Privacy Policy for Lohelo
Last updated: 20 October 2026. This is a translation; the German version is authoritative.
This policy covers Lohelo: the desktop app for macOS, Windows and Linux, the Android app, the iPhone app Lohelo Pocket (with its keyboard), the Lohelo server at api.wovero.com and the Lohelo pages at wovero.com/lohelo. Lohelo is currently in its testing phase. The rest of wovero.com is covered by our general privacy policy.
1. Controller and contact
Wovero GmbH, Badestube 6, 36251 Bad Hersfeld, Germany. Registered at Amtsgericht Bad Hersfeld, HRB 3405. Full details in the Imprint.
For any privacy question and to exercise your rights: support@wovero.com.
We have not appointed a data protection officer. Fewer than 20 people at Wovero regularly process personal data, and in our assessment the other conditions that would require one (Art. 37 GDPR, § 38 BDSG) are not met. If that changes, we will appoint one and name them here.
2. In short
- Lohelo processes your speech and your text to write text, rewrite it, translate it and make meeting notes.
- Our servers are in Germany (Hetzner Online GmbH data centre). Speech recognition and text processing run on a GPU server in Germany that a company affiliated with Wovero operates on our behalf.
- Sign-in is provided by Clerk, Inc. in the USA, so your account data is transferred to the USA (section 6).
- During the testing phase the desktop app sends your dictation recordings to us by default (kept 90 days). You can turn this off in Settings. From the next version on it is only turned on if you choose to.
- We do not use your recordings or texts to train AI models, we do not sell data and we show no ads.
- You can delete your account and all its data in the app at any time (section 12).
3. What we process and why
Account and sign-in
Your email address, your name and profile picture (if any), your user id and, with Google or Apple sign-in, the identifier they give us. Also your plan, your word counter, your roles, your writing profile (for example style and your own instructions) and the features enabled for your account. Purpose: to sign you in, keep your data in sync across your devices and provide the service. Clerk sends sign-in codes by email on our behalf (sender clkmail.wovero.com) and also processes technical session data such as IP address and browser.
Dictation
- Audio: recorded while you hold the dictation key or tap record, and sent encrypted to our server. The server passes it on for speech recognition and does not store it (exception: "Share recordings", below).
- Text context (macOS only): up to 2,000 characters from the text field at your cursor and a tone hint derived from the app. Lohelo uses them to match spelling, names and tone. On Windows only the tone hint is sent; on Linux, Android and iOS none of it. The app's name and window title stay on your device. We do not store the text context.
- History: the text Lohelo wrote, the text before cleanup, the language, the language pair, length, word count and time. Stored in your account so your history is the same on all devices.
Rewrite and translate
The text you select or dictate to rewrite or translate, and your instruction. On a Mac Lohelo reads the selection through Accessibility, on Windows and Linux through a brief copy to the clipboard, on Android through the share sheet, the text-selection menu or the Lohelo keyboard (only when you trigger it; password fields are skipped). The text is processed and not stored separately.
Share recordings (desktop, testing phase)
During the testing phase the desktop app sends each dictation recording to us, also failed ones and, the first time, the ones already saved on your computer. With it go the recognised and the pasted text, the languages, the length, the reason a take failed (if any), the app version and your operating system, linked to your account. Purpose: to find and fix recognition errors and to check speech recognition against real recordings. Only the Lohelo team has access. Lohelo shows a notice before the first upload.
This is currently on by default. Turn it off in Settings → General → "Share recordings to improve Lohelo"; from then on nothing is sent. From the next version it is off by default and only turned on if you choose to. Android and Lohelo Pocket do not send recordings this way.
Meetings
- Meeting audio: on a computer your microphone ("Me") and the meeting app's sound ("Them"), on Android the microphone only, sent in short pieces.
- Transcript and notes: the text, who spoke when, translations, topics, summary, decisions and tasks, plus title, meeting app name and languages.
- Calendar (macOS only, optional): if you turn on "Suggest from my calendar", Lohelo reads the event's title and attendees. If speaker recognition is enabled for your account, the attendees' display names are sent to us with the meeting and stored there.
Please tell the other participants before you record a meeting, and get their agreement where it is required.
Speaker recognition and voice profiles
Speaker recognition is available per account. When it is on, our server computes a voice signature (a series of numbers) for each person speaking in a meeting, to tell speakers apart. This runs on our own server. When you name a person or confirm a suggestion, Lohelo saves the signature under that name in your personal voice profile list, to suggest the name in later meetings. Lohelo can also suggest names from introductions ("I'm Anna") and from calendar attendees. Voice signatures are biometric data. You can rename, merge or forget each person, or delete the whole list, in the app. It is never shared with other users.
