Tolk Privacy Policy — Starmoon Apps

Who is responsible for your data

Tolk is provided by YILDIZ PARLAMASI GLOBAL DANIŞMANLIK ANONİM ŞİRKETİ ("we" below, publishing as Starmoon Apps). For the processing described here we are the data controller (the "data controller" under Türkiye's Personal Data Protection Law, KVKK). Contact: support@starmoonglobal.app.

This policy covers Tolk for iOS (including its keyboard and share extension), Tolk for Mac, the Tolk service, and the website starmoonglobal.app. It applies together with the terms of use.

What you say and what you write

This is the main thing Tolk handles: what you say (a recording, or text recognised on your device), the text you translate, and the messages and voice messages you receive in other languages.

When it leaves your device

Only at the moment you ask: when you tap the microphone, press a shortcut, or tap "translate" or "read aloud". Tolk does not listen in the background and never sends anything you type at other times anywhere.

Where it goes, and how

Content is processed by our AI service providers: two international AI companies headquartered in the United States, acting as our processors, which the app calls the "main engine" and the "backup engine". A request goes to one of the two; if that one cannot complete it, Tolk redoes it with the other.
For some languages, speech is first turned into text on your device and only the text is sent. On iOS this step happens on the device alone and nothing goes to Apple; on the Mac, when the Mac has no recognition model for the language, macOS speech recognition may send the audio to Apple (under Apple's privacy policy).
The request first reaches a relay we run on Cloudflare (the data centre nearest to you; when the provider refuses that location, our second copy in Frankfurt takes over). The relay attaches our own account credentials, forwards the request to the AI provider unchanged and returns the answer unchanged. It does not read, store or log content, and its logs contain none; it only reads the usage figures in the answer to count your allowance.

How the AI providers handle it

We use both providers' paid business interfaces. Under their respective terms, your content is not used to train or improve their models; it is retained only briefly for safety and abuse monitoring (one provider says "a limited period", the other at most 30 days) and then deleted; during that time it may be processed in countries where they have facilities.
Both process content as our processors, bound by written data processing agreements. Where a provider's interface offers a "do not store the conversation" option, Tolk selects it in every request.

How long we keep it

We do not keep it. We run no server that holds your content; this is what the sentence in the app's settings, that Tolk's servers do not store or view any of your content, refers to. What stays on your device (the voice-note audio files you generated, drafts on the compose page, your session history) is yours to manage: deleting the app deletes all of it, and on the Mac the files live in the Tolk folder under Application Support. Deleting your account does not delete these files.

Your account and usage: what we record on our servers

Using the Tolk service requires signing in to a Tolk account. To recognise your account, count the free trial and your allowance, prevent abuse and keep within the total budget, the relay records the following in a database. It holds no content, and no name or phone number.

What	Why	Where	How long
Account: a randomly generated account number, when it was created, your e-mail address	To recognise your account, let you sign in to the same account on several devices, and send you codes. The address is the one you entered to sign in with an e-mail code, or the one Apple or Google passed to us when you signed in with them; if you chose to hide your e-mail when signing in with Apple, we only receive Apple's relay address	A Cloudflare database located in Europe	Until you delete your account
Sign-in methods: which ones you used (Apple, Google, e-mail) and the user identifier Apple or Google gives you	To recognise you the next time you sign in; one e-mail address belongs to one account	Same	Until you delete your account
Usage: total requests, total characters, characters used from the trial, characters we added for you, whether suspended	To count the 7-day / 8,000-character trial and what you have left; to suspend on misuse	Same	Until you delete your account (what stays after deletion is in the next section)
Devices: a random number for each device you signed in on, whether it is an iPhone or a Mac, when it was last used, its total usage, when it was signed out	To let you sign out one device on its own; to count usage. The number is generated by us and has nothing to do with Apple's device identifiers	Same	Same
E-mail codes	Signing in by e-mail. Only keyed digests of the address and the code are stored; a code expires after 10 minutes and is void after 5 wrong attempts	Same	Until used or expired
One-time hand-over codes for the Mac's browser sign-in	To hand the sign-in you completed on the web page to Tolk on your Mac. Only a digest is stored; valid for 5 minutes, usable once	Same	5 minutes
Keyed digests of network addresses and e-mail addresses, counted per hour and per day	To limit how often someone can sign in or request codes. The digests are computed with a key only the relay knows and cannot be turned back into an address	Same	Used only for the limit at the time
Country code	To check whether the Tolk service is offered where you are (Cloudflare derives it from the network address)	Not stored; looked at while handling the request	Not stored
Whole-service totals: requests, characters and estimated cost per day and per month	The budget cap on free use	Same	Kept; contains nothing about any account or device

Test versions from before 12 October 2026 did not ask you to sign in and counted the trial per device: they recorded the "Devices" and "Usage" rows above, plus a keyed digest of the network address (at most 5 device credentials per address per day).

Cloudflare, as the infrastructure behind the relay and the website, processes connection details such as your network address to deliver and protect the service, and our sign-in code e-mails are sent through Cloudflare's e-mail service (from no-reply@mail.starmoonglobal.app); see Cloudflare's privacy policy.

