Privacy Policy

This policy explains what information DoTalk ("we", "us") collects when you use the DoTalk mobile app and related services (the "Service"), how we use it, what we keep and for how long, and the choices you have. We keep this simple and specific — we describe what the Service actually does, not boilerplate.

1. Information we collect

Account information

• Sign-in identity. Authentication is provided by Google Firebase. If you sign in with Google, we receive your Google account name and email address. If you continue as a guest, we receive neither — only an anonymous account identifier.
• Display name. The name you set in the app. Your friends can see it in their friends list and chats. Users who are not your friends only ever see a single initial derived from it (for example on the home screen), never the full name.
• Gender. The gender you declare in the app (male/female). It is used for matchmaking preferences and daily match limits.

Device information

• Device identifier. On Android we collect the device's Android ID. We use it to enforce fair-use daily limits and free trials per device, and to prevent abuse (for example, creating new accounts to evade a ban or reset a daily limit). While your account is active, the device identifier is linked to it; that link is removed when you delete your account.
• Push notification token. A Firebase Cloud Messaging (FCM) token and platform type, so we can deliver notifications (for example, new messages or incoming friend calls).

Usage and presence

• Daily match counters (per account and per device) used to apply fair-use limits.
• Online status and a "last connected" timestamp, visible to your friends.

Content you create

• Chat messages. Text messages you exchange with friends are stored on our servers so your conversation history can be delivered and synced, together with delivered/read state. Typing indicators are transient and not stored.
• Ratings and reports. After a call you can rate the other person (thumb up or down, with a reason on a thumb-down), and during a call you can report them. We store who rated/reported whom, the reason, and when. These records power our moderation and automatic-ban systems.

Technical data

• IP addresses and basic request logs, used for security, abuse prevention and keeping the Service running. Call media may pass through our relay servers when a direct connection between devices is not possible (see section 2).

2. Voice calls are not recorded

Voice calls on DoTalk are real-time and peer-to-peer (WebRTC). We do not record, store, or listen to your calls. When a direct connection between two devices is not possible, the encrypted audio stream is relayed through our TURN relay server, which passes it through without storing it. What you say on a call exists only for the duration of the call.

Please remember the person you are talking to is a stranger: we cannot control what they do, including whether they record you using another device. Do not share personal information on calls.

3. Voice verification clips

Accounts that declare female gender may be asked to complete a one-time voice verification: the app shows a random sentence and you record yourself reading it (a short audio clip, up to 2 MB). This exists to keep matchmaking honest and safe. These clips are handled under strict rules:

• A clip is used only to decide the verification and for nothing else.
• It is reviewed by a human member of our team — there is no public access, and clips are never shared or published.
• The clip is deleted from our servers the moment a decision is made (approved or denied), and in every case no later than 24 hours after upload.
• Only the resulting status (verified / denied / pending) is kept on your account.
• Deleting your account also deletes any pending verification data, including any clip still held.

4. How we use your information

• To operate the Service: create your account, match you with other users, connect calls, deliver messages and notifications.
• To apply fair-use limits: daily cross-gender match limits and per-device free trials.
• To keep the community safe: process ratings and reports, apply automatic and manual bans (including device-level bans), and verify accounts as described above.
• To secure and maintain the Service: debugging, abuse and fraud prevention.

We do not use your data for advertising, and we do not sell your personal information to anyone.

5. What we share (and what we don't)

• With other users: your display name (friends) or its initial (non-friends), your online/last-connected status (friends), your gender (used in matching), and the messages you send them. Never your email address or device identifiers.
• Service providers: we use Google Firebase (Google LLC) for authentication and push notifications, and hosting providers (such as Hetzner) to run our servers. These providers process data on our behalf to provide the Service.
• Legal: we may disclose information if required by law, or where necessary to investigate abuse, protect users' safety, or enforce our Terms of Service.
• No selling, no ad networks, no third-party analytics.

6. How long we keep data

7. Deleting your account

You can delete your account at any time, either from inside the app or on our public deletion page: delete-account.html. Deletion is permanent and cannot be undone. It removes:

• your profile and account record, and your Firebase login (so the account can no longer sign in);
• your friendships, friend requests, and blocks (in both directions);
• the link between your account and your device identifier;
• your push notification tokens;
• your voice-verification records, including any clip still held.

As described in section 6, safety records (reports, ratings, ban records), anonymous per-device counters, and messages you already sent to friends may be retained.

8. Your rights

Depending on where you live (for example under India's Digital Personal Data Protection Act, 2023, or the EU/UK GDPR), you may have rights to access, correct, or delete your personal data, to withdraw consent, and to complain to a supervisory authority.

• Access & correction: most of your data (name, gender, friends, messages) is visible and editable directly in the app.
• Deletion: use in-app account deletion or the deletion page.
• Anything else: email us at support.yapzy@gmail.com and we will respond as soon as we reasonably can. This is also our grievance contact.

9. Age requirement

DoTalk is for adults only. You must be at least 18 years old to use the Service. We do not knowingly collect personal information from anyone under 18. If we learn that a user is under 18 we will terminate the account and delete its data. If you believe someone on DoTalk is under 18, please report them in-app (report reason "underage") or email us.

10. Security

All traffic between the app and our servers is encrypted in transit (TLS; calls use WebRTC encryption). Verification clips are stored outside any public web directory, are accessible only to authorized reviewers, and are deleted on decision. Access to production systems is restricted. No system is perfectly secure, but we design for data minimisation — the most sensitive things (your voice) are either never stored (calls) or stored for hours at most (verification clips).

11. Changes to this policy

If we change this policy we will update this page and its effective date, and for material changes we will notify you in the app. Continued use of the Service after a change means you accept the updated policy.

12. Contact us

Questions, concerns, or requests about your data:
support.yapzy@gmail.com