Last updated: September 2026
This policy explains what ljtranslate collects, why, and what happens to your voice. It describes what the app actually does, not what a template says it might do.
The data controller for ljtranslate is José Luis Villar Bardanca. For anything in this policy, write to info@xeitotech.com.
When you start a translation, audio from your microphone is streamed to our server and forwarded to OpenAI, which performs the translation and returns the translated text and speech. OpenAI is a sub-processor and receives your audio for this purpose.
We do not store your audio. It is held in memory only for as long as it takes to translate, and is not written to disk on our servers. We do not keep recordings, and we do not use your audio to train any model.
Translated text is shown on your device and is not stored on our servers.
If you use the free trial without registering, we create an anonymous account. It holds no name, no email address and no profile.
If you sign in with Google, we store your email address and the account identifier Google gives us, so we can recognise you next time. If you sign in with an email code, we store your email address; the code itself is kept only as a keyed hash for ten minutes, and we count how many codes were sent to an address each day so nobody can flood a mailbox through us.
We store how many seconds of translation you have used, so we can apply the free allowance.
The free trial is limited to one per device. To enforce that, we take your device's advertising-free system identifier and store only a keyed hash of it. We never store the identifier itself, and the hash cannot be reversed to identify your device.
We do the same with your IP address to limit how many trials can be started from one network in a day. Only the hash is stored.
Our servers run in Germany (Hetzner). Audio and everything else in transit is encrypted.
Two providers process data on our behalf. OpenAI receives your audio to perform the translation; its servers are in the United States, and the transfer is covered by the EU-US Data Privacy Framework and the European Commission’s standard contractual clauses. OpenAI does not use your audio to train its models. Brevo sends the sign-in emails and sees only the address they go to.
Backups of the account database are encrypted before they leave the server and can only be read with a key that is not kept on it. We keep them for up to twelve months, so a deleted account can persist in a backup for that long before it is gone everywhere.
We keep account and usage records for as long as your account exists. Product events recorded before you had an account, which are tied only to the keyed device hash, are deleted after twenty-four months.
We record a small number of product events — opening the app, starting a trial, reaching the free limit, starting and ending a translation session, and registering interest in a subscription — so we can tell whether the app is useful. For a translation session we also record how long it ran and whether the connection had to drop audio; we never record what was said. Some of these happen before you create an account, and those are tied to the keyed hash of your device identifier described above, never to the identifier itself. All of it is stored on our own servers, and we do not use third-party advertising or tracking SDKs.
If you tell us you are interested in a subscription, we store the plan you chose and, if you give it, your email address, so we can contact you when it launches. You can do this without an account, in which case it is tied to the same keyed device hash and to no other identity.
You can delete your account at any time from Settings, or by asking us at https://translate.xeitotech.com/delete-account. Deleting removes your email address, your sign-in tokens, your allowance, the events tied to you and any subscription interest you registered.
Two things stay. A record of how many seconds each translation session was billed, with nothing on it that identifies you, because we reconcile those against our supplier’s invoice. And the keyed hash of your device, pointing at no account, so the one-off free trial cannot be claimed again by deleting an account and signing up afresh.
Under the GDPR you can also ask for a copy of your data, ask us to correct it, or object to our processing it. You have the right to complain to a supervisory authority; ours is the Agencia Española de Protección de Datos.
Our lawful basis for processing is performing the contract you enter into by using the app, and our legitimate interest in preventing abuse of the free tier and in understanding whether the app is useful.
This app is not intended for children under 13, and we do not knowingly collect data from them.
For any privacy question or request, contact us at info@xeitotech.com.