Privacy policy

1. Our principles

We process only the information needed to provide calls, translation, captions, notes, voice features and purchases. We do not sell personal information, show advertising, track you across other companies’ apps or websites, or include third-party analytics or advertising SDKs. The app reports a small set of its own usage events to our backend—app launches, whether microphone access is allowed, onboarding pages viewed, paywall views and purchase outcomes, features stopped for lack of credits, and tabs opened—with a random install identifier and your anonymous identity, so we can see where the app gets in people’s way. They never contain call audio, transcripts, phone numbers or text you type, and they are deleted with your data. We explain what is processed in the cloud and what stays on your device, and we give you controls to delete it.

2. Anonymous identity and device identifier

When you first use the app, it creates an anonymous authentication identity with our backend provider, Supabase. Its sign-in tokens are stored in the iOS Keychain on your device. The app also stores a device identifier in the Keychain; it is used to give each device its one-time free credits and free practice calls, and it can remain after you delete and reinstall the app. Calls, credits, purchases and other service records are linked to your anonymous identity.

3. Phone calls, numbers and caller ID

For phone calls we process the number you dial or select, the caller ID you choose, call identifiers, timestamps, duration, status and the credits used. To show your own number as caller ID, we confirm that you own it with a code sent by text message or voice call, and register it with our telephony provider.

With Talkalo Pro you can use a US second number. For it we process incoming calls, the text messages it receives (sender and content), voicemail recordings with their transcriptions and translations, and the call-forwarding checks you run. Messages and voicemails are kept until you delete them.

Talkalo does not record the audio of your calls. Voicemail is the only call audio we store.

4. Speech, translation and captions

During phone calls, link calls, practice calls and face-to-face conversations, audio from your microphone and the audio of the other participant are streamed to Soniox for speech recognition and translation, and translated text is sent to Soniox to produce spoken translations. This processing happens in real time for the current conversation.

When you use live audio captions, the broadcast extension streams the sound of the app you are listening to—not screen images and not your microphone—to Soniox. Dictating instructions for an AI call uses Apple’s speech recognition.

5. AI features

Typed messages during calls, reply suggestions, AI calls, practice calls, call and conversation summaries, and text, screen and camera translation send the text they need to OpenAI, Google Gemini or Anthropic Claude, depending on our server configuration. If the selected provider fails, the same request may be retried with Google Gemini.

When a translated phone, practice or link call ends, its transcript is sent automatically to create the call summary. Reply suggestions send the last few lines of the conversation; you can turn them off in Me → In-call quick replies. For an AI call we send the purpose and instructions you give, the number or business you choose and what the other person says during the call.

Camera and screenshot translation recognize text on your device with Apple Vision and send only the recognized text. Photos and screenshots are not uploaded.

6. Notes and history on your device

Call notes (the transcripts and AI summaries of translated calls), face-to-face transcripts, summaries and recordings, saved translations and similar records are stored on your device and are not synced to our servers. Creating a summary still sends the transcript text to an AI provider, as described above. If you export or share a record, it goes to the destination you choose.

7. Your AI voice

Voice cloning requires a separate confirmation that the recording is your own voice and that you agree to its processing. The recording is uploaded through our servers to Soniox, which creates and keeps the synthetic voice used to speak your translations in Talkalo. Our servers keep the consent record, a fingerprint (hash) of the audio and the voice status, but not the recording itself. The temporary recording on your device is excluded from backups and removed when the voice is ready or the attempt ends.

You can disable or delete your voice at any time in Me → My voice clone. Deleting it asks Soniox to delete the synthetic voice.

8. Link calls and browser guests

Link calls carry audio, video and captions between you and your guest through LiveKit. A guest who opens an invitation in a browser chooses a language and grants the microphone (and, for video, camera) access needed to join. We process the invitation, admission status, session details, connection information and bilingual captions needed to run the call. Share a link only with the person you intend to talk with.

9. Contacts, location, camera, photos and notifications

Contacts are read on your device to help you choose a number and to show names in your calls and messages; only the number you choose to call or verify leaves your device. Location is used only when you choose a business on the map for an AI call: it centres the Apple Maps search on your device and is not sent to our servers. The camera is used for video calls and camera translation. Photos access is used only to save translated images you choose to keep. If you allow notifications, we store your device’s push tokens so we can alert you to incoming calls, messages and voicemails.

