Privacy Policy

Last updated: 16.10.2026 · Version 2.7

This English version is provided for information only. Only the German version is legally binding.

1. Controller

The controller within the meaning of the GDPR is:

Martel Innovation, owner Viktor Martel
Kreisental 11, 74925 Epfenbach, Germany
Email: support@redefix.app

You can reach us at this address for all questions about data protection.

2. Principle: your dictation stays with you

Redefix works locally on your computer. Voice recordings, the recognized text and speech output are not transmitted to us or to third parties. The speech models also run on your computer; we only download them from our own server (section 7). What we process is limited to operating the shop, handling your purchase and activating your license. The individual cases are set out below.

3. Hosting and server log files

The shop and downloads run on a server of a hosting provider based in the EU. The server is located in Frankfurt am Main. The hosting provider processes the data on the basis of a data processing agreement (Art. 28 GDPR).

Each time our server is accessed – by your browser or by the Redefix software (section 7) – access data are automatically processed in log files: IP address, date and time, requested address, status code, amount of data transferred and the identifier of the calling program (user agent). The purpose is secure and stable operation, in particular troubleshooting and defending against attacks. The legal basis is our legitimate interest in this (Art. 6(1)(f) GDPR). The log files are deleted automatically after 7 days (section 10).

We deliver fonts from our own server. No data are transferred to third parties (such as Google) for this when the pages are accessed. We do not use advertising services. For visitor statistics see section 3a.

3a. Visitor statistics

To improve our offer, we analyse how our website is used, for example which pages are visited and where visitors come from. We use statistics software on our own server for this. It sets no cookies, stores no IP addresses and passes no data to third parties. We cannot identify you from it. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). The data is deleted after at most 14 months. If your browser sends a "Do Not Track" signal, you are not recorded.

4. Customer account and contract processing

For registration and purchase we process: name, company (if any), address, country, VAT ID (if any), email address, customer number, password (only as an argon2id hash, never in plain text), the language in which we should write to you ("de" or "en"), as well as order, license and invoice data. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and retention obligations under tax and commercial law (Art. 6(1)(c) GDPR).

Mandatory information: We need your name, address, country, email address and password to create your account, conclude the contract and issue a proper invoice. Without this information we cannot conclude a contract with you. Company and VAT ID are optional.

Confirmation of the email address: After registration we send you a one-time confirmation link. Redefix can only be activated – including for the trial period – once the address has been confirmed; the 6-digit code that we send you by email for activation in the app also counts as confirmation (section 6). For this we store only a hash of the link, not the link itself, and the time of confirmation. The purpose is to ensure that an account is only created with an address that can actually be reached (Art. 6(1)(b) and (f) GDPR).

Sessions (login): We set a technically necessary session cookie (redefix_session) with a random token; it serves exclusively for logging in. For the session we store the IP address and browser identifier in order to detect abusive logins. Legal basis for the cookie: § 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act; strictly necessary for the login you requested); for the processing: Art. 6(1)(b) and (f) GDPR.

Language selection: If you call up a page with a language parameter (for example via the language switch, a link in the footer or when returning from the payment page), we store this language in a cookie (redefix_sprache, content only "de" or "en", lifetime one year) so that the pages appear in your language the next time you visit. It contains no identifier and is read only for this purpose. Legal basis: § 25(2) no. 2 TDDDG (strictly necessary to provide the language version you requested).

Light or dark: If you choose the light or dark display, your browser stores this choice locally (redefix-theme, content only "light" or "dark"). It is not transmitted to us. Legal basis: § 25(2) no. 2 TDDDG.

Protection against login attacks: Failed attempts are counted; after several failed attempts, access is temporarily blocked. We send codes by email for each account at most once a minute and at most five times per hour, so that nobody can flood other people's mailboxes (Art. 6(1)(f) GDPR).

Record of your consents: When you register, we store the time, wording and GTC version of your acceptance of the GTC. When you purchase, we store the time and wording of your acceptance of the GTC (with the GTC version) and of your declaration on the right of withdrawal. When you download Redefix, we store the time, wording and GTC version of your acceptance of the GTC as well as the occasion (purchase, trial or feature update). The purpose is to prove which terms you agreed to. Legal basis: Art. 6(1)(b) and (f) GDPR.

Record of the purchase confirmation: For each order we store the time at which our purchase confirmation was sent, a checksum of its content (including the attached contract documents), the identifier of the email at the email service provider, the versions of the GTC and withdrawal policy attached to it as a PDF, and the version of this privacy policy in force at that time. The purpose is to prove that we confirmed the contract to you on a durable medium (§ 312f BGB). Legal basis: Art. 6(1)(c) and (f) GDPR.

