Privacy Policy for Lohelo
Last updated: 1 November 2026. This is a translation; the German version is authoritative.
This policy covers Lohelo: the Android app, the iPhone app Lohelo Pocket (with its keyboard), the desktop app for macOS, Windows and Linux, the Lohelo server at api.wovero.com and the pages at lohelo.com. Lohelo is in its testing phase, which is why some of what follows (kept recordings, usage counts) goes further than it will later.
1. Controller and contact
Wovero GmbH, Badestube 6, 36251 Bad Hersfeld, Germany. Registered at Amtsgericht Bad Hersfeld, HRB 3405. Managing director: Rajan Jain. Details in the Imprint.
For any privacy question and to exercise your rights: support@wovero.com.
We have not appointed a data protection officer. Fewer than 20 people at Wovero regularly process personal data, and in our assessment the other conditions that would require one (Art. 37 GDPR, § 38 BDSG) are not met.
2. In short
- Lohelo processes your speech and your text to write text, rewrite it, translate it and make meeting notes.
- Your audio and text are processed on our servers in Germany (Hetzner data centre; speech recognition and text processing run on a GPU server in Germany that a company affiliated with Wovero operates on our behalf).
- You sign in with our own sign-in (email code, or Google or Apple). Since 29 October 2026 we no longer use Clerk or any other sign-in service.
- During the testing phase we keep recordings of your dictations and meetings, together with the text, to check and improve recognition (section 8 says how long). You can have them deleted (section 12).
- Payments for Pro run through Apple or Google in the apps and through Stripe on the web. We never see your card number.
- We show no ads. The apps contain no advertising, tracking or crash-reporting SDKs from third parties. We do not sell data and do not use your recordings or texts to train AI models.
- You can delete your account and all its data in the app or on the web at any time (section 12).
3. What we process and why
Account and sign-in
Your email address, your name and profile picture if Google or Apple give them to us, your account id and, with Google or Apple sign-in, the identifier they give us. Also your plan, your word counter (the free plan is limited to 2,000 words per week), your roles, your writing profile (for example style and your own instructions) and the features enabled for your account. Purpose: to sign you in, keep your data in sync across your devices and provide the service. The sign-in code is sent to you by email from our mail server. Your sessions last up to 90 days and can be ended by signing out.
Dictation
- Audio: recorded while you hold the dictation key or tap record, and sent encrypted to our server, where it is turned into text. During the testing phase it is kept, as described below.
- Text around the cursor: with a dictation, the Lohelo keyboard on iPhone and Android sends up to 600 characters before and 200 characters after the cursor and the selected text, and a description of the field (for example "chat" or "email address") and the name of the app. Lohelo uses this to match spelling, names and tone. Before sending, Lohelo masks card numbers, IBANs, codes after "Code/TAN/PIN/OTP", email addresses, links and keys. Nothing is read from password, one-time-code and card fields. You can turn this off for all apps, or per app, in Lohelo's settings. The desktop app sends up to 2,000 characters on macOS and a tone hint on Windows. We do not store this text context.
- History: the text Lohelo wrote, the text before cleanup, the language, length, word count and time. Stored in your account so your history is the same on all devices.
Rewrite and translate
The text you select, copy or dictate to rewrite or translate, and your instruction. On iPhone the keyboard reads the clipboard only when you tap the translate chip. On Android Lohelo gets selected text through the text-selection menu, the share sheet or the Lohelo keyboard, only when you trigger it. The text is processed and not stored separately.
Keyboards
The Lohelo keyboards (iPhone and Android) are full keyboards. What you type with the keys is not stored by Lohelo and not sent to our servers. The keyboard only reads the text around the cursor as described under "Dictation" and for spacing and undo on your device. On iPhone, "Allow Full Access" is needed so the keyboard can record and hand your dictation to the Lohelo app, which sends the audio to our server, and for copy and paste. Without Full Access the keys still work, but dictation does not. Apple states that Full Access allows a keyboard to send what you type to its developer; Lohelo does not do that. iOS always keeps password fields away from third-party keyboards.
Recordings kept during the testing phase
- Dictations: while Lohelo is in testing we keep the audio of every dictation together with the recognised and final text, languages, length, app version and operating system, linked to your account. Purpose: to check recognition against real recordings, find errors and fix them. Only the Lohelo team has access. We delete these files after 60 days.
- Desktop app: the setting "Share recordings to improve Lohelo" is off by default; if you turn it on, recordings and their text go to us and are kept 90 days.
- Meetings: during the testing phase the audio pieces of a meeting stay on our server for 30 days after their text is stored, then they are deleted.
You can ask us at any time to delete all audio we hold of you without deleting your account (section 12).
Meetings
- Meeting audio: on a computer your microphone ("Me") and the meeting app's sound ("Them"), on iPhone and Android the microphone, sent in short pieces.