10. Purchases and credits

Apple processes subscriptions and credit packs. From Apple we receive product and transaction identifiers, subscription status and expiry dates so we can grant and restore access and credits, and we keep a ledger of credits granted and used. We never receive your payment card details or your Apple Account password.

11. Support requests

When you send feedback from Me → Help center, we store the category, reply email and description you provide, together with a request identifier and time, the app version and build, iOS version, device model and app language. Call content is not attached. If you email us, your email provider handles the message you send to support@calvityai.com.

12. Service providers

We share information only with providers that help us run the Services, and only what each task needs.

Supabase — authentication, database, file storage and server functions. Twilio — phone calls, number verification, phone numbers, text messages and voicemail. LiveKit — link-call audio and video. Soniox — speech recognition, translation, speech synthesis, voice cloning and voicemail transcription. OpenAI, Google (Gemini) and Anthropic (Claude) — AI text features. Apple — push notifications, speech recognition for dictation, map search and purchases. Vercel — website hosting.

These providers process information to provide their service, keep it secure and meet legal obligations, and may keep limited operational logs under their own terms. We may also disclose information when the law requires it or when needed to protect users and the Services.

13. How long we keep information

Records on your device stay until you delete them or delete the app; Keychain items may remain after the app is deleted. Text messages and voicemails stay until you delete them. Call records, AI-call records, credits, purchase records and support requests are kept while your Talkalo identity exists, so that we can show your history, settle charges, handle disputes and prevent abuse. When records are no longer needed, we delete or anonymize them.

14. Deleting your data

In the app, open Me → Privacy & terms → Delete my data. This deletes the server records linked to your Talkalo identity—call and AI-call history, second-number messages and voicemails, verified caller IDs, push tokens, support requests and your credit balance—releases your second number, asks Soniox to delete your cloned voice, and clears the Talkalo data stored on your device. Unused credits are lost. If a provider cannot complete its part, nothing is deleted and you can try again.

Deleting your data does not cancel an Apple subscription. Manage or cancel subscriptions in your Apple Account settings.

After deletion we keep a small set of records that are no longer linked to your identity: markers showing that a device has already received its free credits or free practice calls, purchase references that stop the same subscription period or credit pack from being credited twice, and App Store transaction notices. We keep them only to prevent abuse and to meet financial and legal obligations.

You can also send deletion or access requests to support@calvityai.com.

15. Your choices and rights

You can turn off microphone, camera, speech recognition, contacts, location, photos and notification access in iOS Settings (the related feature will stop working), turn off reply suggestions, delete individual messages, voicemails, notes and your AI voice, delete all your data as described above, and manage or cancel subscriptions with Apple.

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your information, to object to or restrict processing, to withdraw consent and to complain to a data-protection authority. Contact us to exercise these rights; we may need to verify your request, for example with your device or transaction details.

16. Security and international processing

We protect information with encryption in transit, short-lived service credentials, the iOS Keychain and server access controls. No system is completely secure. Our providers may process information outside your country or region, with the safeguards required by applicable law.

17. Children and other people

Talkalo is not directed to children under 13 or under the minimum age for digital services where they live, and we do not knowingly collect their information. If you believe a child has used the Services, contact us and we will delete the information.

Tell the people you talk with that the conversation is translated, and get any consent the law requires before recording, transcribing or sharing a conversation or using someone’s voice.

18. Website

The website has no sign-in, advertising or analytics. The homepage uses your browser’s preferred languages to choose an available language version. When you manually select a website language, it stores that choice in your browser so future visits to the homepage can use it. You can change the choice with the language selector or remove it by clearing this site’s browser storage. Vercel hosts the site and may process IP addresses and request logs to deliver and secure it.

19. Changes and contact

We will update this policy when our features, providers or legal requirements change, and we will tell you about material changes in the app or on this website. For questions or requests, email support@calvityai.com with the subject “Talkalo Privacy Request”.