Withdrawal via "Withdraw from contract": If you declare a withdrawal using this function, we store your name, email address, the order, invoice or license number you entered, your free text, the time of receipt, the result of the comparison with our orders and the time and identifier of the acknowledgement of receipt. The purpose is to process your withdrawal and to prove its receipt and acknowledgement (§ 356a BGB). Legal basis: Art. 6(1)(c) GDPR (obligation to acknowledge receipt) and Art. 6(1)(b) and (f) GDPR.

Internal notifications: In the event of a registration, a purchase, a withdrawal and errors in sending the purchase confirmation, we receive an internal email with the information required for this (such as name, customer number and order, and for a purchase a copy of the invoice). These emails go exclusively to our own support mailbox at our hosting service provider (section 8); there are no other recipients. The purpose is to manage your contract and to fix errors quickly. Legal basis: Art. 6(1)(b) and (f) GDPR; for the copy of the invoice also Art. 6(1)(c) GDPR (retention obligation). Storage period: section 10.

5. Payment processing – Stripe

We process payments and invoicing via Stripe. The contracting party for businesses in the EEA is Stripe Payments Europe, Limited, c/o A&L Goodbody, 25 North Wall Quay, North Wall, Dublin 1, D01 H104, Ireland. Stripe Technology Europe, Limited, at the same address, may also be involved in the processing.

We transmit to Stripe your name, address, email address and customer number as well as the product and amount. You enter your payment data (e.g. card number) directly on Stripe's payment page; we do not receive them. Stripe creates the invoice; we retrieve it from Stripe for your customer account and your purchase email. Legal basis: performance of the contract and the legal obligation to issue invoices (Art. 6(1)(b) and (c) GDPR). Stripe's privacy notice: https://stripe.com/privacy

VAT (Stripe Tax): Stripe calculates VAT on the basis of the address in your customer account. We do not adopt a different entry on the payment page.

Payment methods: On Stripe's payment page you choose between card, PayPal, Link, Amazon Pay and Klarna. If you choose a payment method other than card, the data required for the payment are also transmitted to the respective provider; that provider processes them under its own responsibility, and its privacy notice also applies.

6. Activation of your license

Redefix only runs with a license file digitally signed by us that is bound to a specific computer. Your license is valid for no more than two computers; the trial period is possible only once per computer. So that we can check this, we process:

• the computer code: the software calculates it from characteristics of your computer; it is non-reversible. Only this code is transmitted; the characteristics themselves do not leave your computer. Neither your hardware nor your location can be derived from the code. Because we assign it to you via your customer account, we treat it as personal data,
• a name for the computer so that you can recognize it in the customer account: when activating in the app, the name you freely choose in the activation dialog (pre-filled with "Mein Rechner" (my computer); you can change it or leave it empty, only what is in the field is transmitted); when activating in the customer account, a name you assign yourself (if none is given, "Rechner ohne Internet" (computer without internet)). The software does not read a name from your computer.

Reading these characteristics on your computer is strictly necessary for the activation you requested (§ 25(2) no. 2 TDDDG): you trigger the activation yourself, and without a computer code we cannot issue the agreed license file bound to one computer (GTC § 2 (2), § 6 (2)).

Activation with internet (in the app): You enter the email address of your customer account; we send you a 6-digit code by email (only a hash of the code is stored). After you enter the code, the software transmits the email address, code, computer code and the name of the computer you have chosen to us. A password is never entered in the app. We do not transmit dictation content, audio data or file names.

Activation without internet (in the customer account): The app displays the computer code. After logging in to your customer account at redefix.app, you enter it there, download the license file and load it into the app. The app itself transmits nothing in this process. A license file of a purchased license issued in this way does not trigger an automatic license check. The trial period can also be activated this way; a trial license file continues to be checked when there is an internet connection.

License check: If a license file has been loaded and there is an internet connection, the software transmits the license file and the computer code to us: for a purchased license at most every 30 days and when you click "Lizenz jetzt abgleichen" (check license now), during the trial period at most once per calendar day. The license file contains the license number (during the trial period your customer number), the edition, the computer code, the expiry date and the date of issue. We use it to check whether anything has changed regarding your activation (e.g. purchase after the trial period, upgrade, release of the computer, blocking of the license), record the time of this last report and, where applicable, send back an updated license file and the current date. During the trial period, the returned date prevents a computer clock that has been set back from extending the trial period; for this, the software locally remembers the last day it saw (this information is not transmitted). Without an internet connection no license check takes place. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in enforcing the agreed scope of use and implementing changes such as purchase, upgrade, release or blocking promptly. The intrusion is minor: only the license file and a non-reversible computer code are transmitted, no dictation content; the IP address remains in the server log files for 7 days. You can object to the license check (section 12).

