Privacy Policy

Last updated: October 20, 2026

1. Introduction

FONTAINE68 SARL ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you use the Dikto application and website ("Service").

We comply with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and French data protection laws (Loi Informatique et Libertés).

2. Data Controller

The data controller for your personal data is:

3. Data We Collect

3.1 Account Data

When you create or use an account, we process:

3.2 Usage Data

We keep service usage and device records to operate quotas, secure the Service, support users, and understand product performance. These records are associated with your account or app installation and are not represented as anonymous. They include:

3.3 Voice and Text Data

Important: Dikto sends raw audio to our Scaleway-hosted backend and, by default, to Mistral AI for transcription. Transcribed or selected text, prompts, saved context, and dictionary terms may also be sent to Mistral AI by default for cleanup, translation, or text actions. Speech synthesis (“Speak”), including any optional reference audio, always uses Mistral AI, whichever AI provider you choose.

We do not intentionally write raw recordings or full transcripts to Dikto's application database, and we do not use them to train our own models. Mistral AI processes the inputs and outputs as our provider; any provider-side retention or model-improvement use is governed by Mistral's applicable terms, plan, and privacy settings, including whether Zero Data Retention or a training opt-out is enabled. Saved dictionary terms and context remain in Dikto's database until you change them or your account data is deleted.

Optional AI provider: OpenAI. In the app's “AI provider” setting (in the “Privacy & Processing” section), “Mistral (EU)” is the default. OpenAI is optional: it is used only if you select it and accept the consent prompt in the app. Nothing is sent to OpenAI by default. If you select OpenAI, the following data is sent, always through Dikto's backend, to OpenAI Ireland Ltd (Ireland):

Window titles, screenshots and clipboard contents are never sent to OpenAI. Text-to-speech (“Speak”) always uses Mistral AI, even when OpenAI is selected. OpenAI Ireland Ltd may transfer this data to its affiliates in the United States under the European Commission's standard contractual clauses, so your data may be processed outside the European Union (see section 10). Any retention by OpenAI is governed by OpenAI's applicable terms and the settings applied to Dikto's account.

3.4 Payment Data

Payment information is collected and processed by our payment provider, Paddle.com, which acts as Merchant of Record. We do not receive your complete payment-card details. Paddle provides the account and subscription information needed to grant and manage access, including:

4. How We Use Your Data

We process your data for the following purposes and legal bases:

We do not use your data for marketing purposes unless you explicitly opt in.

5. Data Sharing

We disclose data to the following providers only as needed to operate the Service:

We do not sell, rent, or share your personal data with advertisers or data brokers.

6. Data Storage & Security

Dikto's primary application database and backend are hosted by Scaleway in France. Other providers process data in the locations described in this policy and their own documentation. We use proportionate technical and organizational safeguards, including:

No storage or transmission method is completely secure. We review and adjust safeguards as the Service changes.

7. Data Retention

8. Your Rights (GDPR)

Under the GDPR, you have the following rights:

You can request account deletion through the deletion control provided in the application or contact us at contact@dikto.ai to exercise any of these rights. We normally respond within one month. Deletion requests remain subject to the limited backup, security, accounting, and legal-retention exceptions described above.

You also have the right to lodge a complaint with the French data protection authority: CNIL (www.cnil.fr).

9. Cookies

The Dikto website uses limited browser storage:

We do not use advertising cookies or cross-site advertising trackers.

10. International Transfers

Your data is primarily processed in France and elsewhere in the European Economic Area. Paddle processes data in the United Kingdom and related locations, Vercel uses United States and global infrastructure, and Mistral states that some features or subprocessors may involve temporary processing outside the European Union.

If you select OpenAI as your AI provider (optional), the data described in section 3.3 is sent to OpenAI Ireland Ltd (Ireland), which may transfer it to its affiliates in the United States under the European Commission's standard contractual clauses. With the default AI provider, transcription and AI processing are handled by Mistral AI.

If you turn on the beta “Local Transcription” option, downloading the model from Hugging Face, Inc. (United States) involves your IP address and request metadata, which may be processed outside the European Union.

Where personal data is transferred internationally, we rely on an applicable adequacy decision, contractual safeguards such as Standard Contractual Clauses, or another lawful transfer mechanism used by the relevant provider.

11. Children's Privacy

The Service is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the application. The "Last updated" date at the top indicates when the policy was last revised.

13. Contact

For any privacy-related questions or to exercise your rights: