1. What this policy covers
This policy describes how Diction Flow (“we”, “us”) collects, uses, and protects information when you use the Diction Flow web app at dictionflow.com and the Diction Flow Extension for Chrome, Edge, and Firefox.
2. Data we collect
- Account data — email address and display name from your Diction Flow account (via Keycloak). Used to authenticate you and sync data across devices.
- Vocabulary you save — words and phrases you click in subtitles or add manually, along with their source context (sentence, language, the page title/URL of the streaming site at the time of save). Stored against your account so you can review them later.
- Practice activity — meeting transcripts, pronunciation scores, quiz answers, and other data generated when you use the web app's practice features. Used to drive spaced-repetition review, the feedback report, and progress charts.
- Extension settings — your subtitle preferences (font, position, delay, target language) are stored in Chrome sync storage so they follow you across devices signed in to the same browser profile.
- Diagnostic logs — basic request metadata (timestamp, endpoint, response code) for debugging and abuse prevention. No subtitle content is logged.
3. Third-party services
When you request a translation in the extension, the selected subtitle text is sent directly to the translation provider you choose in the extension settings. Supported providers and their respective privacy terms:
- Google Translate
- DeepL
- Microsoft Bing Translator
- Yandex Translate
- OpenAI (when the OpenAI provider is selected)
Diction Flow does not store the translated text. Provider requests are made from your browser; we never proxy them through our servers.
4. What we do NOT collect
- We do not record video, audio, or full subtitle streams from the sites you watch.
- We do not sell or rent your data.
- We do not use third-party advertising trackers.
- We do not access any browser tab the extension is not actively running on.
5. Data retention & deletion
Saved vocabulary and practice data are retained for as long as your account is active. To delete your account and all associated data, contact us via our contact form. Deletion requests are honoured within 30 days.
6. Permissions used by the extension
scripting,activeTab— inject the subtitle overlay into the current tab.storage— save your extension settings and sync them across devices.tabs— open the Diction Flow website when you click the popup link.identity— perform the OAuth login flow with auth.dictionflow.com.host_permissions— call your chosen translation provider's API and the Diction Flow backend. The*://*/*entry is optional and is requested only when you enable Diction Flow on a streaming site that is not on the built-in list.
7. Security
All data in transit is encrypted with TLS. Access tokens are stored in Chrome's encrypted sync storage. We follow industry-standard practices to safeguard data at rest.
8. Children
Diction Flow is not directed to children under 13 and we do not knowingly collect data from them.
9. Changes to this policy
We may update this policy from time to time. Material changes will be announced in the web app and in the extension popup before they take effect.
10. Contact
For privacy questions or data deletion requests email privacy@dictionflow.com.