For each activated computer we store the computer code, the name of the computer, the status (reported by the app or only issued as a license file in the customer account), the time of the first activation and of the last report and, where applicable, the time of release. For the trial period we store the customer account, computer code, start and end. Purpose: checking and enforcing the agreed scope of use and detecting abusive passing on. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and our legitimate interest in protection against unauthorized use (Art. 6(1)(f) GDPR).

The software checks the license file at every start without an internet connection; a permanent connection to us is not necessary. With an internet connection, the license check described above additionally takes place at the intervals stated there.

In the customer account under "My computers" you can see which computers are activated and whether a trial period is running on a computer. Only we release a slot, at your request to support@redefix.app. The entry is then marked as released and remains stored so that it is traceable how often computers are changed.

No automated decision-making within the meaning of Art. 22 GDPR and no profiling take place. The license check only implements the agreed scope of use.

7. The Redefix software itself

What stays local: Voice recordings, recognized text, speech output, your own dictionary and the error log remain on your computer. Recording of dictation content for review purposes is switched off by default and, if you switch it on, does not leave your computer. Speech recognition (Whisper) and the text model for translation and editing (Qwen) run exclusively on your computer.

When the software goes online (as of 15.10.2026, complete). All connections go exclusively to our server redefix.app:

With each of these connections our server technically receives your IP address; it remains in the server log files for 7 days (section 3). For voices and specialist libraries, the software additionally sends the license file (content see section 6) so that a retrieval can be assigned to a license and misuse can be detected (Art. 6(1)(f) GDPR). The legal basis for the other connections is the provision of the software with the functions you use (Art. 6(1)(b) GDPR) and our legitimate interest in up-to-date and functional software (Art. 6(1)(f) GDPR). The notices in the quick panel are based on our legitimate interest in informing you about new features (Art. 6(1)(f) GDPR); you can switch off their retrieval in the settings. Section 6 applies to the license check. Dictation content, audio data or file names are not transmitted in any of these cases.

Microphone: Access takes place only after your consent; it can be revoked at any time.

8. Email

Sending: We send account, confirmation, activation code, license and invoice emails via an email service provider based in the EU. It processes the email address and email content on the basis of a data processing agreement (Art. 28 GDPR). Legal basis: performance of the contract or legitimate interest in reliable delivery (Art. 6(1)(b) and (f) GDPR). For transfers to third countries see section 9, for the storage period section 10.

Our email service provider counts opens and clicks in our contract emails (license, order and invoice emails) only anonymously and does not assign them to any person. We use these figures exclusively to ensure the technical delivery of the emails, not for advertising or profiling.

Emails to us: We receive messages to support@redefix.app and our other addresses at redefix.app in a mailbox at our hosting provider (section 3). We process them in order to handle your request (Art. 6(1)(b) and (f) GDPR).

Notices about Redefix updates: As a purchaser of Redefix, you will occasionally receive an email from us informing you about new feature updates of Redefix. For this we use the email address from your purchase (§ 7(3) UWG, German Act against Unfair Competition; legal basis: legitimate interest in direct marketing, Art. 6(1)(f) GDPR). You can object to this at any time (section 12). Emails about your account, license and invoice are not affected.

9. Recipients, transfers to third countries

Personal data are received only by:

• our hosting provider (server and mailbox, sections 3 and 8) and our email service provider (section 8) as processors,
• Stripe and, where applicable, the payment provider you have chosen (section 5) for payment and invoicing,
• authorities, to the extent that we are legally obliged to do so.

Our hosting provider uses sub-processors, some of which are based in third countries (USA). The transfer is based on EU standard contractual clauses (Art. 46(2)(c) GDPR).

The servers of our email service provider are located in the EU. However, it uses sub-processors and group companies based in the USA and India that may have access to data. The transfer is based on standard contractual clauses of the EU Commission (Art. 46(2)(c) GDPR) with supplementary measures and, where available, on the adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR).

You can obtain a copy of the safeguards for our hosting provider and our email service provider on request to support@redefix.app.

Stripe also processes data in the USA. For this, Stripe relies on the EU-US Data Privacy Framework, for which the EU Commission has found an adequate level of protection (Art. 45 GDPR), and, where this does not apply, on EU standard contractual clauses (Art. 46(2)(c) GDPR). Further details can be found in Stripe's privacy notice (section 5).

10. Storage period

We store personal data only for as long as is necessary for the stated purposes.

