Privacy Policy
Effective: September 22, 2026
This English version is a translation provided for convenience. If it differs from the Korean version, the Korean version prevails.
The operator of GameTalk (the "Service"; "we" or "us") complies with the Personal Information Protection Act of Korea and other applicable laws, and handles personal information as described below.
1. What we collect and why
| Information | When | Purpose |
|---|---|---|
| Email address, password (stored hashed) | Sign-up | Identifying your account, signing in, email verification, password reset |
| Nickname, profile photo, introduction, interests, spoken and learning languages and levels, country | Sign-up · editing your profile | Displaying your profile and finding people and rooms by language and interests |
| Public and private messages, photos, videos, voice messages, room, feed and phrasebook content, follows · blocks · reports | Using the Service | Providing chat and conversations, keeping the community safe |
| Profile visits, participation and conversation time, attendance, word-game participation and scores | When using these features | Visitor, activity and game features, understanding how the Service is used |
| Text selected for translation, source and target languages, translation result | When you choose to translate | Translation through DeepL and handling repeated requests for the same text |
| Push notification token | When you allow notifications | New message notifications |
| IP address, request logs | Using the Service | Preventing abuse (rate limiting), handling outages. Server operational logs are deleted within 14 days. Separate sign-in and device-security records are kept for 90 days to protect accounts |
| App errors, app and OS versions, diagnostics, account ID | When app errors occur | Reproducing errors and improving stability through Sentry. We do not attach nicknames or email addresses to the Sentry user profile. |
| Acquisition source, friend referral code and referral relationship | When you answer optional questions | Understanding how people find the Service. Answers are optional and are not shown to other users. |
| Apple or Google account identifier, verified email and encrypted token for revocation | When you use or connect a provider in an app offering that sign-in method | Sign-in, explicit account linking and provider revocation on deletion. We do not receive your provider password. |
| Account ID, subscription product, transaction, purchase and restoration history, subscription status | When purchasing, restoring or checking access in an app that offers subscriptions | Receipt validation, premium access, subscription analytics and fraud prevention through RevenueCat. GameTalk does not receive card numbers or bank account details. |
| IP address and approximate location, device and advertising identifiers where available, ad impressions and interactions, app and SDK diagnostics, consent choices | When checking consent and requesting ads in an app that offers advertising | Ad delivery, measurement, fraud prevention and consent management through Google AdMob. Non-personalized ads may still process information needed to deliver advertising. |
Voice calls are not stored or recorded. Voice messages you choose to send are stored as chat or feed attachments. Purchase and advertising processing applies only in apps that offer those features. We do not send chat content or voice calls to advertising providers.
You can select your country manually. Only when you choose to fill it from your current location and grant permission does the device derive a country code. Coordinates are not sent to or stored on GameTalk servers. We do not read your phone address book. Diagnostic records may include app versions and request URLs.
2. Retention and deletion
- Account information is kept until you delete your account. After you request deletion and the 7-day cancellation period passes, we delete your account, profile, the rooms and 1:1 chats you created, your follows and blocks, and your notification tokens. Messages you left in other rooms remain with the author information removed.
- When a room is closed, its messages and photos are deleted immediately.
- Email verification codes expire after 15 minutes. Social authentication requests and pending sign-up information expire after 5 minutes.
- Your acquisition answer and referral code are deleted with your account. Links identifying you as the referrer of another account are removed.
- Provider revocation tokens are encrypted with a separate server key. During account deletion, we revoke them with the provider and remove them from our server.
- Translation results are cached for up to 30 days using a hash of the original text and language as the key. Sign-in and device-security records and profile visits are periodically deleted after 90 days.
3. Processors and international transfers
We use the following providers' infrastructure to run the Service. Processing is governed by the relevant agreements. Provider policies also apply to services you choose, such as store purchases and sign-in.
| Provider | Purpose | Location |
|---|---|---|
| Amazon Web Services (Lightsail) | Servers and database | Republic of Korea (Seoul) |
| Cloudflare (R2) | Photo, video and voice-message storage | Automatic placement (global) |
| Resend | Verification and password emails | United States |
| Apple (APNs), Google (Firebase Cloud Messaging) | Push notification delivery | United States |
We send only the text you select and language information to DeepL for translation. Default processing regions may include Europe, the United States and Asia-Pacific, depending on the provider's infrastructure. See DeepL's data-processing information for details and regions. This transfer does not occur unless you choose to translate.
