The Uncomfortable Truth About Voice Assistants

Every time you talk to a typical voice assistant, your audio travels across the internet to a data center — often in the United States. There, it gets processed, analyzed, and in many cases, stored. Some companies use your voice data to train their models. Others share it with third parties. And almost all of them keep it longer than you'd like.

Think about what you tell a personal assistant. Your schedule, your health concerns, your business ideas, your family matters, your financial situation. This is some of the most intimate data you produce. And for most voice assistants, it's sitting on servers you have no control over, governed by privacy laws that are far weaker than what you're used to in Europe.

We built BonusFlow because we believe there's a better way.

Layer 1: Speech Processing Stays in the EU

When you speak to BonusFlow, your audio is transmitted encrypted (TLS) to Mistral AI Voxtral — a French company based in Paris, operating under EU law. Your voice is transcribed there, not on some server farm in Virginia or somewhere in Asia.

Mistral retains audio data for a maximum of 30 rolling days for abuse monitoring and then deletes it automatically. As paying API customers, we have contractual assurance that your audio is never used to train AI models. No opt-in, no hidden clause — contractually excluded.

And the speech output — the app reading responses back to you? That runs entirely locally on your device, via your operating system's native speech synthesis. No data leaves your device during the reading.

Why does this matter? Because speech is biometric data. Your voice is as unique as your fingerprint. With BonusFlow, that data stays in a European legal framework — with rights you can actually enforce.

Layer 2: AI Processing in the EU

After your speech is transcribed, BonusFlow needs to understand what you mean. Is it a todo? A calendar entry? A reminder? A note? This intent recognition is handled by another Mistral AI endpoint — same French company, same EU legal framework.

We chose Mistral deliberately. Not because they were the cheapest option, and not because they had the flashiest marketing. We chose them because they're a European company, operating under European law, with infrastructure in the EU. Your text data is processed in France under GDPR protection.

This means your data never crosses the Atlantic. It stays within the legal framework that gives you real rights — the right to access, the right to deletion, the right to know exactly what happens with your information.

Layer 3: German Hosting with Hetzner

BonusFlow's servers run at Hetzner, one of Germany's most established hosting providers. Our data centers are in Germany, subject to German data protection law — which is among the strictest in the world.

Your todos, calendar entries, captures, and reminders are stored on German servers. Your account data is on German servers. Everything BonusFlow knows about you lives in a data center that's subject to the Bundesdatenschutzgesetz and GDPR. No exceptions, no fine print.

We didn't choose Hetzner for the marketing story. We chose them because they're reliable, transparent, and located where our data should be — in Germany, close to us and close to our users.

What This Means in Practice

Let's trace what happens when you say something to BonusFlow:

You speak. "Hey BonusFlow, remind me tomorrow at 9 about the tax documents."
The audio is sent (encrypted via TLS) to Mistral AI Voxtral in France, which transcribes it into text. Mistral retains the audio for a maximum of 30 days, then deletes it automatically. It's never used to train models.
The transcribed text is analyzed by Mistral AI in Paris: this is a reminder, for tomorrow at 9 AM, about tax documents.
BonusFlow creates the reminder and stores it on German servers at Hetzner.
Tomorrow at 9 AM, the app reads the reminder out loud — entirely via your device's local speech synthesis.

At no point does your data leave the EU. At no point is your information used to train AI models or shared with third parties. At no point does a US provider see any piece of this.

Why "Made in Germany" Is More Than a Label

When we say BonusFlow is Made in Germany, we mean it in a very specific way. Bonus Service BS GmbH is a German company registered in Essen. Our development team is in Germany. Our servers are in Germany. Our AI partner is in France. Everything operates under EU jurisdiction.

This matters because privacy isn't just about technology — it's about legal frameworks. The GDPR gives European citizens rights that simply don't exist in many other parts of the world. The right to have your data deleted. The right to get a complete export of everything a company knows about you. The right to object to automated processing.

When your data is processed by a company in a country without equivalent protections, those rights become theoretical. When everything stays in the EU, they're enforceable.

The Privacy Tax That Doesn't Exist

There's a common assumption that privacy comes at the cost of functionality. That if you want a private AI assistant, you have to accept a worse experience. That European solutions are somehow less capable than their American counterparts.

This is simply not true. Mistral Voxtral delivers excellent speech recognition — on par with US-based alternatives. Mistral's models are among the best in the world for intent recognition and natural language understanding. And the speech output runs directly on your device, so there's no noticeable delay.

You don't have to choose between a great AI assistant and your privacy. With BonusFlow, you get both.

Trust Through Transparency

We publish our privacy policy in four languages. We tell you exactly what data we collect, why we collect it, and how long we keep it. We don't hide behind vague terms like "we may share data with partners" or "we use data to improve our services."

Our approach is simple: collect only what's necessary, process it in the EU, store it in Germany, and delete it when you ask us to. No dark patterns, no opt-out tricks, no buried settings.

If you have questions about how your data is handled, you can reach our data protection team at datenschutz@bonusflow.de. We answer in days, not weeks. Because privacy isn't a feature — it's a promise.

Try BonusFlow — the AI assistant that respects your privacy by design, not by afterthought.

Privacy-First AI: Why BonusFlow Is Made in Germany