• Accounting records (invoices, payment records): 8 years (§ 147 AO, German Fiscal Code).
• Annual financial statements, books of account, inventories: 10 years.

These periods begin at the end of the calendar year in which the record was created, for invoices therefore not on the date of issue (§ 147(4) AO).

• Account and license data, including the activated computers, the trial periods and the records of your consents: for the duration of the business relationship, at the longest until you delete your customer account (next item).
• Deletion of your customer account: You can delete your customer account yourself in the customer account; you confirm the deletion with your password. This is only possible after the withdrawal period of 14 days following your last purchase (license, upgrade or feature update) has expired, and not while a payment process is in progress; the customer account shows you the day from which you can delete it. Until then, we need your details to process a withdrawal and the refund and to assert or defend claims arising from them (Art. 17(3)(e) GDPR). We then delete your name, email address, password and your sessions or make them unrecognizable. Your purchased licenses remain valid on your computers; we keep the license record without any reference to your person. We retain invoice and order data for 8 years from the end of the calendar year of the invoice due to statutory retention obligations (§ 147 AO, German Fiscal Code; § 14b UStG, German VAT Act) and block them for all other purposes (Art. 17(3)(b) GDPR). We detach computer codes from the trial period from the account (item after next). On deletion, we also make the details of your customer record held by the payment service provider Stripe (name, email address, address) unrecognizable; invoices already issued remain unchanged there due to the retention obligation. We confirm the deletion to you by email. Without a customer account, transferring a license, activating further computers and purchasing upgrades or feature updates are no longer possible (GTC § 3 (8)).
• Records of the purchase confirmation and withdrawal declarations: as for account and license data; where they form part of the invoice and order data, as for those (8 years, also after deletion of your customer account).
• Computer code of a trial period that has been used: until 24 months without use have passed; we then delete it automatically. The purpose is that each computer uses the trial period only once (Art. 6(1)(f) GDPR). If you delete your customer account, we detach the code from the account and keep only the code and expiry date until the end of the period. Our interest in preventing repeated free trial periods on the same computer prevails because the code is pseudonymous and is no longer assigned to any person after the account has been deleted. You can object by email to support@redefix.app (section 12).
• Sessions (with IP address and browser identifier): expire after 7 days or on logout; we delete expired sessions at the next login process in the shop, and immediately when you delete your customer account.
• Internal notifications (section 4) in our support mailbox: 12 months, then we delete them.
• Copies of invoices in our support mailbox: 8 years from the end of the calendar year of the invoice (§ 147 AO), then we delete them.
• One-time links and codes (email confirmation, password, activation): one day after they expire; we need that day for the brake against email flooding.
• Server log files: 7 days, then automatic deletion.
• Visitor statistics: at most 14 months, then automatic deletion (section 3a).
• Sending logs at the email service provider (recipient, timestamp, IP address, subject): 1 month, then automatic deletion. It does not store the content of the emails. We keep the proof of sending contract confirmations in our own system and retain it for as long as we need it to fulfill legal obligations and to defend against claims.
• Backups of the database: 30 days on a rolling basis; we delete older backups automatically. The purpose is to restore the data after errors or outages (Art. 32(1)(c) GDPR). Legal basis: Art. 6(1)(c) and (f) GDPR.

11. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR, see section 12). You can delete your customer account yourself in the customer account (after the withdrawal period, section 10); you confirm the deletion with your password. Section 10 sets out what is deleted and which data we continue to retain due to statutory obligations. You can withdraw consent you have given (for example for the microphone) at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence or place of work. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg).

12. Your right to object

Objection to advertising: You can object to the notices about Redefix updates by email (section 8) at any time, free of charge and without giving reasons: via the unsubscribe link in each of these emails or by email to support@redefix.app. We will then no longer send you such notices.

Objection on grounds relating to your particular situation: Where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21(1) GDPR). We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defense of legal claims.

Objection to the license check: You can object to the automatic license check at any time. To do so, activate your computer via the customer account (activation without internet, section 6) or write to support@redefix.app. You will then receive a license file that does not trigger an automatic license check. You will then receive upgrades and updated license files only via the customer account. During the trial period we continue to perform the license check when there is an internet connection so that a computer clock that has been set back does not extend the trial period; here our grounds prevail (Art. 21(1) sentence 2 GDPR). Without an internet connection no license check takes place during the trial period either.

Objection to visitor statistics: Set "Do Not Track" in your browser; you will then not be recorded. An email to support@redefix.app is equally sufficient.

The easiest way to object to the retrieval of notices in the software is the switch in the settings (section 7); an email to support@redefix.app is equally sufficient.

13. Contact for data protection matters

For data protection matters: support@redefix.app