Privacy Notice

1. Introduction

1.1 Description of STRTALK’s Privacy Core

STRTALK app is a secure instant messaging application that uses the proprietary Voice Over Blockchain Protocol (VOBP) to enable encrypted, private communication. Designed and developed by CryptoDATA, STRTALK ensures that all messages, voice calls, and file transfers are protected with advanced encryption standards.

Unlike traditional encryption methods where keys may be exchanged or stored on centralized servers, VOBP establishes a direct encrypted channel between users without exchanging encryption keys via a server. This eliminates the risk of key interception or unauthorized access. Communication remains entirely private and tamper-proof, as STRTALK itself cannot access the content of messages, calls, or file transfers. The result is a decentralized, censorship-resistant environment that prioritizes user privacy at its core.

To this effect, STRTALK will only have access to the account information that you provide (e.g. telephone number and user ID), limited metadata, such as the time a message was sent or the user IDs involved in a conversation, but it does not have access to the content of the communication itself. All conversations remain private and protected against unauthorized access, even from STRTALK.

1.2. Who We Are and How to Contact Us

For the purposes of this Privacy Policy:

STRTALK is the Data Controller for your data. We can be contacted at United States of America, 16192 Coastal Highway, Lewes, DE 19969, USA. For questions, email [email protected].

1.3. Scope of This Document

This document explains how we process personal data, as it relates to:

This document does not cover:

1.4. Changes to This Document

We may update this Privacy Policy from time to time. The updated version will always be available within the STRTALK app or on our website, including its effective date. By continuing to use STRTALK after changes, you agree to the updated Privacy Notice.

2. Access to Your Data

2.1. Legal Basis for Processing and Your GDPR Rights

2.1.1 Purpose and Legal Basis for Processing

PurposeLegal Basis (Art. 6 GDPR)
To create and manage your STRTALK accountArt. 6(1)(b) – Performance of contract
To enable core functions (messaging, calls, file sharing)Art. 6(1)(b) – Performance of contract
To maintain security and prevent abuseArt. 6(1)(f) – Legitimate interest
To transmit encrypted content and metadataArt. 6(1)(b) – Performance of contract
To provide customer supportArt. 6(1)(b)/(f) – Contract/performance & legitimate interest
To comply with legal obligationsArt. 6(1)(c) – Legal obligation
To send service-related noticesArt. 6(1)(c)/(f) – Legal obligation & legitimate interest
To analyze usage (anonymized)Art. 6(1)(f) – Legitimate interest
To manage enterprise relationshipsArt. 6(1)(f) – Legitimate interest
To sync contacts with consentArt. 6(1)(a) – Consent

2.1.2 Data Ownership

All messages, calls, and files are end-to-end encrypted and stored locally. STRTALK does not store or back up content, so data loss on uninstall cannot be recovered by us. Each device maintains its own data copy.

2.1.3. Your Rights

You have the following GDPR rights:

2.2. Information We Collect and Why

2.2.1 Information You Provide

We collect minimal registration information:

Optional contact discovery uses hashed address book data with your consent to identify STRTALK users.

2.2.2 Information Collected Automatically

STRTALK Calls: we process IP addresses, usernames, timestamps, and call type metadata, all E2EE.

2.4. Compliance with Legal Requests

STRTALK will notify users of legal data requests when permitted and challenges overly broad requests. Due to E2EE and no server-side key storage, we can only share metadata such as account info and timestamps, but not message content.

3. Information We May Share

We work with third parties (e.g., SMS verification providers). They are bound by their own privacy policies. Embeds like YouTube or Giphy follow their own terms when used in STRTALK.

4. Storage Period

We retain personal data only as long as necessary for processing purposes. Once the purpose ends, data is deleted unless legal retention obligations apply. Data under consent is deleted upon withdrawal.

5. Making a Complaint

For privacy complaints, email [email protected]. You may also contact your supervisory authority.

7. Third-Party Payment Services (CCOIN)

7.1. Payment Information

STRTALK does not process payments; CCOIN handles payment data under its own policies.

7.2. Shipping and Billing Information

Shipping/billing info for CCOIN transactions is shared only with merchants. STRTALK neither accesses nor stores it.

7.3. Clearing Payment Information

You can remove saved payment/shipping details in CCOIN settings; CCOIN will delete tokens and card data where possible.

7.4. Payment Disputes

STRTALK does not mediate payment disputes—contact merchants, payment providers, or banks directly.