Privacy & Terms

Family and invited-testers prototype · Updated 12 October 2026

No phone number is required. Notifications show the sender, not the message. Messages are restricted to their conversation participants, but this prototype does not provide end-to-end encryption for stored messages and photos.

Who runs this prototype

Stuart runs this invitation-only test. For a privacy question, an account correction or a deletion request, contact Stuart through TALK₂U, or contact the person who invited you. Do not send your private access code in a message.

What is stored, and why

Your chosen name, internal account ID, access-code hash and sign-in sessions let you use your account.
Messages, photos, timestamps and delivery/read records provide your conversations. Recent activity supports the “online” indication.
Profile pictures and your optional phone number are stored if you add them. Names and pictures are visible to other accounts in this small prototype’s Chats list. Phone numbers remain hidden unless you tick “Show my number to my contacts.” Contacts currently means the people in that list.
Block settings prevent new messages and calls between accounts. Earlier messages remain available to their original participants.
If you enable alerts, a push-notification subscription connects this account to your browser or phone’s notification service.

Who can access information

The app restricts new private messages and photos to the sender and recipient. Earlier shared messages are labelled separately and remain visible to the invited prototype accounts. The administrator and anyone with authorised server or backup access can access stored message and photo contents; they are not end-to-end encrypted.

The server is hosted by DigitalOcean in London. Your device’s notification provider, such as Apple or Google, processes alert delivery. Alerts contain the sender’s name and a message or call notice, not the chat text. Voice calls use encrypted WebRTC transport and a relay service. The prototype does not save call audio, but this is not a claim of an independently audited security system.

IP addresses and connection records

Connecting to the website and call relay involves your network address. Hosting and notification providers may process connection information under their own policies. The app also uses temporary request information for sign-in rate limits.

A 30-day, account-linked IP history has not been implemented. If introduced, this notice will be updated to explain the purpose, administrator access and actual deletion period before collection begins. An IP match would be a review clue, not proof that two accounts belong to the same person.

Reports, approval and bans

New accounts created through invitation links wait for administrator approval. Reports store the reporter, reported account, reason, optional explanation and review status. If you explicitly tick the report option, the last ten private message texts between you and that person are copied into the report for administrator review; photos are not included. Without that tick, no message text is attached automatically.

The administrator can approve or reject requests, ban or unban accounts, and mark reports reviewed. Decisions retain the administrator, account, reason and time. A ban revokes server sign-in sessions and alert subscriptions and ends active calls. It does not erase copies of earlier messages already on devices.

Selecting Agree and continue records your account, acceptance time, terms version and the matching document fingerprint. A preserved copy of that terms version is stored for reference. This records acceptance, not proof that you read the page. An updated version requires a new acceptance.

How long information stays

Messages, photos and account records currently stay while the prototype is in use, until the administrator removes them. There is no automatic 30-day deletion of these records. Server backup copies may retain earlier data after a change to the live database.

Your sign-in can last up to 90 days and is renewed when you open the app. Signing out revokes that session. Your device also stores recent conversations and waiting messages so they can work through interruptions. Signing out does not erase all locally saved conversations or waiting messages.

Your choices

A phone number is optional. You can remove it or untick sharing in My profile. You can block or unblock another account, turn off alerts and sign out. For access to your stored information, correction or deletion, contact the prototype administrator. Requests will be checked against your account; we will explain any information that cannot immediately be removed, including backup copies.

This prototype has no advertising or marketing sign-up option and does not use an advertising analytics service. Information is used to operate and protect the test service, rather than to build advertising profiles.

Terms for this test

Use only your own account and keep your access code private.
Do not use the service for harassment, scams, illegal content or attempts to access another person’s information. Report concerns to the administrator.
This is a working prototype. Messages, downloads, alerts and calls can be delayed or interrupted. It is not an emergency calling service.
Other participants can copy messages, save pictures or capture their screen. Blocking does not remove copies already received.

This page describes the current private test. It is not a claim that the service is ready for a public commercial launch. Operator contact details, the applicable data-protection basis and a final retention policy will need to be settled before that launch. Nothing here removes rights you have under applicable law.