Privacy Policy
1. Who we are
DoTalky is operated by Wanted Software and Advertising Ltd, London, United Kingdom (“we”, “us”). We are the data controller for the personal data described here. Contact: privacy@dotalky.com.
2. Data we collect
Account: your email address or Google/Apple sign-in identifier, display name, birth date (to confirm you are 18+) and the country we detect from your IP address at sign-up. We do not use phone numbers or SMS.
Profile: your languages and level, interests, bio, your main face photo and up to 6 additional photos, and an optional selfie verification result.
Content: voice postcards, their transcripts, chat messages, photos you send, reactions, saved phrases and reports you make or receive.
Technical: device type, app version, push notification tokens, approximate time zone, crash logs and basic usage analytics.
3. Voice and AI processing
Voice postcards are transcribed into text by a speech-recognition service (Groq). Corrections, conversation ideas, the Talky AI partner and safety checks use a language-model service, and photos are checked by an image-analysis service (Google Cloud Vision). These providers process your content only to return the result to us, under data-processing agreements, and are not allowed to use it to train their models.
AI replies are always labelled. You can switch AI features off in Settings.
4. Moderation and safety
To keep DoTalky safe, messages, transcripts and photos are checked automatically for contact details, sexual content, violence and harassment. Photos are checked for a face (main photo) or a person (additional photos). Borderline cases and reports are reviewed by our trained team within 24 hours.
Repeated violations can lead to warnings, a temporary pause or removal of the account.
5. How we use your data
To create and run your account, match you with native speakers, deliver postcards and messages, show your passport and stamps, prevent abuse, provide support, improve the service and send notifications you have allowed. Legal bases: performance of our contract with you, our legitimate interest in a safe service, your consent (for optional features and marketing) and legal obligations.
6. Who we share data with
Other users see only your public profile and what you send them. We use a small number of processors: Supabase (database, sign-in, file storage and real-time chat), Vercel (website and API hosting), Resend (sign-in code and account emails), Groq (speech-to-text and language models), Google (Google sign-in, Cloud Vision photo checks, Android push notifications and app distribution), Apple (Apple sign-in) and a payment provider if paid plans are offered in the future. Some of these providers may process data outside the UK/EU; in that case we rely on appropriate safeguards such as standard contractual clauses. We never sell your data.
7. How long we keep it
We keep your data while your account is active. When you delete your account it is deactivated immediately and permanently erased after 30 days. Safety reports are kept for 1 year, encrypted backups roll off within 30 days, and payment records are kept as long as tax law requires.
8. Your rights (UK GDPR, EU GDPR, KVKK)
You can access, correct, download, restrict or delete your data, object to processing and withdraw consent at any time. Use Settings → Data & privacy in the app, the delete-account page on our website, or write to privacy@dotalky.com. You can also complain to the UK Information Commissioner’s Office or your local data protection authority.
9. Adults only
DoTalky is only for people aged 18 or over. We remove accounts that we believe belong to minors.
10. International transfers
Our servers are in the EU. If data is transferred outside the UK or EU, we use appropriate safeguards such as standard contractual clauses.
11. Changes and contact
We will tell you in the app before material changes take effect. Questions: privacy@dotalky.com · Wanted Software and Advertising Ltd, London, United Kingdom.