Privacy Policy
This policy explains how personal data is handled when you use the Translatalo Android app (package com.mert.calltranslator), its backend at api.translatalo.com and this website (together, the “Service”).
Use responsibly. When you use Translatalo on a call, the voices of both you and the other person are sent to an AI service to be translated or answered. In many countries and states you must tell the other person, or get their consent, before call audio is recorded or processed. You decide when to use Translatalo and you are responsible for informing the other party and following the law where you and they are.
1. Who is responsible
The data controller (for Turkey, the veri sorumlusu under Law No. 6698 on the Protection of Personal Data, “KVKK”) is:
[Developer legal name]
[Postal address]
Email: support@translatalo.com
Translatalo is operated by an individual developer. We have not appointed a data protection officer, as this is not required for our processing. You can contact us about any privacy matter at the address above.
2. Summary
- Call audio is streamed directly from your phone to OpenAI during a translated or assisted call. It does not pass through our servers and we do not store it.
- Live captions are shown on your phone and kept only on your phone, for the most recent call. They are not stored on our servers.
- We store your Google account identifier, email and name, your minutes balance, records of your sessions and purchase records.
- No advertising, no analytics or tracking SDKs, and we do not sell personal data.
- You can delete your account in the app (Settings → Account → Delete account) or by following the steps on our account deletion page.
3. Data we process
3.1 Account data
When you sign in with Google, we receive and store your Google account identifier, email address and name. We use them to create and identify your account and to contact you about your account if needed.
3.2 Minutes, sessions and purchases
- Minutes balance: a ledger of minutes granted (for example, the free trial), purchased, used and refunded.
- Session records: for each call session, the start and end times, end reason, the AI provider used, the provider's call identifier and a short technical usage summary sent by the app (for example, duration and usage counts). Session records do not contain audio or transcripts.
- Purchase records: when you buy a subscription or top-up pack, our payment processor RevenueCat notifies us of the event. We store the product, the store transaction identifier, the event identifier and type, and the relevant times (for example, the start and end of a paid month).
3.3 Call audio and captions
While Translatalo is active on a call, the app captures the call audio of both parties and your microphone audio, and streams it over an encrypted connection directly from your phone to OpenAI's Realtime API. OpenAI generates the interpreter or assistant speech and the text used for live captions, which are sent back to your phone. Our backend only sets up (brokers) the session with OpenAI; the audio never passes through or is stored on our servers.
The live captions of the most recent call are kept on your phone only, and are replaced by the next call. Uninstalling the app or clearing its data removes them.
The audio may contain personal data of the other person on the call, including anything either of you says. See the “Use responsibly” note above.
3.4 Instructions you give the assistant
Your settings (languages, voice, interpreter style, the instructions you write for the assistant and the goal of a call that you describe in the pre-call briefing) are stored on your phone. To configure a call session, the app sends the relevant settings and instructions, the call goal and your display name to our backend, which passes them to OpenAI. For the spoken pre-call briefing before an outgoing assistant call, the app also sends the phone number you are calling and your phone's current date, so the assistant knows whom you are calling and when. Our backend uses this information only to set up that session and does not store it in its database.
3.5 Technical data
When the app or your browser connects to our servers, your IP address and basic request information are processed to deliver the response and to protect the Service against abuse (for example, rate limiting). We do not store IP addresses in our database. Technical server logs, where kept, are retained only for a short period for security and troubleshooting. When the app connects to OpenAI, OpenAI also receives your IP address as part of the connection.
3.6 Data that stays on your phone
Wireless debugging pairing information, your settings and the last call's captions are stored on your device only. The optional “Translatalo pairing” accessibility service looks only at the Android Settings app, and only for 10 minutes after you tap Pair. During that time it looks for the Wireless debugging pairing dialog and reads the 6-digit pairing code and the address shown with it, which it uses only to complete pairing on your device. It does not read any other app, and nothing it reads is stored or sent to us.
4. Purposes and legal bases
Where the EU/UK General Data Protection Regulation (GDPR) or KVKK applies, we rely on the following legal bases:
| Purpose | Data | Legal basis |
|---|---|---|
| Creating and running your account; providing interpreter and assistant calls; tracking minutes | Account data, minutes, session records, call audio, assistant instructions | Performance of a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)) |
| Processing the other call party's voice as part of a call you choose to use Translatalo on | Call audio | Our legitimate interest in providing the Service you requested (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)). You are responsible for informing the other party (see the “Use responsibly” note above). |
| Handling purchases and subscriptions | Purchase records, account identifier | Performance of a contract |
| Keeping accounting and tax records | Purchase records | Legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)) |
| Security, abuse and fraud prevention (for example, rate limits, preventing repeated free trials), and handling disputes | Account data, session records, IP address | Legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)) |
| Answering your support requests | Your messages and contact details | Performance of a contract or legitimate interests |
We do not use your data for advertising, profiling or automated decisions with legal or similarly significant effects, and we do not use your call audio to train AI models.