Dictionary, team glossary and settings
Your own words and corrections, your settings and your word counter (for the free plan's limit). Terms you add to the team glossary are visible to all Lohelo users with the same email domain as you, together with your email address as the author. For addresses at general email providers (for example gmail.com) the glossary is personal. If you invite colleagues, we store their email address and the invite code.
Usage counts (desktop)
The desktop app reports simple events: that a sign-in completed, how long the first dictation took after installing (in coarse buckets), that the other side of a meeting was very quiet, and how the dictation pill is used (for example: recording started, action chosen, error message shown; fixed categories only). We keep only daily totals: no user id, no device, no text, no audio. Purpose: to improve Lohelo and spot problems in the flow. On by default; turn it off in Settings → General → "Share usage counts". Android and Lohelo Pocket send no usage counts.
Error reports
When you turn on "Send error reports" in Settings (or, while you have not chosen, for test accounts where we enabled it): what went wrong and where in the code, app version, operating system, device model, interface language, the id of the current meeting or last dictation, and the last lines of the app log. Personal content (texts, email addresses, keys, IP addresses, longer quotes) is removed on the device and again on the server. Reports are stored under a one-way hash of your user id.
Feedback
When you send feedback from inside Lohelo: your text, if you want a voice note (which we turn into text), screenshots, a screen recording (up to 60 seconds, only on your click) or files, if you want a cleaned app log with device details, your email address and our replies. On Android only text and, if you want, the log. Stored on our server so you can follow it and reply.
Updates and downloads
The desktop app asks api.wovero.com for updates and sends the operating system, processor architecture and app version. Downloads come from wovero.com. The Android app and Lohelo Pocket are distributed through Google Play and the App Store and TestFlight; Google and Apple process data under their own privacy policies.
Website and server logs
- Server logs: when you reach our servers, technically necessary data (IP address, time, address requested, browser or app) is processed to deliver and protect the service. The logs contain no text or audio from your dictations or meetings and are deleted after 14 days. We also use IP addresses for a few minutes to limit sign-in attempts.
- Plausible Analytics: the Lohelo pages and the download page count visits with Plausible, without cookies and without profiles. Your IP address is only used to form an anonymous identifier that changes daily, and is not stored.
- Sign-in page:
wovero.com/lohelo/loginloads Clerk's sign-in script from the jsDelivr content delivery network, which receives your IP address and browser data.
4. Who processes data for us
We do not pass your data to third parties for their own purposes. These service providers process data on our behalf (Art. 28 GDPR):
| Recipient | Purpose | Location | Data |
|---|---|---|---|
| Hetzner Online GmbH, Gunzenhausen | Data centre for our own servers (Lohelo server, database, website) and storage for encrypted backups | Germany (Falkenstein; backups Nuremberg) | All data listed above that is on the server. We run the servers ourselves. |
| A company affiliated with Wovero (sister company) | Operation of the GPU server for speech recognition, cleanup, rewriting, translation, meeting notes and topics | Germany | Audio and text for processing |
| Clerk, Inc., San Francisco | Sign-in, email sign-in codes, sign-in with Google and Apple | USA | Email, name, profile picture, account identifiers, session data (IP address, browser) |
| ClickUp (Mango Technologies, Inc.) | Internal task list for feedback and error reports | USA | Metadata only: report number, kind, environment, app version, operating system, number and type of attachments. No text, email address, image or log. |
| Plausible Insights OÜ | Cookieless visit statistics for the Lohelo pages | EU | Page, referrer, browser, operating system, country, aggregated |
If you sign in with Google or Apple, they confirm your identity under their own terms and as separate controllers. You can always sign in with an email code instead.
5. No selling, no ads, no training
- We do not sell data or pass it to advertisers. The apps contain no third-party advertising, analytics or crash-reporting SDKs.
- We do not use your recordings or texts to train AI models. Lohelo uses ready-made models; shared recordings only serve to find errors and check recognition.
- Your audio and texts go to no AI service other than the GPU server in Germany named above.
- There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
6. Transfers to the USA
Clerk and ClickUp are based in the USA. Clerk states that it is certified under the EU-U.S. Data Privacy Framework; for certified companies an adequacy decision of the European Commission applies (Art. 45 GDPR). In addition, Clerk's data processing terms include the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR). We send ClickUp only the metadata named above. You can request a copy of the safeguards at support@wovero.com. Loading the sign-in script through jsDelivr and signing in with Google or Apple can also involve third countries.