We use Sentry in the United States to monitor errors. Diagnostics and account IDs are transmitted for troubleshooting. When you choose social sign-in, we exchange authentication information with Apple or Google. The selected provider’s privacy policy also applies.
For subscriptions, we send account IDs and transaction and subscription information to RevenueCat in the United States. Apple App Store or Google Play processes payments. For ads and consent management, we use Google AdMob and the User Messaging Platform; the advertising information described above may be processed on Google's global infrastructure. Related retention and processing are described in the RevenueCat Privacy Policy, the Google Privacy Policy and the relevant store's policies.
Optional AI sentence coach and scheduled review
In versions offering the sentence coach, we send your draft (up to 500 characters), chosen tone and explanation language to OpenAI (United States) only after you read the notice and choose “Agree and polish draft”. We do not include chat history, other participants’ details or call audio. You can use basic chat and calls without agreeing to this transfer.
GameTalk does not store the original draft in request logs. Generated results are cached for up to 10 minutes for retries. Request and user IDs, a non-reversible request fingerprint, processing status and time are retained for up to 90 days and regularly deleted to manage usage limits and prevent duplicate charges. These records are also removed when your account is permanently deleted. Aggregate service request counts without personal identifiers are retained for cost management.
OpenAI response storage is disabled. API data is not used for model training by default. OpenAI may retain content for abuse monitoring for up to 30 days, or longer when legally required. See OpenAI’s data controls for processing locations and exceptions.
Choosing “Save to my phrases” saves the original and corrected sentence to your private phrasebook. Answers typed during scheduled review are not sent to our server; only whether you remembered the phrase, its next review time and review level are saved. Deleting the phrase or permanently deleting your account also removes its review record.
Optional personal recording feedback
Only when you press “Agree and transcribe” do we send your own selected recording (up to 30 seconds) and its language to OpenAI (US). You can correct the transcript. Separately pressing “Confirm, agree and get feedback” sends that confirmed text (up to 1,500 characters) and explanation language to OpenAI for wording suggestions. We do not score pronunciation or accent, or automatically collect other people’s conversations or call audio.
GameTalk handles this audio in memory without writing it to server files, public storage or your feed. The transcript and feedback are each cached for up to 10 minutes to handle duplicate requests. Local recordings and results are cleared when you close or clear the screen. Request IDs, user IDs, non-reversible identifiers, status and timestamps are kept for up to 90 days for allowance and duplicate-request control and are also removed on permanent account deletion. Non-personal aggregate usage counters are retained.
OpenAI’s documentation lists no training use, abuse-monitoring retention or application-state retention for the transcription endpoint. For text feedback, response storage is disabled; API content is not used for training by default, but safety monitoring may retain text for up to 30 days. See OpenAI’s data controls above for legal and other exceptions. Basic chat, calls and recording practice remain available without this consent.
Optional web advertising measurement
Only after you choose “Allow measurement” on the web landing or signup page do we use Google Ads to measure ad visits and completed new signups. Google LLC (United States and Google's global processing infrastructure) receives ad-click and cookie identifiers, IP address, browser information, consent status and signup events over encrypted browser connections. The Google tag runs on a separate public-site page. We do not send app login tokens, email, nicknames, account IDs, conversations or room URLs. Enhanced conversions and personalized advertising are disabled.
Without consent, we do not load the Google measurement tag. A necessary preference cookie, shared across GameTalk web subdomains, remembers your choice for 180 days. Google's measurement-cookie and data retention follow its cookie information and Privacy Policy. Declining does not affect signup or basic service access. Change your choice in “Web ad measurement settings” in the web app or ad measurement settings. Withdrawing consent stops future measurement and deletes accessible Google advertising measurement cookies on GameTalk's domain.
4. Your rights
You can edit your profile (nickname and photo) and delete your account directly in the app. To request access to, correction of, or deletion of your information, contact Support and we will respond within 10 days.
Where regional rules require access to consent choices, you can change them through “Ad privacy settings” in the app settings. You can manage or cancel subscriptions in the store where you purchased them. Deleting your app account and cancelling a store subscription are separate actions. Contact Support about access to or deletion of transaction records.
5. Children
Children under 14 may not sign up. If we learn that we have collected information from a child under 14, we delete it immediately.
6. Security
- Passwords are stored with a one-way hash (scrypt) and cannot be recovered.
- All traffic is encrypted with TLS.
- Only the operator has access to the data, and server access is restricted to key-based login.
7. Changes
When this policy changes, we post the new version on this page with its effective date. We announce important changes in the app.
8. Contact
Privacy questions: [email protected] (Support)