EasyTalk Privacy Policy
Last updated: 22 July 2026
⚠️ Draft pending legal review. It covers what the GDPR requires and what Apple asks you to declare on the App Store listing, but no lawyer has reviewed it.
Who processes your data
The data controller is Pol Marzà Fusté, with address at Calle Santa Rosa 58, 1º · 08901 L'Hospitalet de Llobregat (Barcelona), Spain, and tax ID (NIF) 46472621V. For anything related to your data: support@easytalk.ai.
What we collect, and why
| Data | What for | Legal basis |
|---|---|---|
| Email address | Creating your account and signing in | Performance of a contract |
| Username, display name, language, photo | So your contacts recognise you | Performance of a contract |
| Messages (original text and translations) | Providing the service and showing you the history | Performance of a contract |
| Contacts and requests | Knowing who you can talk to | Performance of a contract |
| Credit balance and transactions | Charging for the service and letting you audit it | Performance of a contract |
| Device identifier for notifications | Alerting you to new messages | Consent (you can withdraw it in your system settings) |
| Blocks and reports | Community safety | Legitimate interest and legal obligation |
| Error logs | Detecting and fixing failures | Legitimate interest |
| Name, email and language from the waiting list | Letting you know when the app is out, in your language | Consent (given when you submit the form) |
We do not ask for or store your phone number. Your email is hidden by default; it is only shown if you turn it on.
Your messages and automatic translation
To translate a message we send it to a provider of artificial intelligence
models. We always do so with the zero retention and no training use option
enabled (data_collection: deny), so that the provider does not keep your text
nor use it to train models.
We store the original text and its translation so that both of you can read the history. We also store a translation cache indexed by a hash of the text, not linked to whoever wrote it, so we don't translate — or charge for — the same thing twice.
EasyTalk does not use end-to-end encryption, because translating requires access to the text on our servers. Messages travel and are stored encrypted, but technically we can access them.
The website waiting list
If you leave your name and email on easytalk.ai so we can tell you about the launch, we use them for exactly that: one single email the day the app is out. When you sign up we also send you a confirmation email in your language, right away. We do not add you to any newsletter. You can ask us to remove you at any time at support@easytalk.ai, and we will delete the whole list once the announcement has been sent.
Reported content
When someone reports you, or you report someone, we keep a copy of the last messages from the reported person in that conversation, together with the translation that the person reporting read. That copy stays exactly as it was at the moment of the report, so that a review is possible even if the original messages are deleted afterwards.
An administrator can read that reported content, and only that: the system does not allow administrators to access conversations that have not been reported. These copies are kept while the report is open and for up to one year after it is resolved, in case of repeat behaviour or a claim.
The reported person is not notified of the report.
Who we share data with
We work with these providers, each with the minimum access necessary:
- Clerk — identity and sign-in.
- Supabase — database and storage (hosted in the European Union).
- OpenRouter and the models it routes to — translation, with zero retention.
- RevenueCat, Apple and Google — in-app purchases.
- Expo — sending push notifications.
- Resend — transactional email and internal alerts.
- Sentry — diagnosing app errors.
Some of them are outside the European Economic Area. In those cases the transfer is covered by the European Commission's standard contractual clauses or by an adequacy decision.
We do not sell your data or use it for advertising.
How long we keep it
For as long as your account is open. If you close it, we delete your profile and your messages within 30 days, except for:
- the entries in the credit ledger, which we keep for 5 years to meet accounting and tax obligations, dissociated from your profile;
- reported content, as described above.
Your rights
You can ask us at any time to access your data, rectify it, delete it, restrict or object to its processing, and to receive a copy in a portable format. Write to us at support@easytalk.ai and we will reply within one month.
If you believe we have not handled your data properly, you can lodge a complaint with the Agencia Española de Protección de Datos (Spanish Data Protection Agency) (www.aepd.es).
Minors
EasyTalk is not directed at children under 16. If we detect an account belonging to someone under that age, we will close it and delete their data.
Changes
If we modify this policy we will notify you in the app before the changes take effect.
Language
This is a translation of the Spanish original for convenience. In case of any discrepancy, the Spanish version prevails, and is available at https://easytalk.ai/privacidad.