VoiceBridge Privacy Policy

Last updated: 2026-07-21

VoiceBridge sends text you dictate on your phone to your own computer. It is built so that the service operator cannot read that text.

What VoiceBridge does not do

• No account, sign-up, email address, or phone number is required or collected.
• No speech audio ever leaves your phone through VoiceBridge. Dictation happens in your phone's system keyboard (for example Gboard or iOS dictation), which is governed by that keyboard's own privacy policy.
• No analytics, advertising, or tracking SDKs are included in the mobile app, desktop app, or browser extension.
• The relay server does not store your messages. It forwards them between your two devices and keeps no message history.

How your dictated text is protected

Text is encrypted on your phone with XChaCha20-Poly1305 before it is sent, and decrypted only on your paired computer (desktop app or browser extension). The relay forwards opaque ciphertext and cannot decrypt it.

The encryption key is established at pairing time, one of two ways:

• QR pairing (recommended). Your computer generates the key and shows it inside the pairing QR code. The key travels from computer to phone by camera only — it is never sent over the network, so the relay never has any key material.
• Manual 6-digit code pairing. When you type the code instead of scanning, the two devices perform an X25519 key exchange through the relay and derive a shared key. The relay cannot recover the key from the exchange it forwards. Because that exchange passes through the relay, both devices then show a 6-digit safety code: it matches on both ends only if nobody is in the middle, and the phone will not save the pairing until you confirm it matches. QR pairing does not need this step, because the key never touches the network.

Delivery receipts (sent / copied / pasted / failed) are operational signals and contain no message text.

What the relay can see

Like any server that forwards traffic, the relay necessarily observes connection metadata: your IP address, connection times, approximate message sizes and counts, the short-lived pairing code, and the random reconnect credential for your device pair. Pairing rooms self-delete after 24 hours of inactivity. The relay runs on Cloudflare Workers; Cloudflare's infrastructure terms apply to transport.

What is stored on your devices

• Phone: your paired computers (relay URL, reconnect credential, encryption key) and app preferences, in the app's local storage. The encryption key and reconnect credential are encrypted at rest under a key held in the device Keychain / Keystore.
• Computer: the pairing session and its keys, plus settings, in the desktop app's local storage — the keys are encrypted at rest under a key held in the operating system's keyring (macOS Keychain, Windows Credential Manager, or Linux Secret Service). If a computer has no usable keyring, the app says so on startup rather than silently storing keys unprotected. The browser extension stores its pairing in the browser's extension storage, encrypted under a non-exportable browser key.

Removing a paired device in the app, using "Reset pairing" on the desktop, or uninstalling deletes this data. Text you delivered to the computer's clipboard is governed by your operating system's clipboard.

Permissions

• Camera (phone): used only while you scan a pairing QR code. Nothing is photographed or uploaded.
• Browser extension: uses activeTab to insert text into the field you focused, and optional per-site permission only when you enable "Always insert on this site". It does not read your browsing history.

Changes and contact

Material changes to this policy will be published with a new "Last updated" date alongside the app's release notes. Questions: open an issue on the VoiceBridge repository or contact the developer at the address listed on the store page.