Privacy Policy

Draft — pending legal review. Version web-draft-1 · updated 29 October 2026. Written from what UniTalk's code actually does; not yet reviewed by a lawyer. The Vietnamese version is the primary text.

In short: UniTalk never records calls. We store your account, the profile you enter, facts about your speaking sessions (no audio), messages with friends and safety reports. No ads, no selling data, no third-party trackers. You can delete your account in the app.

1. Who runs UniTalk

UniTalk is operated by an individual based in Japan (“we”). Privacy contact: support@unitalk.live.

2. What we collect

Account and sign-in

• Sign in with Apple or Google: the account identifier Apple/Google issues, the email address they share (for Apple this may be a private relay address), whether it is verified, and when you signed in. For Apple we also keep a refresh token solely so that we can revoke the link when you delete your account, as Apple requires.
• Email sign-in: your email and a hashed password (PBKDF2); we never store the password itself.
• Sessions: for each device — the sign-in method, the “user agent” string the app sends (app type and version), and when the session was created, last used and expires. Sign-in tokens are stored only as hashes.
• Consents: which versions of the terms, this policy and the community rules you accepted, your confirmation that you are 18 or over, and when.
• Account status: active, suspended (until when, and why) or banned.

The profile you enter

• Display name, avatar (if you upload one), university (optional), native language, learning goals, favourite topics and profile visibility.
• The languages you are learning and your level in each — used to match you with people at a similar level.

Speaking sessions (calls)

• Audio is never recorded or stored. Voices are relayed live between the two participants through Cloudflare Realtime.
• We store facts about each session: who took part, the language, the topic, when it started and ended, how many seconds both were connected and why it ended. Your progress (sessions, streaks) is calculated from these.
• Feedback after a session: a star rating (1–5), whether the topic was completed, and an optional note (up to 500 characters).
• Invitations to practise with a friend: the invite code is stored only as a hash, with the inviter, language, topic, expiry and who accepted it.

Friends and messages

• Who you follow, friend requests and friends.
• Messages with friends and messages inside a call: the content (text or an emoji), when it was sent, your reactions, how far you have read and whether you muted the conversation.
• Messages are not end-to-end encrypted. An automatic filter masks strongly offensive words and marks messages containing links or phone numbers for review by the safety team. The safety team reads messages only when they are reported or marked by the filter.

Safety

• The people you have blocked.
• Reports you file or that are filed about you: the category, description, and the session or message concerned. When a message is reported we keep a copy of it and up to 10 messages before and 10 after it, so the safety team can understand the context.
• Decisions taken by the safety team (who, what and why), kept as an audit record.

Usage statistics

The app sends a few usage events linked to your account: app opened, time in the app, sign-up and setup completed, search started (language), time waited for a match, and session length — with a timestamp, an app-session id, the platform (iOS/Android) and the app version. No IP address and no device identifier are attached. We use them to learn whether the app is useful (daily users, return rate, busy hours). Kept for 90 days.

Technical information

• IP address: used to prevent abuse (limits on sign-in and sign-up attempts). We use only a hash of the IP, held in memory for at most one hour and never written to the database. Cloudflare processes IP addresses to deliver data and connect calls; server logs (time, path, errors) are kept by Cloudflare for a short period.
• On your phone: sign-in tokens are kept in the operating system's secure storage (Keychain/Keystore). The microphone permission is used only during calls.

When you contact us

If you email us, we keep that email to answer you and handle your request.

3. What we do not do

• We do not record calls.
• No advertising; we do not sell or rent data.
• No third-party analytics, advertising or tracking tools in the app or on this website (this website sets no cookies).
• No access to your contacts, photos (other than the one you pick as an avatar) or location.
• No push notifications yet. If we add them, we will update this policy first.

4. Who can see your information

• The person you are matched with: your display name, avatar, level in the language being practised and university (unless you chose “Only me” / “Chỉ mình tôi”).
• People you have talked with, and friends: according to “Who can see my profile” (“Ai được xem hồ sơ”) — Everyone (“Mọi người”), People I have talked with (“Bạn đã nói cùng”), or Only me (“Chỉ mình tôi”). With “Only me”, you appear as “Private user” in other people's history and nobody can follow you.
• Message recipients: the messages you send them.
• UniTalk's safety team (the operator and people assigned to moderate): what is needed to handle reports and protect users. Every moderation action is logged.
• The person you report is not told who reported them.

5. Processors

We use only these providers, each for a specific job:

When you download the app from the App Store or Google Play, Apple and Google process data under their own policies. We may disclose data to public authorities where the law requires it.

6. International transfers

If you are in Vietnam, your data is transferred outside Vietnam:

• Japan — where UniTalk's operator lives and accesses data to run, support and moderate the service.
• The United States and the countries where Cloudflare has servers — Cloudflare stores and processes data on its global network; UniTalk's main database runs in Cloudflare's Asia-Pacific (APAC) region, and the specific servers may be outside both Vietnam and Japan.
• The United States — Google and Apple, when you sign in with their accounts.

We transfer data because the service cannot run without it, and only what each job in section 5 needs. By accepting this policy when you create an account, you consent to these transfers. You can withdraw that consent by deleting your account (section 8).

7. How long we keep it

8. Your rights

• Access and correction: view and edit your profile, languages, levels, avatar and visibility in the app (Profile tab, “Hồ sơ”).
• Deletion: Profile tab → Delete account. See Delete your account for exactly what is deleted and when.
• Withdraw consent: at any time, by deleting your account or emailing us. Withdrawal does not affect processing that already took place.
• A copy of your data, restriction or objection, questions about your data: email support@unitalk.live from the address linked to your account. We may need to confirm you own the account first.
• Complaints: you can complain to the data protection authority where you live.

9. Age

UniTalk is only for people aged 18 or over; you confirm this when you create an account. Accounts that appear to belong to someone under 18 are suspended while we review them. If you know someone under 18 is using UniTalk, report them in the app (choose “Có thể là trẻ vị thành niên” — may be a minor) or email us.

10. Security

Connections between the app and our servers are encrypted (HTTPS/TLS). Passwords and sign-in tokens are stored only as hashes; reusing an old sign-in token signs that whole session out. Safety-team access is role-based and every action is logged. No system is perfectly secure; if an incident affects your data, we will tell you.

11. Changes and contact

When this policy changes materially, we update the date at the top and ask you to accept it again in the app. Privacy questions: support@unitalk.live.