Controller and contact
Victor Cătălin provides RadionicApp and controls account-service data. For personal-data questions or rights requests, write to [email protected]. Do not include passwords, sign-in codes, AI keys or client records in your initial request.
Aleea Stânișoarei, Nr. 4, Bloc 122, Sc. C, Ap. 43, Ploiești, România[email protected]
Data on your device
Witnesses, photos, intentions, case files, RAI conversations, projects, automations and session history are saved locally. Signing in does not automatically upload these projects to the web account. Local files and databases do not have full encryption by default; protect your Windows account and backups. Your own AI keys and account session use operating-system protection when available. If the session cannot be stored securely, it may remain in application memory only.
Account, devices and purchases
When you use an account, the service processes your email, session details, installation identifier, application platform and version, associated devices, access rights, trial, purchases, credits and AI usage. Usage records include the operation identifier, type, time, status and accounted resources. Authentication and hosting may record IP addresses and technical security data. These records support access delivery, device seats, prevention of repeated trial grants and fault investigation.
When content is sent to AI
Using AI sends the content required for your request to the configured service: messages and shared context, including witness name and intention when you choose to share your draft, images attached for analysis or editing, and audio recordings for dictation. These features are optional. In managed mode, requests pass through the RadionicApp service to the configured AI provider; managed dictation uses Groq. In BYOK mode, the application uses your chosen provider and key. That provider's policies and charges apply separately. Do not submit other people's sensitive data without the necessary authority and legal basis.
Purposes and legal bases
Account and purchase data is used to perform the service you request. Security, abuse prevention and administrative audit records serve legitimate interests in protecting the service and its users. Records subject to legal obligations are retained to meet those obligations. Microphone use, attachments and context sharing follow your actions; you can stop these features. You determine the purpose of client data entered in your practice and must have authority to process it.
Providers and access
Hosting and account services use RadionicApp infrastructure and Appwrite. RevenueCat manages checkout and commercial records, and Stripe processes payments; RadionicApp does not receive your full card number or security code. AI providers receive the request content you submit. Optional photo, voice or public-observation services receive the request and technical connection data. An authorised administrator can inspect accounts, access rights, usage and events for support; interventions are logged. Signing in does not make your local projects available to the administrator.
RevenueCat · Stripe · Groq · Cloudflare
Processing outside the EEA
Payment and AI services may also process data outside the European Economic Area. Destinations, retention and conditions depend on the provider used. Review RevenueCat, Stripe, Groq and your BYOK provider's policies before submitting personal content; you can request information about managed-service providers through the contact address.
Retention and deletion
Local data remains until you delete it or remove the profile; signing out or access expiry does not delete projects. Existing data remains available for reading and export after expiry. Temporary managed-AI result copies used for request retries have a deletion rule after 24 hours. Account, access, purchase and usage records are retained as needed to deliver access, resolve payments and disputes, prevent abuse and meet applicable legal obligations. Request account deletion through support; we explain which data can be deleted and which records must be retained. External providers apply their own retention periods.
Cookies and permissions
The web account uses an essential authentication cookie, valid for up to 30 days, inaccessible to page scripts (HttpOnly), with SameSite protection. To resume a pending purchase, its checkout identifier is kept in the tab’s session storage (sessionStorage). Abuse protection may use Cloudflare Turnstile when enabled. The presentation page does not include advertising analytics trackers. The application uses the microphone, selected files and devices for the features you request. Windows startup is optional. A confirmed Wi-Fi or Bluetooth session publishes a configuration fingerprint, rather than the plain name or original photo; nearby devices can observe and correlate it across sessions. A fingerprint does not guarantee anonymity.
Your rights
You can request access, correction, deletion, restriction or portability and object to processing based on legitimate interests, subject to law. Where consent is the basis, you can withdraw it without affecting earlier processing. Write to [email protected]; we may verify identity before disclosing or changing data. Requests are normally free and receive a response without undue delay, in principle within one month. If a lawful extension is needed for complex or numerous requests, we inform you of the deadline and reason within that first month. You can complain to Romania's ANSPDCP or your competent authority. Email is required for an account, while local Personal features work without one. We do not make automated decisions with legal effects on you; support can investigate trial-eligibility checks.