Signing in and deleting your account

Signing in

You can sign in with Apple, Google or an e-mail code. With Apple or Google, that step happens on their pages; they tell us only your user identifier and e-mail address, and we discard the token they issue once we have verified it.
One e-mail address belongs to one account: if you sign in with Apple or Google and the address they verified already has an account, you enter that account.
The Mac app signs you in through the browser (the sign-in page on starmoonglobal.app); when you finish, the page hands a one-time code back to Tolk on your Mac, which exchanges it for your sign-in credential.
After you sign in, the app keeps on the device your sign-in credential (signed, valid for 180 days), your e-mail address and the characters you have left, to show them in the settings.

Deleting your account

You can delete your account at any time in the app under Settings › Account, in one step; it cannot be undone. Then:

Deleted at once: your e-mail address, your sign-in methods and your Apple / Google user identifiers; every device is signed out. Any remaining trial and added characters lapse.
What stays: the account's usage numbers (with no e-mail address or anything else that identifies you), so that the whole-service totals still add up; and a keyed digest of each of your sign-in methods (e-mail address, Apple user identifier, Google user identifier) together with the sign-up date and the trial characters used, solely so that the same person signing up again does not get a second free trial. The digests are computed with a key only the relay knows and cannot be turned back into your address or identifier; they are kept indefinitely.
On Apple's side: when you delete an account you used Sign in with Apple for on your iPhone, Apple asks you to confirm once more and we then ask Apple to revoke Tolk's Sign in with Apple authorisation; we keep no Apple tokens. Deleting on the Mac cannot do this; please remove Tolk yourself under System Settings › [your name] › Sign in with Apple (on the iPhone: Settings › [your name] › Sign in with Apple).
On Google's side: if you signed in with Google, you can remove Tolk on your Google Account's third-party connections page.

What stays on your device and is not sent to us

Settings: languages, voice, shortcuts, and so on.
The diagnostic log: which route each request took, how long it took, whether the main or the backup engine answered, what went wrong; never content. It stays on the device and is not uploaded; whether to send it to us when troubleshooting is your decision.
Voice-note files you generated, drafts on the compose page, and session history.

The system permissions Tolk asks for, and why

iOS

Microphone: to hear you when you tap the microphone or hold to speak.
Speech recognition: to turn speech into text on the device for some languages.
"Allow Full Access" for the keyboard: the Tolk keyboard has to send what you say and the text you translate to the AI service, and share settings with the main app; iOS requires Full Access for that. The keyboard sends only what you deliberately dictate or ask to translate. It does not record what you type with other keyboards and does not collect what you enter in other apps.
Paste from other apps: Tolk reads the clipboard only when you tap the translate key to translate what is on it; whether to allow it is your choice in iOS Settings.

Mac

Microphone: to hear you, and to hear the voice messages you play on your Mac.
Accessibility: to put text at your cursor and to read the text you select.
Speech recognition: used for some languages, when they are recognised on the Mac itself.

The website

starmoonglobal.app is hosted on Cloudflare. The site has no analytics, no ads and no tracking code, and we set no cookies; the language you pick is remembered only in your own browser's local storage. The fonts are served by us; the pages request nothing from any third party.

The sign-in page the Mac app uses (starmoonglobal.app/tolk/login/) keeps a random token in this browser tab's session storage, to hand the result back to Tolk on your Mac; it is cleared when you close the tab. Choosing Apple or Google takes you to their pages, where their own privacy policies apply.

The service providers we use

AI service providers: two international AI companies headquartered in the United States, which process your content as our processors under written data processing agreements (section 2). Their names are available on written request.
Cloudflare, Inc.: hosting of the relay and the website, DNS, the usage database, and sending the sign-in code e-mails (privacy policy).
Apple: distribution through the App Store and TestFlight; speech recognition on the device; verifying your identity when you choose to sign in with Apple (privacy policy).
Google: verifying your identity when you choose to sign in with Google; our support mailbox (support@starmoonglobal.app) is hosted on Google Workspace, so e-mails you send us are kept there (privacy policy).

We do not sell any of your data and do not give data to anyone for advertising.

Where data is processed

The relay runs in the Cloudflare data centre nearest to you, which may be anywhere in the world; the usage database is in Europe. The AI providers process content mainly in the United States and in other countries where they have facilities, under their data processing terms (including safeguards such as standard contractual clauses).

Your rights

Under Türkiye's KVKK, the GDPR in the EU and the UK, and the law where you live, you have the right to access, correct and delete data about you, to object to or restrict its processing, and to complain to a supervisory authority (in Türkiye the Personal Data Protection Authority; in the EU your local data protection authority).

The simplest way to delete your data is to delete your account in the app, in one step (see "Signing in and deleting your account"). For anything else, write to support@starmoonglobal.app, preferably from your account's e-mail address so we can confirm it is you.

Minors

Tolk is for people aged 18 and over. We do not knowingly collect anything from minors; if you believe a minor is using Tolk, please contact us.

Security

Every connection is encrypted with HTTPS; our credentials with the AI providers live only in Cloudflare's encrypted secret store, never in an app; sign-in credentials are signed and cannot be forged; codes are stored only as keyed digests. Because we keep no content, there is no content to leak.

Changes to this policy

We update this policy from time to time; the date of the last update is at the top. We announce significant changes in the app or on the website.

Contact

Any question about privacy: write to support@starmoonglobal.app.

The short version