7. Legal bases
- Contract (Art. 6(1)(b) GDPR): account and sign-in, dictation, rewrite, translation, history, meetings, dictionary, settings, updates, feedback.
- Legitimate interest (Art. 6(1)(f) GDPR) in a working, secure and improving product: share recordings (while on by default), usage counts, error reports, server logs, backups, visit statistics, ClickUp tasks. You can object at any time; the switches in Settings take effect immediately.
- Consent (Art. 6(1)(a) GDPR): share recordings, once you turn it on yourself from the next version.
- Explicit consent (Art. 9(2)(a) GDPR): voice profiles. You give it by naming or confirming a speaker and withdraw it by deleting the person or the list.
We need your account data to provide Lohelo; without it you cannot use Lohelo. Everything described as optional is voluntary.
8. How long we keep data
| Data | Kept on our server |
|---|---|
| Dictation audio | Not stored, processing only |
| Shared recordings (desktop, testing phase) | 90 days, then deleted automatically; earlier if you delete the dictation or your account |
| Meeting audio | Deleted as soon as its text is stored; a piece that cannot be processed after 24 hours at the latest. For individual test accounts where we turn it on for troubleshooting: 30 days |
| Meetings (transcript, notes, topics, speakers, attendees) | 1 year from the start, or until you delete the meeting |
| Dictation history, dictionary, settings, writing profile, voice profiles | Until you delete them or your account |
| Feedback with attachments | Until you delete your account |
| Error reports | 30 days |
| Usage counts | Daily totals without personal reference, 400 days |
| Server logs | 14 days |
| Account and sign-in data (with us and with Clerk) | Until you delete your account |
| Encrypted database backups | Up to about 12 months (daily, weekly and monthly backups). Deleted data can remain in backups for that long; it is not restored from them except to recover from an outage. Audio files are not in the backups. |
Statutory retention duties (for example for invoices) remain unaffected.
9. Data on your device
The apps keep on your device: your history and dictionary, on a computer your last 500 dictation recordings and meeting recordings (30 days by default, adjustable), notes and transcripts, your sign-in and app logs. On Android this data is excluded from cloud backups. Lohelo Pocket uses Apple's speech recognition for the live preview on the device only. We see this data only if you send it to us. Signing out or deleting your account removes it from the device.
10. Permissions
- Microphone (all devices): for dictation and meetings.
- Accessibility (macOS): for the dictation key, to read the text field at your cursor and to paste the text there.
- System audio (macOS, meetings only): to record the meeting app's sound. No picture.
- Calendar (macOS, optional): to suggest title and attendees.
- Screen recording (macOS, only when you attach a screenshot or recording to feedback).
- Android: microphone, notifications, foreground service for running recordings. Optionally the Lohelo keyboard and the Lohelo bubble. The bubble is an accessibility service that reads the active text field to insert text there; that text stays on the device. The bubble is off until you accept its notice.
- iPhone: microphone, speech recognition (on the device), background audio. The Lohelo keyboard needs "Full Access" to send your recording to our server; it reads the text before the cursor only on the device, for spacing.
You can withdraw permissions at any time in your device's system settings.
11. Security
All connections to our servers are TLS-encrypted. Database backups are encrypted before they are stored and kept with a deletion lock against tampering. Server access is limited to the Lohelo team. Error reports are cleaned of personal content before sending. Desktop updates are signed and checked before they are installed. No system is free of risk; we keep adapting our measures.
12. Deleting your account and data
In Lohelo (desktop, Android or Lohelo Pocket): Settings → Account → Delete account. We then delete your account and everything we store for it at once: history, shared recordings, meetings with audio, transcripts, notes, topics and speakers, your voice profiles, feedback with attachments and the related ClickUp tasks, error reports, settings, your entries in the team glossary and, within an hour at the latest, your sign-in account at Clerk. The app also removes your data from the device. Without the app, write to support@wovero.com from your account's email address; we delete within one month. Daily totals without personal reference and backups (see section 8) are not affected.
13. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw a consent with effect for the future (Art. 7(3)). Write to support@wovero.com; we answer within one month.
Right to object (Art. 21 GDPR): where we process data on the basis of our legitimate interest, you can object at any time on grounds relating to your particular situation. For share recordings, usage counts and error reports it is enough to turn the switch off in Settings.
Right to complain: you can complain to a data protection supervisory authority. Ours is Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, datenschutz.hessen.de.
14. Changes
We update this policy when Lohelo or the services we use change. The date at the top shows the latest version. We tell active users about material changes in the app or by email.