Privacy Policy

Last updated: October 2026

This Privacy Policy explains how PROWERK s.r.o. (“Rakkan”, “we”, “us”), the operator of the Rakkan chat-translation service, collects and uses your personal data. We are the data controller.

The short version

Rakkan is a chat app that translates your messages with the context of your relationship. An AI reads your messages in order to translate them – so Rakkan is not end-to-end encrypted, and we say so plainly.
Your messages travel over encrypted connections and are stored encrypted at rest, in the EU. While a message is being translated, Microsoft’s AI may process it outside the EU, under Microsoft’s data protection terms.
Couples write about their love life. We treat that as the most sensitive kind of data: it is processed only to translate your messages, and only with your explicit consent.
Your photos and videos are stored encrypted in the EU, are visible only in the chat you sent them to, and are never sent to an AI.
Video effects in calls find your face only on your phone. That face data is never saved, never sent to us and never shared.
We do not sell your data and we do not use your messages to train AI models.
You can export or permanently delete all your data at any time from the app.
Rakkan is for adults (18+).

1. What we collect

Account & profile: email, password (stored only as a salted hash), display name, optional nickname, gender, date of birth, age, native language, an optional avatar, optional bio and location, and your device’s time zone (so your partner can see your local time). Every account also gets a unique public @handle, auto-generated from the name part of your email (you can change it anytime); people can look you up only by your exact @handle or exact email, never by browsing or name search. If you sign in with Google or Apple, we receive the email and name from that account instead of a password (with Apple you can hide your real email behind Apple’s private relay).
Messages & media: the text you send and its translations, optional photos, videos and voice messages, and a short rolling history used to keep translations consistent. Voice messages, and the speech in video messages, are transcribed to text to be translated. Photos and the picture in videos are never sent to an AI service: they are stored encrypted and shown only to the people in that chat.
Conversation context & memory: the relationship type, tone, glossary, and facts (e.g. a birthday) the app extracts to improve translation – which you confirm or dismiss. Memory can include details you share about people you mention (e.g. a sister’s name); these stay inside that conversation and are deleted with it. The extractor is instructed to never store special-category data – health or medical conditions, religion, sexual orientation or sex life, political views, ethnicity, or criminal matters – about you or anyone you mention, and you can delete any saved fact at any time.
Calls: video and voice calls are peer-to-peer – the audio/video streams flow directly between you two and are never recorded or stored by us. If live captions are on, speech is transcribed and translated in real time by Microsoft Azure Speech and the caption text is shown, not kept. If you BOTH enable the optional “remember things from our calls” setting, final caption lines are processed to extract memory facts like in chat.
Face data (video effects): when you pick a video effect in a call (stickers, glasses, hats, masks), the app finds your face in your own camera picture so it can place the effect on it. On iPhone the 3D effects use Apple’s ARKit face tracking, which uses the TrueDepth camera on iPhones that have one; the other effects use face detection built into your phone or into the app. It runs only on your own phone and only while an effect is on. The face data (where your face is, which way it turns and its shape) is used for nothing but drawing the effect. It is held only in your phone’s memory: most of it is discarded as soon as each video frame is drawn, and the few numbers kept to line the effect up with your face are discarded when the call ends. It is never saved, never sent to us or anyone else, and never used to identify you, for advertising or for analytics. Your partner receives only the video picture with the effect drawn in, like any other video call picture. You can turn 3D effects off in Settings, Video effects & styles.
Presence & notifications: online/away status and last-seen time (shown to your chat partners), and – if you enable notifications – a push subscription for your browser or device (delivered via your platform’s push service: Google Firebase Cloud Messaging on Android, Apple Push Notification service on iOS, or your browser’s push service on the web).
Usage & technical data: basic logs needed to run and secure the service (e.g. timestamps, error logs, IP address at the network level), and how an account was referred (invite, referral code, or the name of the ad campaign that brought you to Rakkan).
Date of birth: we ask for your date of birth when you create an account (existing accounts are asked once inside the app). We use it for two things only: to verify that you are 18 or over, since Rakkan is an adults-only service, and to help the translator choose the right register for you, because people speak differently with someone younger and someone older. It is never shown to other users. We keep it for as long as your account exists and delete it with your account.
Payment data: if you subscribe on the web, payments are handled by Stripe; in the iOS app, subscriptions are purchased through Apple, and in the Android app through Google Play. We never see or store your card number; we store only your subscription status and a customer/transaction reference from the processor.

2. How AI processes your messages

To deliver contextual translation, your message and recent conversation context are sent to our AI provider (Microsoft Azure OpenAI) which returns the translation and a literal “back-translation”. Voice messages, spoken-message playback and live call captions additionally use Microsoft Azure Speech, and some messages may be translated by Microsoft Azure Translator. Intimate or explicit messages between consenting adults may instead be translated by an uncensored AI provider (xAI / Grok) so they can be rendered faithfully. This processing is necessary to provide the service you asked for. Because an AI must read the content to translate it, Rakkan cannot offer end-to-end encryption. Our providers act as processors under contract and do not use your content to train their models.

Rakkan translates faithfully by default (it is an 18+ service for consenting adults). Turning on Safe mode in Profile → Settings only changes how the AI is instructed to translate for you – the processing and storage rules above stay exactly the same.

