← Back to TalkGlot

Introduction

TalkGlot ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the TalkGlot mobile application, web application, browser experience, and related services (collectively, the "Service"). Please read this policy carefully. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

Information We Collect

Personal Information You Provide

When you create an account or use specific features, we may collect:

• Email address (required for account creation and verification)
• Username (chosen by you for identification)
• Password (encrypted and stored securely)
• First and last name (optional)
• Profile picture/avatar (optional)
• Language preferences (your primary and partner languages)

Third-Party Authentication Data

If you choose to sign in with Google OAuth, we collect the information Google shares with us:

• Google ID (used only to link your account)
• Email address and email verification status
• Name and profile image (if you approve sharing them)

Chat and Communication Data

To provide translation and conversation services, we process:

• Original messages (text you send in conversations)
• Translated messages (AI-generated translations)
• Source and target languages for each message
• Message timestamps and delivery status
• Session participation data (rooms you join or create)
• Room codes or QR identifiers (temporary conversation IDs)

Voice and Audio Data

If you enable voice features, we process:

• Audio recordings (temporarily for speech-to-text conversion)
• Voice transcriptions (text generated from your speech)
• Audio quality metrics (for service improvement)

Anonymous and Guest Usage Data

When you join conversations without creating an account, we generate temporary identifiers and store session data only for the duration of the conversation. Guest data clears automatically when the browser session ends.

Technical and Usage Data

We automatically collect limited technical data to operate and protect the Service:

• Device information (device type, operating system version, browser type)
• Network information (IP address, general region, connection type)
• App usage data (features accessed, screens viewed, session duration)
• Error and diagnostic logs (crash reports, performance metrics)
• WebSocket connection data (for real-time messaging reliability)

We do not request precise GPS location, contact lists, or photo libraries.

App Store Privacy Details

For Apple App Store submission, the following table summarizes the data categories we collect, why we collect them, and whether they are linked to you or shared with third parties.

Data Category	Data We Collect	Purpose	Linked to you?	Shared?
Contact Info	Email address, optional name	Account creation, authentication, support, legal notices	Yes	No
Identifiers	Username, internal user ID, optional Google ID	Account persistence, session management, fraud prevention	Yes	No
User Content	Messages, translations, voice transcriptions, profile picture	Provide real-time translation features and conversation history	Yes	No (processed only with contracted subprocessors)
Audio Data	Microphone input (processed ephemerally)	Speech-to-text transcription	Yes (processed in-session only)	No
Usage Data	Feature usage, session duration, in-app interactions	Improve stability, prioritize features, enforce fair use	Yes (aggregated for analytics)	No
Diagnostics	Error logs, crash reports, performance metrics	Bug fixes, security monitoring	No (aggregated)	No

We do not collect sensitive data categories such as financial information, health information, contacts, photos, or precise location data. We do not use third-party advertising SDKs, nor do we track users across apps or websites owned by other companies.

Tracking and Linking

• Tracking: We do not engage in cross-app or cross-website tracking for advertising purposes.
• Data linked to you: Account, usage, and content data are linked to your TalkGlot profile so the Service works as expected. Diagnostics data is aggregated whenever possible.
• Data shared with third parties: We only share data with contracted service providers acting as processors (see "Third-Party Services" below). They may not use your data for their own marketing.

How We Use Your Information

Core Service Functionality

• Real-time translation using trusted AI services (Anthropic Claude)
• Speech-to-text conversion using OpenAI Whisper API
• Account management and authentication workflows
• Session management for chat rooms across devices
• Message delivery and synchronization between participants
• QR code generation and scanning for secure room sharing

Service Improvement and Safety

• Performance optimization and load balancing
• Feature development informed by anonymized usage patterns
• Security monitoring and prevention of misuse or fraud
• Customer support and troubleshooting
• Legal compliance with applicable regulations

Legal Bases for Processing (GDPR / UK GDPR)

Where the EU or UK data protection laws apply, we process personal data under the following legal bases:

• Contractual necessity — to provide the Service you request.
• Legitimate interests — to maintain and improve security, prevent abuse, and understand how our Service is used. We balance these interests against your rights.
• Consent — for optional features such as Google OAuth sign-in, microphone access, or marketing communications (if offered).
• Legal obligations — to comply with tax, accounting, and regulatory requirements.

Third-Party Services and Subprocessors

We rely on carefully vetted service providers to help us deliver the Service. Each processor only accesses data essential to their task, under data processing agreements.