5. Service providers and recipients
We share data only with the following providers, who process it to provide the Service:
- OpenAI (OpenAI, L.L.C. / OpenAI Ireland Ltd.) — real-time speech processing: call audio, assistant instructions, call goal, display name, the number being called (pre-call briefing only), generated speech and caption text, and a pseudonymous (hashed) user identifier used by OpenAI for abuse detection. Acts as our processor. Under OpenAI's API data policies, API data is not used to train its models by default and may be retained by OpenAI for a limited period (currently up to 30 days) for abuse monitoring, after which it is deleted unless required by law.
- RevenueCat (RevenueCat, Inc., USA) — purchase management: purchase and subscription data from Google Play and our user identifier. Acts as our processor.
- Google — Sign in with Google, app distribution and payments via Google Play. Google processes this data under its own privacy policy for these services.
- Hosting provider — our backend and database run on servers of a hosting provider in the EU (Germany). Acts as our processor.
We may also disclose data where required by law or to protect our rights, or to a successor if the Service is transferred (you will be informed). We do not sell or rent personal data.
6. International transfers
Our servers are in the EU (Germany). OpenAI and RevenueCat are based in the United States, so data may be transferred to and processed in the United States and other countries where they operate. Where required, such transfers rely on the EU–U.S. Data Privacy Framework (where the recipient is certified), the European Commission's Standard Contractual Clauses, or other safeguards permitted by law. For transfers from Turkey, we rely on the transfer mechanisms in Article 9 of KVKK (including standard contracts). You can ask us for more information about these safeguards.
7. Retention
| Data | How long |
|---|---|
| Account data, minutes balance, session records | Until you delete your account. Deletion removes them. |
| Purchase (billing) records | As long as required by tax and accounting law, which may be up to 10 years, after which they are deleted. |
| Call audio | Not stored by us. Processed by OpenAI in real time; see section 5 for OpenAI's limited retention. |
| Live captions | Not stored by us. The last call's captions stay on your phone until the next call or until you clear the app's data. |
| Assistant instructions, call goal, display name and called number sent for a session | Not stored in our database; used only to set up the session. |
| Technical server logs | A short period for security and troubleshooting. |
| Support emails | As long as needed to handle your request, and no longer than necessary for any follow-up. |
8. Your rights
Depending on where you live, you have the right to:
- access your personal data and receive a copy;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to processing based on legitimate interests;
- receive your data in a portable format;
- withdraw consent where processing is based on consent;
- under KVKK Article 11, learn whether your data is processed, learn the purpose and the recipients, request correction or deletion and notification of this to recipients, object to a result against you arising exclusively from automated analysis, and claim compensation for damage caused by unlawful processing.
To exercise your rights, email support@translatalo.com from the email address of your account. We will respond within the time required by law (generally within one month under the GDPR and within 30 days under KVKK). You also have the right to lodge a complaint with a supervisory authority — in the EU, the authority in your country of residence; in Turkey, the Personal Data Protection Authority (KVKK); in the UK, the ICO.
If you live in California or another U.S. state with a privacy law, you can use the same contact to request access to or deletion of your data. We do not sell or share personal data for cross-context behavioral advertising.
9. Deleting your account
You can delete your account at any time in the app under Settings → Account → Delete account, or by emailing us from your account's address. Deletion removes your account, minutes balance and session records. Billing records are kept only as required by law (see section 7). Unused minutes are lost when the account is deleted. Deleting your account does not cancel a Google Play subscription — cancel it in Google Play. Details: translatalo.com/delete-account.
10. Children
The Service is not directed to children. You must be at least 16 years old to use it (or older if the law of your country requires). We do not knowingly collect personal data from children under 13, or under 16 in the EEA and Turkey. If you believe a child has given us personal data, contact us and we will delete it.
11. Security
Data in transit is encrypted: connections to our backend use HTTPS (TLS), and call audio to OpenAI uses WebRTC encryption (DTLS-SRTP). Access to our servers and database is restricted. The app's helper process runs only on your phone and only through the Wireless debugging pairing you set up. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your data and will notify you and the authorities of a personal data breach where the law requires.
12. Changes to this policy
We may update this policy. We will post the new version here with a new effective date and, for material changes, notify you in the app or by email before they take effect.
13. Contact
[Developer legal name], [Postal address]
Email: support@translatalo.com