Privacy policy

Red Flow ("Red Flow", "we", "us") is a dictation service for Yiddish, made up of the Red Flow Android app (including the Red Flow Bubble and the optional Red Flow keyboard), the Red Flow Windows app, and the web portal at redflowapp.com. It records your voice when you ask it to, converts it to text, and types that text into the app you are using. This privacy policy explains exactly what we collect, why, how long we keep it, who processes it, and how to remove it.

• Account information. Your email address, your display name, and a securely hashed password. We never store your password in readable form. If you sign in with Google, we store your Google account identifier instead of a password.
• Voice recordings. Audio is captured only while you hold or tap the microphone (the bubble, the keyboard mic key, or the desktop shortcut) and stops when you finish or cancel. The recording is sent to our servers to be transcribed. If "Improve Yiddish recognition" is on (it is on by default), the recording is also stored with the dictation so the speech model can be improved. See "How recordings are used" below.
• Transcripts. The text produced from your speech, along with when it was dictated, the length of the recording, which engine produced it, and which Red Flow app was used (for example Android or Windows). We do not record which third-party app you dictated into.
• Corrections. If you edit a transcript, we store the corrected version alongside the original. New words you introduce may be added to your personal dictionary automatically, and the app shows you which words it learned.
• Your dictionary and snippets. Words, names and phrases you add, and the words Red Flow learns from your corrections.
• Devices and sessions. For each signed-in device: its model name (for example the phone model), the platform, and when the session was created and last used, so you can see and revoke your own sessions.
• Usage statistics. Word counts and dictation time, calculated from your dictations, which power the statistics shown in the apps.
• Server logs. Like most online services, our servers log technical request information (such as IP address, time and the endpoint requested) for security and troubleshooting.

The Red Flow Bubble uses Android's AccessibilityService API. Red Flow is not an accessibility tool; the service is used for exactly two things, and only after you agree to an in-app disclosure and turn it on yourself in Android settings:

• Showing the microphone bubble when a text field is focused. To do this the service checks, on your phone, which app is in the foreground and the type and identifier of the focused field, so it can stay hidden where it should.
• Inserting your dictated text into that field. To place the text correctly, the service looks at the characters immediately around the cursor (to decide whether a space is needed and to confirm the text was inserted, so Undo works). Where direct insertion is not available (for example on Android 12 and earlier), the text is pasted through the clipboard and your previous clipboard content is put back; if it cannot be inserted at all, it is left on your clipboard for you to paste.

This information is processed on your device, in memory, at the moment it is needed. Red Flow does not read, collect, store, or transmit the contents of your screen or of your text fields, and does not share any information obtained through the accessibility service with anyone. The only thing that leaves your device is the audio you choose to record.

The bubble never appears on password, PIN, numeric or phone number fields, on fields that identify themselves as one-time codes or card details, or in banking, payment, brokerage, crypto wallet, password manager and authenticator apps. You can also hide it in any other app. The list of installed apps shown when you choose apps to hide is read on your device only and is never sent to us.

The optional Red Flow keyboard is a voice-only input method: it has a microphone key and no letter keys. It does not record what you type with other keyboards and does not log keystrokes. It sends only the audio you record with its microphone key.

• We do not record audio in the background. Recording only happens when you start it.
• We do not collect your contacts, location, photos, messages or browsing history.
• We do not sell your data, and we do not use it for advertising.
• The Android app contains no advertising, analytics or crash-reporting SDKs.

Yiddish speech recognition is a small field with limited training data. While "Improve Yiddish recognition" is on, we keep your recordings, and transcripts you correct may be paired with their recordings to train improved versions of the speech model. Authorised members of the Red Flow team may listen to recordings and read transcripts to prepare this training data. Recordings are associated with your account and are never published or sold.

You can turn "Improve Yiddish recognition" off at any time in the web portal under Settings, Data and privacy. Turning it off immediately deletes the recordings already stored for your account, stops new recordings from being stored, and excludes your data from training. Your transcripts stay unless you delete them.

• Dictation history. Kept until you delete it, by default. In the web portal under Settings, Data and privacy, you can instead choose to delete dictations (and their recordings) automatically after 24 hours, or not to save history at all, in which case transcripts are returned to your device and nothing is stored.
• Recordings. Kept with their dictation while "Improve Yiddish recognition" is on, and deleted when the dictation is deleted, when that setting is turned off, or when your account is deleted. When it is off, audio is used only to produce the transcript and is not stored.
• Recordings in progress. Audio held in memory while a long dictation is being transcribed is discarded as soon as the dictation finishes, and in any case within 10 minutes.
• Account, dictionary and snippets. Kept until you delete them or your account.
• Sessions. A signed-in session expires after 60 days without use, or when you sign out or revoke it.
• Server logs and backups. Removed on the normal rotation cycle of our hosting provider. We do not use them to rebuild deleted accounts.

• Railway hosts our servers, database, stored recordings and our CPU speech recognition service.
• RunPod runs the GPU speech recognition service that transcribes audio for accounts on the accelerated tier. Audio is sent to it only to be transcribed.
• Anthropic processes text you select and the instruction you give when you use the text AI features of the Windows app (Command Mode and Transforms). The Android app does not use these features and sends nothing to Anthropic.
• Google delivers our account emails (verification codes and password resets) and, if you choose to use it, provides Sign in with Google.

The speech recognition model itself was created by ivrit.ai as an open model. We run it on the infrastructure above; ivrit.ai does not receive your audio or transcripts.

These providers process data on our behalf and under our instructions, and are not permitted to use it for their own purposes. We may also disclose data if required by law.

• Delete a single dictation. Delete it from the history list on the Home tab of the Android app, or from the history list in the Windows app. Its recording is deleted with it.
• Delete all dictations. Web portal, Settings, Clear all dictations.
• Delete all recordings. Web portal, Settings, Data and privacy, turn off Improve Yiddish recognition.
• Delete your entire account. In the Android app open Settings and tap Delete account, or visit redflowapp.com/delete-account. If you cannot sign in (for example, you signed up with Google), email us from the address on the account. Deletion is immediate and permanently removes your account, transcripts, corrections, recordings, dictionary, snippets and sessions. It cannot be undone.

All traffic between the apps and our servers is encrypted with HTTPS. Passwords are hashed with Argon2. Access tokens are short lived and refresh tokens rotate on every use. On Android, sign-in tokens are stored in the app's private storage and are excluded from device backups and transfers.

Red Flow is not directed at children under 13 and we do not knowingly collect their data.

If this policy changes in a way that affects how your data is used, we will update the date at the top of this page.

Questions, requests, or data concerns: info@yoyotechnologies.com.