Privacy Made in EU: Why Your Voice Data Stays in Europe

The Dirty Secret of Voice Assistants

Every time you talk to a mainstream voice assistant, your voice travels across the ocean. It gets processed on servers in the United States, stored in databases you have no control over, and potentially used to train AI models that benefit the company — not you.

Most people don't think about this. They say "Hey, set a timer for 10 minutes" and trust that their voice disappears into the ether. It doesn't. It's recorded, transcribed, analyzed, and stored. Some companies keep these recordings for months or even years. Others have been caught letting employees listen to private conversations to "improve the service."

When we started building BonusFlow, we decided that this approach was fundamentally unacceptable. Not just for regulatory reasons — but because we personally wouldn't want to use a product that treats our private thoughts as training data.

Speech Recognition: 100% Local

This is the cornerstone of BonusFlow's privacy architecture: your voice stays in the EU. Period.

We use Mistral AI Voxtral for speech-to-text — a French company based in Paris. When you speak to BonusFlow, the audio is transmitted encrypted (TLS) to Mistral's servers in France and transcribed there. Mistral retains the audio for a maximum of 30 rolling days for abuse monitoring and then deletes it automatically. As paying API customers, we have contractual assurance that your audio is never used to train AI models.

No US providers. No Atlantic crossings. Your voice stays within EU jurisdiction — with all the legal rights that entails.

And the speech output — the app reading responses back to you? That runs entirely on your device via your operating system's native speech synthesis. No data leaves your device during the reading.

AI Processing: EU Only

Once your speech has been transcribed, BonusFlow needs to understand it. What's a task? What's a reminder? What's a fact to remember? This is where intent recognition comes in — also handled by Mistral AI.

We chose Mistral AI as our AI partner. Mistral is a French company, based in Paris, operating entirely within the European Union. Your text data is processed on EU infrastructure, subject to EU law, and protected by GDPR from the ground up.

Why does this matter? Because the location of data processing isn't just a technical detail — it's a legal framework. EU data protection law is the strictest in the world. Companies processing your data in the EU must comply with regulations that simply don't exist in other jurisdictions.

We specifically avoided US-based AI providers. Not because their technology is inferior — it isn't — but because the legal protections for your data are. The CLOUD Act, FISA Section 702, and Executive Order 12333 all allow US government agencies to access data stored by American companies, even if that data belongs to European citizens.

Servers: Germany, Hetzner

Our application servers and databases run at Hetzner, one of Germany's most established data center operators. Hetzner operates ISO 27001 certified facilities in Nuremberg, Falkenstein, and Helsinki.

Why Hetzner? Because we wanted a provider that is:

• German-owned and operated. Not a subsidiary of a US company.
• Subject exclusively to German and EU law. No conflicting foreign jurisdiction.
• Transparent about their infrastructure. We know exactly where our servers physically are.
• Established and reliable. Hetzner has been running data centers since 1997.

Your data doesn't pass through intermediary cloud providers. It goes from your device to our servers in Germany. That's it.

No Tracking, No Cookies, No Advertising

BonusFlow's business model is simple: you pay for the service, and we provide it. That's the entire transaction.

We don't track your behavior to sell to advertisers. We don't use analytics cookies to build profiles. We don't show ads. We don't sell, share, or monetize your data in any way.

The only cookies we use are strictly necessary for the application to function — session management and authentication. Nothing more. You won't see cookie banners on BonusFlow because there's nothing optional to consent to.

What GDPR-Compliant Actually Means

Many companies claim to be "GDPR-compliant" while doing the bare minimum. Let's be specific about what GDPR compliance means at BonusFlow:

Data minimization. We only collect what's absolutely necessary to provide the service. No phone numbers, no location data, no contact lists.

Purpose limitation. Your data is used exclusively to provide BonusFlow's features to you. Not for analytics, not for marketing, not for model training.

Right to deletion. You can delete your entire account and all associated data at any time. When you delete something, it's actually gone — not soft-deleted and hidden in a backup somewhere.

Data portability. You can export all your data in a standard format whenever you want. Your data belongs to you, and you should be able to take it anywhere.

No third-party sharing. We don't share your data with anyone. The only external service that processes your text data is Mistral AI, and that processing is governed by a strict data processing agreement under EU law.

The Technical Architecture

For those who want the technical details, here's how data flows through BonusFlow:

1. You speak. Audio is captured by your device's microphone.
2. Encrypted transmission to Mistral. Audio is sent via TLS 1.3 to Mistral AI Voxtral in France, which transcribes it to text. Mistral retains the audio max. 30 days, then deletes it automatically — never used for training.
3. Intent recognition. The transcribed text is analyzed by a second Mistral endpoint (same French company, same EU legal framework).
4. Storage. Structured data is stored encrypted in our German databases at Hetzner.
5. Sync. Your devices sync via our servers, always encrypted in transit and at rest.
6. Speech output. When BonusFlow reads responses back to you, that happens entirely on your device via the OS's native speech synthesis — no data leaves your device.

At no point does your data leave the EU. At no point does a US provider see anything. At no point is your information used to train AI models.

Why This Matters More Than You Think

"I have nothing to hide" is something we hear often. But privacy isn't about hiding — it's about control. It's about knowing that your late-night health concerns, your business strategies, your personal relationships, and your random shower thoughts aren't sitting in a database that could be breached, subpoenaed, or sold.

Voice data is particularly sensitive because it's intimate. You talk to your voice assistant the way you'd talk to a trusted friend. That level of trust deserves infrastructure that takes privacy as seriously as you do.

Try It Yourself

BonusFlow is available now. Experience what a voice assistant feels like when privacy isn't an afterthought — it's the foundation.

Get started at app.bonusflow.de