- Transcript and notes: the text, who spoke when, translations, topics, summary, decisions and tasks, plus title, meeting app name and languages.
- Calendar (macOS only, optional): if you turn on "Suggest from my calendar", Lohelo reads the event's title and attendees.
Please tell the other participants before you record a meeting, and get their agreement where it is required.
Speaker recognition and voice profiles
Speaker recognition is on by default for accounts. When it is on, our server computes a voice signature (a series of numbers) for each person speaking in a meeting, to tell speakers apart. When you name a person or confirm a suggestion, Lohelo saves the signature under that name in your personal voice profile list, to suggest the name in later meetings. Voice signatures are biometric data. You can rename, merge or forget each person, or delete the whole list, in the app. It is never shared with other users.
Dictionary, team glossary and settings
Your own words and corrections, your settings and your word counter. Terms you add to the team glossary are visible to all Lohelo users with the same email domain as you, together with your email address as the author. For addresses at general email providers (for example gmail.com) the glossary is personal.
Purchases and subscription
If you buy Lohelo Pro in the iPhone app, Apple takes the payment; in the Android app, Google Play does. We receive confirmation that a subscription is active, its plan and period, and a purchase identifier, but no card or bank details. If you buy on the web, Stripe processes the payment and we receive the customer and subscription identifiers, plan and status. Billing records are kept as long as the law requires.
Usage counts
The apps report simple counts, for example that a dictation was made and by which surface (keyboard, widget, share sheet), or that a sign-in completed. We keep only daily totals: no user id, no device, no text, no audio. On by default; turn it off in Settings → "Share usage counts".
Error reports
When "Send error reports" is on (or, while you have not chosen, for test accounts where we enabled it): what went wrong and where in the code, app version, operating system, device model, interface language, the id of the current meeting or last dictation, and the last lines of the app log. Personal content (texts, email addresses, keys, IP addresses, longer quotes) is removed on the device and again on the server. Reports are stored under a one-way hash of your user id.
Feedback
When you send feedback from inside Lohelo: your text, optionally a voice note (which we turn into text), screenshots, a screen recording (desktop, up to 60 seconds, only on your click) or files, optionally a cleaned app log with device details, your email address and our replies. Stored on our server so you can follow it and reply.
Updates and downloads
The desktop app asks api.wovero.com for updates and sends the operating system, processor architecture and app version. The Android app and Lohelo Pocket are distributed through Google Play and the App Store and TestFlight; Google and Apple process data under their own privacy policies.
Website and server logs
- Server logs: when you reach our servers, technically necessary data (IP address, time, address requested, browser or app) is processed to deliver and protect the service. The logs contain no text or audio from your dictations or meetings and are deleted after 14 days. We also use IP addresses for a few minutes to limit sign-in attempts.
- lohelo.com: the pages load fonts from our own server and use no cookies, no analytics and no third-party scripts.
4. Who processes data for us
We do not pass your data to third parties for their own purposes. These service providers process data on our behalf (Art. 28 GDPR) or, for payments and sign-in, under their own responsibility:
| Recipient | Purpose | Location | Data |
|---|---|---|---|
| Wovero mail server (mail.wovero.com) | Sending the sign-in code email from noreply@wovero.com | Operated by Wovero | Your email address and the code |
| Hetzner Online GmbH, Gunzenhausen | Data centre for our own servers (Lohelo server, database, website, mail) and storage for encrypted backups | Germany (Falkenstein; backups Nuremberg) | All data listed above that is on the server. We run the servers ourselves. |
| A company affiliated with Wovero (sister company) | Operation of the GPU server for speech recognition, cleanup, rewriting, translation, meeting notes and topics | Germany | Audio and text for processing |
| Apple Distribution International / Apple Inc. | App Store, in-app purchases, Sign in with Apple, TestFlight | EU / USA | Purchase status, Apple sign-in identifier (own responsibility) |
| Google Ireland Ltd. / Google LLC | Google Play, in-app purchases, Sign in with Google | EU / USA | Purchase status, Google sign-in identifier (own responsibility) |
| Stripe Payments Europe, Ltd. / Stripe, Inc. | Card payments for Pro bought on the web | Ireland / USA | Payment data, customer and subscription ids (own responsibility) |
| ClickUp (Mango Technologies, Inc.) | Internal task list for feedback and error reports | USA | Metadata only: report number, kind, environment, app version, operating system, number and type of attachments. No text, email address, image or log. |
If you sign in with Google or Apple, they confirm your identity under their own terms. You can always sign in with an email code instead.
5. No selling, no ads, no tracking, no training
- We show no ads and do not sell data or pass it to advertisers. The apps contain no third-party advertising, analytics, tracking or crash-reporting SDKs.
- We do not use your recordings or texts to train AI models. Lohelo uses ready-made models; kept recordings only serve to find errors and check recognition.
- Your audio and texts go to no AI service other than the GPU server in Germany named above.
