Privacy Policy
1. Who we are and how to reach us
Walkie Talkie World Wide is run by Ali Bitar, Sportlaan Driene 216, 7552 HA Hengelo, the Netherlands. We are the controller of the personal data described here.
Questions, complaints or requests about your data: email walkietalkieworldwide@outlook.com. We answer within one month.
2. The short version
- You sign in with Google. We keep only Google's account number for you, not your name, email address or photo.
- Live voice in rooms and calls is not recorded or saved.
- Chat messages are kept for 12 months, then deleted.
- We do not sell your data, do not use it for personalised advertising and do not use it to train AI.
- You can delete your account at any time in the app: Profile → Delete account.
- Movie night uses YouTube API Services (see section 6).
3. What we collect and why
| Data | Why | How long we keep it |
|---|---|---|
| Google account identifier (the number Google gives your account for our app) | To sign you in | Until you delete your account |
| Your name in the app, your 6-character tag, your colours, outfit items and settings | To show your profile to others and run the app | Until you delete your account (or change them) |
| Your age as you enter it once, and when you entered it | To make sure you are 16 or older and to apply extra protection for people aged 16 and 17 | Until you delete your account |
| Sign-in sessions (stored only as a scrambled code) | To keep you signed in | A session lasts up to 30 days; the record is removed 7 days after it ends |
| Room membership: which room you are in, whether you host it, room name and language | To run voice rooms | While you are in the room; a room is deleted as soon as it is empty |
| Live voice in rooms and calls | To send your voice to the people in your room or call | Not recorded and not stored |
| Friends, friend requests, blocks and per-friend mute settings | Friends and safety features | Until you or the other person removes them, or an account is deleted |
| Chat messages between friends | To deliver messages and show your chat history | 12 months, then deleted automatically |
| Call records (who called whom, when, and the result) | To show missed calls and run calls | 30 days after the call |
| Game data (moves, scores, words typed in Guess the Word) | To run games; the server decides moves and winners | 7 days after the game ends |
| Coins, purchases in the app's market and your coin history | To run the in-app economy | Until you delete your account |
| Google Play purchase records (purchase token, product, coins given) | To give you the coins you paid for, handle refunds and keep our books | After account deletion we keep the record without any link to you, for 7 years (Dutch bookkeeping law) |
| Rewarded-ad completion records | To give coins for watched ads and stop abuse | 90 days |
| Push notification token (Firebase Cloud Messaging) | To notify you of calls and messages | Until you sign out on that phone or delete your account |
| Reports you send, and reports about you (reason, details, the reported message or name) | Safety and moderation | Up to 90 days after the report is closed |
| Automatic word-filter flags (text the filter blocked, in chat, names, room names, games and comments) | Safety and moderation | Closed after 30 days if nobody handles them, then deleted 90 days later |
| Moderation actions (mutes, bans, the reason and the moderator) | Safety and to handle questions about a decision | 1 year |
| IP address and device ID (Android ID), stored only as a scrambled, keyed code | Security, fraud prevention and stopping banned people from coming back | With your sign-in session (see above); if a ban is placed, until 90 days after the ban ends |
| Answers to announcements, polls and ratings | To show results (results are shown without names) | 180 days after the poll ends |
| Online status, the public room you are in and roughly when you were last seen | Shown only to your accepted friends | Live only |
The app asks for microphone access for voice and for notification access for calls and messages. It does not ask for your contacts, photos, camera or location.
Our web server keeps no access logs. Technical server logs (which can include an IP address) are deleted after 14 days. Database backups are kept for 14 days on the same server; if we ever restore a backup, we will delete again every account that was deleted after that backup was made.
4. Legal basis
- To provide the app you asked for (contract, GDPR art. 6(1)(b)): account, rooms, voice, friends, chat, calls, games, coins and purchases.
- Our legitimate interest in a safe service (GDPR art. 6(1)(f)): reports, the word filter, moderation, and IP/device codes against fraud and ban evasion.
- Your consent (GDPR art. 6(1)(a)): rewarded ads, which you choose to watch and for which Google asks your consent first.
- Legal obligation (GDPR art. 6(1)(c)): bookkeeping records of purchases.
5. Who else sees your data
Other people in the app. People in your room hear your voice and see your name, tag, colours and outfit. Your friends see your online status. Messages go only to the friend you send them to. People can always copy or remember what they hear or read; please keep that in mind in public rooms.
Our moderators and the operator can see reports, word-filter flags, who is online and poll answers, in order to keep the service safe.
Service providers we use:
- one.com: our server (a rented virtual server located in the Netherlands). Our database, our voice server (LiveKit, which we run ourselves on this server) and this website run there.
- Google Sign-In (Google): to sign you in.
