Privacy Policy for OneTalk

Last Updated: April 9, 2026

Introduction

OneTalk ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App"). Please read this carefully. If you do not agree with these terms, please do not access the App.

Information We Collect

1. Personal Information You Provide

Account Information:

• Email address (required for account creation)
• Display name and username
• Profile picture (optional)
• Bio/description (optional)

Contact Information:

• With your explicit permission, we access your device contacts to help you find friends using OneTalk
• Contact phone numbers are SHA-256 hashed on your device before leaving it — only hashed values are sent to our servers
• Raw contact names, phone numbers, and emails are never uploaded or stored on our servers
• Contact syncing is entirely optional and can be cleared at any time

User-Generated Content:

• Videos you upload and their captions
• Comments on videos
• Messages sent through our encrypted messaging system
• Voice notes and files shared in conversations
• Profile information and settings

2. Automatically Collected Information

• Device type, model, and operating system version
• Unique device identifiers and IP address
• Usage data: features used, videos watched, watch duration, and engagement (likes, comments, shares)
• App open events and session data via Firebase Analytics
• Push notification tokens (FCM) for message and call delivery
• We do NOT collect precise location data — no GPS or geolocation permissions are requested

3. Camera, Microphone, and Bluetooth

• Camera access is required to record videos
• Microphone access is required for video audio and voice/video calls
• Bluetooth access is used for audio routing during calls (e.g., Bluetooth headsets)
• We only access camera and microphone when you actively use these features

4. On-Device Processing

• We use on-device machine learning (Google ML Kit) for language detection to support content moderation
• This processing happens entirely on your device — no text is sent to external AI or ML services for this purpose

How We Use Your Information

• Provide and improve core services (video feed, messaging, voice/video calls)
• Personalize your experience and content recommendations using engagement signals (views, likes, watch time)
• Moderate content to detect and filter spam, abuse, hate speech, and other policy violations
• Send push notifications (messages, calls, friend requests, video upload confirmations)
• Detect and prevent fraud, spam, and abuse
• Enforce our Terms of Service

Content Personalization

OneTalk uses an algorithmic feed ("For You Page") that recommends videos based on:

• Videos you have liked, watched, and shared
• Your selected interest categories and content preferences
• Engagement patterns (watch time, completion rate)

You can control content preferences in Settings, including filtering sensitive or political content and blocking specific keywords. You can also mark videos as "Not Interested" to refine your recommendations.

Third-Party Services

Firebase (Google): Authentication, Cloud Firestore database, Cloud Storage, Cloud Functions, Firebase Analytics, and Firebase Cloud Messaging (push notifications). Privacy Policy

Google Cloud Platform: Video storage (Google Cloud Storage), video transcoding (Cloud Run workers), and content delivery (Cloud CDN at cdn.onetalk.app). Uploaded videos are stored and processed on Google Cloud infrastructure. Privacy Notice

Google ML Kit: On-device language identification for content moderation. All processing occurs locally on your device. Terms

Message Encryption

Messages in OneTalk are encrypted using AES-256-GCM symmetric encryption. Messages are encrypted before being stored in our database and decrypted only on the recipients' devices. All data in transit is protected by TLS. Note: this is symmetric encryption (not end-to-end encryption with public key exchange).

Data Retention

• Account data is retained until you delete your account
• You can delete your account at any time from your Profile → Settings → Delete Account
• Upon deletion, your profile data, uploaded videos, and associated content are removed
• Deletion is processed within 30 days
• Some anonymized analytics data may be retained for service improvement

Children's Privacy

OneTalk is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information promptly.

Your Rights

Depending on your location, you may have rights to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Request data portability

Contact us at onetalk.biz@gmail.com to exercise these rights.

Security

We implement industry-standard security measures including AES-256-GCM encryption for messages, TLS for all data in transit, Firestore security rules restricting data access to authorized users, and secure server infrastructure on Google Cloud Platform.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via in-app notification or email. The "Last Updated" date at the top of this page indicates when the policy was last revised.

Contact Us

If you have questions about this Privacy Policy, contact us at: onetalk.biz@gmail.com