps. You can revoke permissions in your operating system, which may limit associated features. Text inserted into another app or copied to the clipboard becomes subject to that app and your operating system's handling.

Anonymous web analytics

We use Vercel Web Analytics to understand service quality and aggregate page usage. Page path, visit time, referring domain, approximate region, browser, operating system and device type may be processed anonymously and in aggregate. Query strings and fragments are removed before transmission, and auth callbacks, OAuth flows, password reset, support, transcript history, dictionary and snippet routes are not collected. Email, account or payment identifiers and dictation audio, text or history are not included in analytics events. Vercel Web Analytics uses no third-party cookies; it distinguishes visits with a hash derived from the request and discards the visitor session identifier after 24 hours.

Optional session analytics

With explicit permission, we use Microsoft Clarity to analyze clicks, scrolling, screen size and usage flows on public landing and download pages. Microsoft may process connection information and session recordings. Public page copy and demo examples appear in recordings, while input values remain masked. Account, billing and dictation screens, and pages with URL queries or unknown fragments are not tracked. We do not grant advertising storage. Before a choice or after refusal, the Clarity script is not loaded. You can change the choice in Cookie settings; the choice cookie lasts 180 days.

Optional marketing measurement

In the EU, Meta Pixel and the Conversions API start after consent; elsewhere they start automatically. Measurement covers page visits, download-page views, first verified registrations, checkout starts, and confirmed initial and renewal purchases. Unknown locations are not measured. The visited URL and time, browser/device information, IP address, Meta cookie identifiers, hashed email and account identifiers, and order currency and value may be sent to Meta Platforms, Inc. in the United States. We do not send dictation audio, transcripts, history, dictionary entries or snippets. Choices are stored in a cookie for 180 days. An account opt-out remains until you allow measurement again or delete the account; permission is retained for up to 180 days. Browser matching data is kept for up to 7 days. Original ad-click and campaign data is stored separately in a cookie and your account for up to 90 days to connect registration and purchase across devices. Download clicks and the first measured signed-in desktop launch are also linked to your account; these do not prove a completed file download or installation. You can stop or change measurement through Cookie settings, including pending events for your signed-in account. Refusal does not affect core features or checkout. Meta's own privacy policy governs its retention and advertising processing.

Your rights and contact

Request access, correction, export, deletion or raise a processing objection at support@kitschlabs.com. We may verify identity to prevent unauthorized disclosure. Declining necessary processing may prevent the related feature from working. Your right to contact a competent privacy regulator is not restricted. Material policy changes will be announced before taking effect.

Service provider

Kitsch Labs Co., Ltd. (주식회사 키치랩스) · Representative: 백지오 · Business registration: 209-88-03621

Registered address in the Republic of Korea: 경기도 성남시 분당구 불곡남로21번길 6-1, 401호