- There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
6. Transfers to third countries
Your audio and texts stay in Germany. Apple, Google, Stripe and ClickUp are, or have parent companies, in the USA. Where data goes to them, it is under their certification under the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses (Art. 45, 46 GDPR). We send ClickUp only the metadata named above. You can request a copy of the safeguards at support@wovero.com.
7. Legal bases
- Contract (Art. 6(1)(b) GDPR): account and sign-in, dictation, rewrite, translation, history, meetings, dictionary, settings, purchases, updates, feedback.
- Legitimate interest (Art. 6(1)(f) GDPR) in a working, secure and improving product: kept recordings in the testing phase, usage counts, error reports, server logs, backups, ClickUp tasks. You can object at any time (section 13).
- Consent (Art. 6(1)(a) GDPR): the desktop setting "Share recordings", once you turn it on.
- Explicit consent (Art. 9(2)(a) GDPR): voice profiles. You give it by naming or confirming a speaker and withdraw it by deleting the person or the list.
We need your account data to provide Lohelo; without it you cannot use Lohelo. Everything described as optional is voluntary.
8. How long we keep data
| Data | Kept on our server |
|---|---|
| Dictation audio | During the testing phase kept 60 days, then deleted automatically; earlier if you delete the dictation or your account |
| Recordings shared from the desktop app | 90 days, then deleted automatically; earlier if you delete the dictation or your account |
| Meeting audio | During the testing phase 30 days after its text is stored, then deleted automatically; a piece that cannot be processed is deleted after 24 hours at the latest |
| Meetings (transcript, notes, topics, speakers, attendees) | 1 year from the start, or until you delete the meeting |
| Dictation history, dictionary, settings, writing profile, voice profiles | Until you delete them or your account |
| Feedback with attachments | Until you delete your account |
| Error reports | 30 days |
| Usage counts | Daily totals without personal reference, 400 days |
| Server logs | 14 days |
| Account and sign-in data | Until you delete your account |
| Invoices and payment records | As long as tax and commercial law require (up to 10 years) |
| Encrypted database backups | Up to about 12 months (daily, weekly and monthly backups). Deleted data can remain in backups for that long; it is not restored from them except to recover from an outage. Audio files are not in the backups. |
9. Data on your device
The apps keep on your device: your history and dictionary, on a computer your recent dictation recordings and meeting recordings (30 days by default, adjustable), notes and transcripts, your sign-in and app logs. On Android this data is excluded from cloud backups. Lohelo Pocket uses Apple's speech recognition for the live preview on the device only. We see this data only if you send it to us. Signing out or deleting your account removes it from the device.
10. Permissions
- Microphone (all devices): for dictation and meetings. On iPhone, Lohelo can keep the microphone open but muted between takes, so dictation starts at once; nothing is recorded or sent while it is muted, and iOS shows its orange indicator while the microphone is in use.
- Background audio (iPhone): so a take or meeting keeps running when you switch app or lock the screen.
- Full Access (iPhone keyboard): see "Keyboards" above.
- Android: microphone; notifications and a foreground service so a recording keeps running behind other apps and with the screen off; the Lohelo keyboard.
- Desktop: Accessibility, system audio and calendar on macOS, screen recording only when you attach a screenshot or recording to feedback.
You can withdraw permissions at any time in your device's system settings.
11. Security
All connections to our servers are TLS-encrypted. Database backups are encrypted before they are stored and kept with a deletion lock against tampering. Server access is limited to the Lohelo team. Error reports are cleaned of personal content before sending. Desktop updates are signed and checked before they are installed. No system is free of risk; we keep adapting our measures.
12. Deleting your account and data
In the app: Settings → Account → Delete account. On the web: lohelo.com/delete-account. We then delete your account and everything we store for it at once: history, kept recordings, meetings with audio, transcripts, notes, topics and speakers, your voice profiles, feedback with attachments and the related ClickUp tasks, error reports, settings, your entries in the team glossary and your sign-in account. The app also removes your data from the device. Without the app and the web page, write to support@wovero.com from your account's email address; we delete within one month. Daily totals without personal reference, legally required billing records and backups (section 8) are not affected. Deleting the account does not cancel a subscription bought through Apple, Google or Stripe: cancel it there first (Support explains how).
To have only the audio deleted, write to support@wovero.com.
13. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw a consent with effect for the future (Art. 7(3)). Write to support@wovero.com; we answer within one month.
Right to object (Art. 21 GDPR): where we process data on the basis of our legitimate interest, you can object at any time on grounds relating to your particular situation. For usage counts, error reports and text around the cursor it is enough to turn the switch off in Settings.
Right to complain: you can complain to a data protection supervisory authority. Ours is Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, datenschutz.hessen.de.
14. Changes
We update this policy when Lohelo or the services we use change. The date at the top shows the latest version. We tell active users about material changes in the app or by email.