- Firebase Cloud Messaging (Google): to deliver notifications. The notifications we send contain no message text.
- Google Play Billing (Google): to process coin purchases. We send Google only a scrambled code of your account, not your name.
- Google AdMob (Google): rewarded ads, only if you choose to watch one. Ads are non-personalised and limited to content suitable for all ages. Google asks for your consent before any ad and may use your IP address and device information to deliver the ad and prevent fraud.
- YouTube API Services (Google): movie night, see section 6.
Google may process data outside the European Union. Google relies on safeguards such as the EU–US Data Privacy Framework and the European Commission's standard contractual clauses. Google's own use of data is described in the Google Privacy Policy.
We may give data to authorities when the law requires it.
6. Movie night and YouTube API Services
Walkie Talkie World Wide uses YouTube API Services. By using movie night you agree to be bound by the YouTube Terms of Service. Google's use of data is described in the Google Privacy Policy.
What happens. The host of a room can search YouTube or browse popular videos and pick one. Everyone in the room then watches it in YouTube's own official embedded player, and the players follow the host's play, pause and position.
What we send to YouTube. Our server sends YouTube the search words the host types, the room's language, and for popular videos the two-letter country from the host's phone settings (for example "NL"). These requests come from our server, not from your account: we do not send YouTube your name, your account or any other personal data.
What we get from YouTube. Public video information only: the video ID, title, channel name, thumbnail picture link and length.
What we store and for how long.
- Search results are kept in our server's memory for at most 6 hours, and popular-video lists for at most 1 hour, so the same search does not have to be repeated. These are not linked to any account and are not written to our database. They are gone at the latest when the server restarts.
- While a movie is playing in a room, our database stores the video ID, title and channel name, the playback position, whether it is playing, and which account started it. This is deleted as soon as the host stops the movie or the room closes (a room closes as soon as everyone has left). If the host picks another video, the old one is replaced.
- We do not store your search words in our database, and we do not download, copy or keep any video.
YouTube's player. The video plays in YouTube's player inside the app, loaded directly from YouTube. YouTube (Google) then receives information such as your IP address and device information and may store cookies or similar data on your phone, as described in the Google Privacy Policy. We have no control over that.
No access to your YouTube account. Movie night never asks for access to your YouTube or Google account data, and we cannot see your YouTube history, subscriptions or playlists. Google Sign-In for the app gives us only your Google account identifier. You can remove the app's connection to your Google account at any time on Google's security settings page: https://security.google.com/settings/security/permissions.
Deletion. Movie data in our database is deleted automatically as described above. If you delete your account, the link to you is removed at once. You can also email walkietalkieworldwide@outlook.com and we will delete any YouTube-related data we hold about you within 7 days. This does not delete anything YouTube itself stores; for that, see your Google account settings.
7. Deleting your account
In the app, open Profile → Delete account. Deletion happens at once and removes your profile, sign-in, sessions, friends, blocks, chats and messages (also from the other person's view), calls, coins, items and the games you created. You can also ask us by email at walkietalkieworldwide@outlook.com.
What stays for a limited time without your account link: reports and their evidence (up to 90 days after closing, so earlier abuse reports still work), moderation records (1 year), IP/device codes of an active ban (90 days after it ends), and purchase records (7 years, bookkeeping law). Backups expire within 14 days. Things other people saved themselves (for example a screenshot) are outside our control.
8. Your rights
You can ask us to see, correct, delete or receive a copy of your data, to limit its use, or object to it, and you can withdraw your consent for ads at any time: just stop watching ads, and to reset the consent choice clear the app's data in your phone's Android settings (this signs you out on that phone). Email walkietalkieworldwide@outlook.com. We may ask you to show that the account is yours (for example by writing from inside the app or sending your tag); we will not ask for an ID document by default.
You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or the authority in your own EU country.
9. Age
You must be 16 or older to use the app, or older if the law where you live requires it. You enter your age once when you start; if you are under 16, the account is deleted. People aged 16 and 17 get extra protection: adults cannot find them in people search unless they are already friends or the younger person sent the request. If you think someone under 16 is using the app, email walkietalkieworldwide@outlook.com.
10. Security
Connections to our server use HTTPS. Sign-in sessions are stored as scrambled codes, the app keeps your session in Android's protected key storage, and access to the server is restricted to the operator. No system is perfectly secure; if a data breach affects you, we will tell you and the authority as the law requires. Messages are not end-to-end encrypted: they are stored on our server so you can read your history.
11. Data stored on your phone
The app stores your sign-in session and settings on your phone. This website uses no cookies and no analytics. YouTube's player and Google's ad tools may store their own data on your phone (see sections 5 and 6).
12. Changes
When we change this policy, we update the date at the top. If a change matters for you, we will tell you in the app before it applies.