Where the AI runs: our Microsoft Azure OpenAI resource and everything we store are in the EU (France). To keep translation fast and available, Microsoft may carry out the translation of a message in one of its data centres outside the EU; the message is processed there for that moment and not stored, under Microsoft’s data protection terms and Standard Contractual Clauses. Microsoft screens every request automatically for abuse of its service. A request that this screening flags may be kept by Microsoft for a limited time and reviewed by authorised Microsoft staff located in the EU, only to investigate that abuse. xAI, which is used only for explicit messages when Safe mode is off, is based in the United States: it receives those messages under Standard Contractual Clauses and may keep them for a limited time for safety and abuse monitoring under its own terms.

Intimate messages: couples write about their love life and sex life. Under the GDPR, content like that is special-category data (Article 9). We process it for one purpose only, to translate and deliver the messages you send, and only with your explicit consent, which you give in the app before your first message. We never use it to profile you, to show you ads or for anything else, and the memory feature is instructed never to store it. Translation is how Rakkan works, so if you withdraw that consent we can no longer translate your messages; you can delete your account and everything in it at any time from Profile → Account.

Optional voice clone: a paid feature lets you record a short sample of your own voice so translated messages can be read aloud to your partner in a voice that resembles yours. The sample and the resulting voice model are created and hosted by ElevenLabs (our processor for this feature only), are used solely for your conversations, and are never created from anyone else’s voice. The feature is strictly consent-based and revocable: you can delete your voice clone at any time in the app, which removes the voice model, and it is also removed when you delete your account.

3. Legal bases (GDPR)

We process your data to perform our contract with you (providing the chat and translation), on the basis of your consent (e.g. optional profile details, marketing if any), and our legitimate interests (keeping the service secure and working). For content that reveals your sex life or any other special category of data, our basis is your explicit consent under GDPR Article 9(2)(a), given in the app before first use. You can withdraw consent at any time.

4. Who we share data with

We use a small number of trusted processors strictly to run Rakkan: Microsoft Azure (hosting, database, file storage, OpenAI translation, Speech, Translator), xAI (fallback translation for faithful mode, as described above), ElevenLabs (the optional voice-clone feature only), Stripe (web payments), Apple (iOS in-app purchases, Sign in with Apple, iOS push delivery), Google (optional Google Sign-In, reCAPTCHA on the sign-in screen to block bots, and Firebase Cloud Messaging for Android push delivery), Brevo (verification and service emails), GIPHY (GIF/sticker search – only your search term is sent, never your messages), and Netlify (web hosting and DNS). We do not sell your personal data or share it for advertising.

Face data from video effects (section 1) is not shared with anyone, including the processors listed here: it never leaves your phone.

A few features make your browser or our servers contact other services: call connections may be relayed through a TURN relay server (Cloudflare) when a direct connection isn’t possible (the relay carries the encrypted stream and sees your IP address, never the content); when you send a link to YouTube, Instagram, TikTok or Facebook we fetch its public title/thumbnail to show a preview (those platforms see the request); and the app loads fonts, icons and animated emoji from Google and jsDelivr content-delivery networks (they see your IP address, as with any website asset).

5. International transfers

Our servers, database and file storage are in the EU (Microsoft Azure, France Central). While translating a message, Microsoft’s AI may process it in a data centre outside the EU, as described in section 2. To keep live call captions fast, caption speech recognition may run in the Microsoft Azure region nearest to you (for example Singapore for users in Asia) under the same Microsoft safeguards. xAI and ElevenLabs are based in the United States, and Stripe, Apple, GIPHY and Google may also process data outside the EEA; each does so under appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

6. Photos, videos and unwanted content

People share private photos and videos with their partner, sometimes intimate ones. On Rakkan they are stored encrypted in the EU, shown only in the chat you sent them to, and never sent to an AI, used for advertising or shown to anyone else. You can delete a photo or video for everyone, send a photo that can be opened only once, and report or block anyone at any time. We do not read your chats. We look at content only when someone in the chat reports it: the reported person’s recent messages in that chat are then shared with our team, and we decide based on what they show. We remove content that was shared without consent or that involves anyone under 18, close the account that shared it, and report it to the authorities where the law requires.

7. How long we keep it

We keep your account and messages for as long as your account is active. When you delete a message for everyone, a conversation, or your whole account, the content – profile, conversations, messages, connections, memory facts and sign-in tokens – is deleted from our database, and the access links to any photos, videos and voice notes are destroyed at the same time, making them unreachable. The underlying encrypted media files are then purged from storage as part of cleanup. Backups and legally required records may persist for a limited period.

Face data from video effects is not kept: it stays in your phone’s memory only, for the length of the call at most, and none of it reaches our servers.

8. Security

Data is encrypted in transit (TLS) and at rest (database and storage encryption). Passwords are hashed with bcrypt. Access is restricted. No method is perfectly secure, and – to repeat – Rakkan is not end-to-end encrypted.

9. Your rights

Under the GDPR you may access, correct, export, or delete your data, object to or restrict processing, and withdraw consent. You can export and permanently delete your data yourself from Profile → Account in the app. You also have the right to complain to your local data protection authority (in Slovakia, the Úrad na ochranu osobných údajov).

10. Children

Rakkan is intended for users aged 18 and over. We ask for your date of birth when you register and refuse accounts below 18. We do not knowingly collect data from anyone under 18; if we learn we have, we will delete it.

11. Changes

We may update this policy and will revise the date above. Material changes will be communicated in the app.

12. Contact

Privacy questions and data requests (access, export, deletion): privacy@rakkan.app. For anything else, support@rakkan.app or the contact form in the app.