Privacy Policy
Effective August 23, 2026 (revised)
KLATalk is a messenger with everything stripped away except the conversation. Personal data is handled by the same principle — we take only what the service truly needs, and what we never collected cannot exist.
What we never collect
Phone numbers — not for sign-up, not for invites.
Contacts — we never even ask for the permission.
What we collect, and why
- Nickname (required) — the only name that represents you in conversations.
- Profile photo and bio (optional) — visible to the people you talk with.
- Recovery email (optional) — used only to restore your account if you lose your phone. Stored encrypted, never used for marketing.
- Messages — stored on the server to deliver them and keep your devices in sync. Messages in locked (end-to-end encrypted) rooms are stored exactly as encrypted by your device — the only exception is a copy a member sends us directly by reporting it (see "Reports" below). Conversations in non-locked rooms may be reviewed by the operator to improve the service — the same fact is shown in the app's room-mode descriptions.
- Reports — when you report a message, your device sends a copy of that message with the reason and room info to the server. This is the one path by which a locked-room message reaches us — handed over by a member, not opened by the server. Kept for 90 days for enforcement, then deleted. The operator is notified that a report arrived (metadata only, no content).
- Block list — who you blocked is stored on the server so their notifications stop on all your devices. Messages are hidden by the app after each device syncs the list; app versions without blocking support may still show them. Only you can see your list; the blocked person is never told. The fact that a block happened (who blocked whom, when) is notified to the operator.
- Media such as photos — kept on the server for 14 days for delivery, then deleted. Copies remain on receiving devices.
- Chat backup (optional) — if you turn it on, your history is kept on the server sealed so that only you can open it. The keys exist only on your phone and in your recovery kit. Turn it off anytime and it is erased from the server.
- Notification tokens — used only to deliver new-message notifications, stored encrypted.
Retention and deletion
- Delete your account anytime in Settings > Delete account. Profile, recovery email, and notification tokens are deleted immediately.
- Deleting your account also deletes the reports you filed and your block list. Your name as it appeared in other people's block lists is anonymized.
- Conversation history remains with the author anonymized, to protect the records of the people you talked with.
- Export your conversations anytime in Settings > Export chats — they are yours.
Processors
We use the services below to run the servers and deliver messages. Apart from what the law requires, there is no other third-party sharing.
- Amazon Web Services (Seoul, Republic of Korea) — servers and data storage
- Apple Push Notification service (APNs) / Google FCM — push delivery
- Amazon SES — recovery email delivery
Contact
Email: [email protected]
When this policy changes, the new effective date is posted on this page.