Last updated: 12 November 2026
This policy explains what happens to your data when you use Diktatur, the iPhone app and keyboard for dictating Luxembourgish. In short: you choose whether your voice is transcribed on your iPhone (Local), where it never leaves it, or by the LuxASR service of the University of Luxembourg (Online). Diktatur has no accounts, no advertising, no analytics and no tracking.
Gérard Kieffer, Luxembourg
Email: gerard.kieffer@ikmail.com
Website: https://www.gerardkieffer.net/projects/luxembourgish-dictation-keyboard/
None of this data is sent to the developer. Deleting the app deletes all of it.
iOS does not allow keyboards to use the microphone. When you tap Dictate on the Diktatur keyboard, the Diktatur app records and transcribes in the background, and iOS shows the orange microphone indicator while the microphone is on. Nothing is recorded until you tap Dictate.
The keyboard needs Full Access only to exchange commands and the dictated text with the Diktatur app through storage shared by the app and the keyboard on your iPhone. The keyboard does not store or send what you type.
With Online, the keyboard makes one kind of internet request: before you dictate, and at most once a minute, it asks the LuxASR server of the University of Luxembourg whether the service is available. The request contains no audio, no text and no identifier; as with any connection, the server receives technical data such as your IP address. With Local, the keyboard does not connect to the internet.
Apart from the keyboard's availability check described above, data is sent over the internet only in the two cases below, and only when you choose them: on first launch, Diktatur asks whether you want Online or Local speech recognition, and you can change it at any time in Settings › Speech Recognition. Nothing is recorded before you choose.
If you choose Online (LuxASR API), your recordings are sent to the LuxASR service of the University of Luxembourg for transcription, together with your vocabulary list if you have entered one (it helps spell names and terms correctly). Recordings are uploaded when you finish a dictation; nothing is sent while you pause or when you discard a recording.
According to the University of Luxembourg, the data stays in Luxembourg, uploaded audio is deleted as soon as processing ends, and nothing is used for training or shared with third parties. The University of Luxembourg is responsible for this processing: see https://luxasr.uni.lu.
The legal basis is your consent (Art. 6(1)(a) GDPR), given by choosing Online. You can withdraw it at any time by selecting Local in Settings › Speech Recognition.
If you choose Local, its speech recognition model is downloaded once from Hugging Face (huggingface.co, Hugging Face, Inc., USA). As with any download, Hugging Face receives technical data such as your IP address. No audio or text is sent. See Hugging Face's privacy policy: https://huggingface.co/privacy.
Diktatur is distributed through Apple's App Store and TestFlight. Apple processes data such as your Apple Account for downloads and, if you share them, crash reports and usage data, under its own privacy policy: https://www.apple.com/legal/privacy/. If you test Diktatur with TestFlight, Apple shares your name or email address (as used for the invitation), your device model, crash reports and the feedback you send with the developer, who uses them only to improve the app.
Under the General Data Protection Regulation (GDPR), you have the right to access, correct and delete your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. As the developer does not receive your recordings, texts or settings, you exercise most of these rights directly on your iPhone, by deleting notes or the app. For any question, write to the email address above.
You also have the right to lodge a complaint with a supervisory authority, in Luxembourg the Commission nationale pour la protection des données (CNPD): https://cnpd.public.lu.
Diktatur does not knowingly collect data from children, and with Local it sends no personal data anywhere.
If this policy changes, the new version is published on this page with a new date.