Privacy Policy

Last updated: July 2026

This Privacy Policy explains how PROWERK s.r.o. (“Rakkan”, “we”, “us”), the operator of the Rakkan chat-translation service, collects and uses your personal data. We are the data controller. (We are migrating our operating entity to an Estonian private company; this page will be updated when that completes.)

The short version

Rakkan is a chat app that translates your messages with the context of your relationship. An AI reads your messages in order to translate them – so Rakkan is not end-to-end encrypted, and we say so plainly.
Your messages travel over encrypted connections and are stored encrypted at rest.
We do not sell your data and we do not use your messages to train AI models.
You can export or permanently delete all your data at any time from the app.
Rakkan is for adults (18+).

1. What we collect

Account & profile: email, password (stored only as a salted hash), display name, optional nickname, gender, age, native language, an optional avatar, optional bio and location, and your device’s time zone (so your partner can see your local time). Every account also gets a unique public @handle, auto-generated from the name part of your email (you can change it anytime); people can look you up only by your exact @handle or exact email, never by browsing or name search. If you sign in with Google or Apple, we receive the email and name from that account instead of a password (with Apple you can hide your real email behind Apple’s private relay).
Messages & media: the text you send and its translations, optional photos, videos and voice messages, and a short rolling history used to keep translations consistent. Voice messages are transcribed to text to be translated.
Conversation context & memory: the relationship type, tone, glossary, and facts (e.g. a birthday) the app extracts to improve translation – which you confirm or dismiss. Memory can include details you share about people you mention (e.g. a sister’s name); these stay inside that conversation and are deleted with it. The extractor is instructed to never store special-category data – health or medical conditions, religion, sexual orientation or sex life, political views, ethnicity, or criminal matters – about you or anyone you mention, and you can delete any saved fact at any time.
Calls: video and voice calls are peer-to-peer – the audio/video streams flow directly between you two and are never recorded or stored by us. If live captions are on, speech is transcribed and translated in real time by Microsoft Azure Speech and the caption text is shown, not kept. If you BOTH enable the optional “remember things from our calls” setting, final caption lines are processed to extract memory facts like in chat.
Presence & notifications: online/away status and last-seen time (shown to your chat partners), and – if you enable notifications – a push subscription for your browser or device (delivered via your platform’s push service: Google Firebase Cloud Messaging on Android, Apple Push Notification service on iOS, or your browser’s push service on the web).
Usage & technical data: basic logs needed to run and secure the service (e.g. timestamps, error logs, IP address at the network level), and how an account was referred (invite or referral code).
Payment data: if you subscribe on the web, payments are handled by Stripe; in the iOS app, subscriptions are purchased through Apple. We never see or store your card number; we store only your subscription status and a customer/transaction reference from the processor.

2. How AI processes your messages

To deliver contextual translation, your message and recent conversation context are sent to our AI provider (Microsoft Azure OpenAI) which returns the translation and a literal “back-translation”. Voice messages, spoken-message playback and live call captions additionally use Microsoft Azure Speech, and some messages may be translated by Microsoft Azure Translator. Intimate or explicit messages between consenting adults may instead be translated by an uncensored AI provider (xAI / Grok) so they can be rendered faithfully. This processing is necessary to provide the service you asked for. Because an AI must read the content to translate it, Rakkan cannot offer end-to-end encryption. Our providers act as processors under contract and do not use your content to train their models.

Rakkan translates faithfully by default (it is an 18+ service for consenting adults). Turning on Safe mode in Profile → Settings only changes how the AI is instructed to translate for you – the processing and storage rules above stay exactly the same.

Optional voice clone: a paid feature lets you record a short sample of your own voice so translated messages can be read aloud to your partner in a voice that resembles yours. The sample and the resulting voice model are created and hosted by ElevenLabs (our processor for this feature only), are used solely for your conversations, and are never created from anyone else’s voice. The feature is strictly consent-based and revocable: you can delete your voice clone at any time in the app, which removes the voice model, and it is also removed when you delete your account.

3. Legal bases (GDPR)

We process your data to perform our contract with you (providing the chat and translation), on the basis of your consent (e.g. optional profile details, marketing if any), and our legitimate interests (keeping the service secure and working). You can withdraw consent at any time.

4. Who we share data with

We use a small number of trusted processors strictly to run Rakkan: Microsoft Azure (hosting, database, file storage, OpenAI translation, Speech, Translator), xAI (fallback translation for faithful mode, as described above), ElevenLabs (the optional voice-clone feature only), Stripe (web payments), Apple (iOS in-app purchases, Sign in with Apple, iOS push delivery), Google (optional Google Sign-In, reCAPTCHA on the sign-in screen to block bots, and Firebase Cloud Messaging for Android push delivery), Brevo (verification and service emails), GIPHY (GIF/sticker search – only your search term is sent, never your messages), and Netlify (web hosting and DNS). We do not sell your personal data or share it for advertising.

A few features make your browser or our servers contact other services: call connections may be relayed through a TURN relay server (Cloudflare) when a direct connection isn’t possible (the relay carries the encrypted stream and sees your IP address, never the content); when you send a link to YouTube, Instagram, TikTok or Facebook we fetch its public title/thumbnail to show a preview (those platforms see the request); and the app loads fonts, icons and animated emoji from Google and jsDelivr content-delivery networks (they see your IP address, as with any website asset).

5. International transfers

Our infrastructure is hosted in the EU (Azure, France Central). To keep live call captions fast, caption speech recognition may run in the Microsoft Azure region nearest to you (for example Singapore for users in Asia) under the same Microsoft safeguards. Some processors (e.g. Stripe, Apple, GIPHY, Google, xAI, ElevenLabs) may process data outside the EEA under appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

6. How long we keep it

We keep your account and messages for as long as your account is active. When you delete a message for everyone, a conversation, or your whole account, the content – profile, conversations, messages, connections, memory facts and sign-in tokens – is deleted from our database, and the access links to any photos, videos and voice notes are destroyed at the same time, making them unreachable. The underlying encrypted media files are then purged from storage as part of cleanup. Backups and legally required records may persist for a limited period.

7. Security

Data is encrypted in transit (TLS) and at rest (database and storage encryption). Passwords are hashed with bcrypt. Access is restricted. No method is perfectly secure, and – to repeat – Rakkan is not end-to-end encrypted.

8. Your rights

Under the GDPR you may access, correct, export, or delete your data, object to or restrict processing, and withdraw consent. You can export and permanently delete your data yourself from Profile → Account in the app. You also have the right to complain to your local data protection authority (in Slovakia, the Úrad na ochranu osobných údajov).

9. Children

Rakkan is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18; if we learn we have, we will delete it.

10. Changes

We may update this policy and will revise the date above. Material changes will be communicated in the app.

11. Contact

Privacy questions and data requests (access, export, deletion): privacy@rakkan.app. For anything else, support@rakkan.app or the contact form in the app.