The short version
- Your voice messages are end-to-end encrypted. We cannot listen to them.
- Encrypted messages are deleted once everyone has played them — after 10 minutes at the latest, unless a group uses a longer setting (at most 24 hours).
- We store only what Wristalk needs to work: your Apple user ID, a display name, your devices' public keys, who is in your family, contacts and groups, and for 30 days who talked with whom and when.
- No ads, no tracking, no analytics, no selling of data.
1. Who is responsible
Wristalk is provided by CB Group LLC, 1500 N Grant St, Ste #10470, Denver, CO 80203, USA (“we”, “us”). We are the controller of the personal data described here. Contact: hello@wristalk.app.
2. Data we store and why
- Account identifier. The user identifier from Sign in with Apple and an internal user ID. We ask Apple for your name only — not for your email address.
- Display name. Your given name from Sign in with Apple, or a name you type. It is shown to your contacts.
- Device data. An app-generated device ID, your devices' public encryption keys, and push notification tokens so we can notify your watch or iPhone. We don't use advertising identifiers.
- Family, contact and group structure. Your family, contacts and groups (names and members), invites, guardian relationships, parental-control settings, and approval requests and decisions.
- Talk metadata. For each message: sender, conversation, start and end time, and whether each recipient received or played it. We need this to deliver messages, tell senders when someone missed them, and handle abuse. It is deleted after 30 days.
- Encrypted voice messages. Stored only as encrypted data we cannot read, until every recipient has played the message — after 10 minutes at the latest, or after the conversation's longer setting (1 hour or 24 hours) if its creator chose one.
- Reports. If you report someone, we keep the report and the information needed to review it for 90 days.
- Subscription status. When you buy or restore the Family Pass, the app sends us Apple's signed transaction information (product, dates, whether it is a trial) so we can unlock Wristalk for your family. We never receive your payment details.
- Technical data. Your IP address is processed when your device connects, to deliver the service and limit abuse (rate limiting). Rate-limit records are deleted within 2 days. Our server logs contain no voice content.
3. What we cannot see
Voice is encrypted on your device before it is sent, with keys that exist only on the devices of the people in the conversation. Our server passes on and briefly stores this encrypted data, but cannot decrypt it — so we cannot listen to, transcribe or analyse what you say.
To deliver messages, our server does see who is in which family, contact list and group, who talks to whom, when and for how long, and the size of the data. Push notifications contain the sender's display name and a conversation reference, never voice content.
4. No tracking, ads or analytics
Wristalk contains no advertising, no analytics and no third-party tracking SDKs. We do not sell or share your data for advertising, and we do not build profiles about you. The app keeps a technical log on your device (without voice or message content); it only leaves your device if you choose to share it, for example with us for support.
5. Service providers
- Cloudflare, Inc. hosts our server (message relay and database) on its global network. Data is processed in the data centres of that network, which may be outside your country, including in the United States.
- Apple provides Sign in with Apple, delivers push notifications (Apple Push Notification service), and processes all payments for the Family Pass through the App Store. Apple's privacy policy applies to that processing.
We share personal data with others only if the law requires it.
6. How long we keep data
- Encrypted voice messages: until played by everyone, at most 10 minutes (or the conversation's setting, at most 24 hours).
- Talk metadata: 30 days.
- Reports: 90 days.
- Invite codes: deleted 7 days after they expire or are used.
- Account, device, family, contact and group data: as long as your account exists. When you delete your account, your profile, memberships, contacts and devices are removed right away and the remaining records are erased within 30 days.
7. Children
Children use Wristalk under the control of a parent or guardian. A guardian brings a child into the family, and the guardian decides whom the child may talk to: new contacts and groups need the guardian's approval unless the guardian allows otherwise. Guardians can also set allowed hours and battery settings.
We do not collect more data from children than from adults, we show them no ads, and nothing a child says can be heard by us. A guardian can delete all of a child's data at any time in the iPhone app (Kids → the child → Delete all of the child's data), or ask us by email.
8. Legal bases (EEA, UK and Switzerland)
We process your data to provide Wristalk under our contract with you (Art. 6(1)(b) GDPR), to keep Wristalk safe and handle abuse reports (legitimate interests, Art. 6(1)(f) GDPR), and to meet legal obligations (Art. 6(1)(c) GDPR). For children below the age of digital consent in their country, Wristalk is used with the consent and under the control of their parent or guardian.
9. International transfers
We are based in the United States, and our providers process data worldwide. Where data from the EEA, UK or Switzerland is transferred to other countries, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.
10. Security
Voice is end-to-end encrypted. Each device's keys are created and kept in its secure hardware, and all connections to our server are encrypted in transit. Access to our systems is restricted.
11. Your rights
Depending on where you live, you have the right to access your data, have it corrected or deleted, restrict or object to its processing, and receive it in a portable format. You can delete your account and data yourself at any time: on iPhone under Settings → Privacy → Delete my account…, on the watch under Settings → Privacy → Delete my data. For any other request, email us at hello@wristalk.app. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live.
12. Changes
If we change this policy, we will publish the new version here with a new effective date and inform you in a suitable way about significant changes.
13. Contact
CB Group LLC, 1500 N Grant St, Ste #10470, Denver, CO 80203, USA
Email: hello@wristalk.app