Current subprocessors

Service Provider	Purpose	Location	Privacy Policy
Anthropic	Language translation (Claude AI)	United States	anthropic.com/privacy
OpenAI	Speech-to-text transcription (Whisper API)	United States	openai.com/privacy-policy
Google OAuth	Optional federated authentication	Global	policies.google.com/privacy
Neon	PostgreSQL database hosting	European Union	neon.tech/privacy-policy
Expo	Mobile app distribution and updates	United States	expo.dev/privacy

Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We share information only in the following situations:

• With your consent — for any explicit sharing you authorize.
• Service providers — as described above, limited to the purpose of providing contracted services.
• Legal requirements — when required by law, subpoena, or governmental request, or to protect the rights, property, or safety of TalkGlot, our users, or others.
• Business transfers — in connection with mergers, acquisitions, or asset sales, provided the new owner honors this Privacy Policy.

Data Security

We implement technical and organizational measures to protect your data:

• Encryption in transit via HTTPS and secure WebSockets
• Hashing and salting of passwords using bcrypt
• Role-based access controls for our databases and cloud resources
• Continuous monitoring and logging for unusual activity
• Regular security reviews of our infrastructure and dependencies

No system is completely secure. If we experience a data breach that poses a risk to you, we will notify affected users and relevant authorities as required by law.

Data Retention

We retain information only for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

Account Data

• Active accounts: Retained while you maintain an account.
• Deleted accounts: Personal data removed or anonymized within 30 days unless a longer retention period is required by law.
• Inactive accounts: May be deleted after 24 months of inactivity with prior notice, when feasible.

Message and Voice Data

• Chat messages: Retained for your conversation history until you delete the conversation or your account.
• Anonymous messages: Deleted when the session ends.
• Voice recordings: Deleted immediately after transcription; only the resulting text is stored as part of the chat.

Technical Logs

• Usage analytics: Stored in aggregate form up to 12 months.
• Error and security logs: Retained up to 24 months for troubleshooting and audit purposes.

Your Rights and Choices

Account Controls

• Access — View your profile, settings, and conversation history.
• Update — Change your personal details and language preferences.
• Delete — Remove messages or close your account at any time.
• Export — Request a copy of your personal data in a portable format.

GDPR / UK GDPR Rights

• Right to restriction — Ask us to limit processing in certain circumstances.
• Right to object — Object to processing based on legitimate interests.
• Right to portability — Receive your data in a structured, commonly used format.
• Right to withdraw consent — Withdraw consent at any time without affecting prior lawful processing.
• Right to complain — Contact your local data protection authority if you believe we have not complied with data protection laws.

California Privacy Rights (CCPA / CPRA)

• Right to know — Request details about the categories and specific pieces of personal information we collect, use, and disclose.
• Right to delete — Ask us to delete personal information, subject to legal exceptions.
• Right to correct — Request correction of inaccurate personal information.
• No sale or sharing — We do not sell or share personal information for cross-context behavioral advertising.
• Right to non-discrimination — We will not discriminate against you for exercising your CCPA rights.

Data Deletion and Opt-Out Requests

You can delete your account within the app settings. You may also email us at privacy@talkglot.com with the subject line “Privacy Request” to request data export, correction, or deletion. We verify requests using your account email and respond within 30 days (or the period required by law).

Children's Privacy

TalkGlot is not intended for children under 13 years of age, or under 16 in the European Economic Area without parental consent. We do not knowingly collect personal information from children. If we learn that a child has provided personal information, we will delete it promptly.

International Data Transfers

We operate from the United States and the European Union. When we transfer personal data across borders, we rely on approved safeguards such as Standard Contractual Clauses or other lawful transfer mechanisms. By using the Service, you acknowledge that your information may be processed outside your country of residence, where privacy laws may differ.

Mobile App Permissions

Our mobile applications request permissions only when needed for specific features:

Required Permissions

• Internet access — Enables real-time messaging and translation.
• Network state — Detects connectivity to manage real-time sessions.

Optional Permissions (granted explicitly by you)

• Microphone — Required for voice input and speech-to-text.
• Camera — Enables QR code scanning to join conversations easily.
• Storage — Allows temporary caching of audio snippets during transcription (cleared after use).

You can modify permissions at any time through your device settings. Revoking optional permissions may disable related features.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects for users.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When we make material changes, we will notify you by email (if provided), in-app messaging, or a prominent notice on our website, and update the "Last Updated" date. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.