SpeaklyLegal
Privacy Policy
Last updated: 7 November 2026
This notice is published under the Digital Personal Data Protection Act, 2023 (India), Section 43A of the Information Technology Act, 2000 and the SPDI Rules, 2011, the EU and UK General Data Protection Regulation (GDPR), and US state privacy laws including the California Consumer Privacy Act as amended by the CPRA.
1. Who we are
Speakly (https://speakly.one) is operated by World of Willpower Private Limited, CIN U86900PN2026PTC251855, A1/202, Samruddhi CHS, Kumbhare Park, Kothrud, Pune, Maharashtra, India 411038. We are the Data Fiduciary (DPDP) and the data controller (GDPR) for the personal data described here. Contact: care@worldofwillpower.com · +91 8808748088.
2. What we collect and why
- Account data — name, email, password (stored only as a secure hash), date of birth and preferred language. Purpose: create and secure your account, apply age rules, and translate messages into your language. Legal basis: contract and your consent.
- Date of birth — kept in a private record only you can read. Used to check minimum age and require guardian consent for under-18s. It never turns GenZA style on for you — that is a choice you make yourself in Settings. Never shown to other people.
- Messages, voice notes, photos, videos, statuses, polls and glossary entries — stored so we can deliver them to the people you choose. Purpose: provide the chat service. Legal basis: contract.
- Profile — photo, “About” line and optional intro video, visible to people you chat with.
- Activity signals — delivered/read receipts, typing, last seen (you can switch last seen off in Settings).
- Technical data — sign-in session tokens and basic security logs. We do not use advertising trackers or sell analytics.
3. Translation, transcription and AI processing
To translate text, transcribe voice notes, match a reading voice and speak translations aloud, the content of the relevant message is sent to AI models (operated by providers such as Google and OpenAI) through our AI gateway. The content is processed only to return the result to you; we do not permit it to be used to advertise to you. Your original message is never changed — every translation is stored separately and you can always see the original. Machine translation can be wrong; do not rely on it for legal, medical or emergency decisions.
3a. Direct voice and video calls
Untranslated one-to-one calls send encrypted audio and video directly between the two browsers. Speakly does not record, transcribe or translate calls. The other participant and Google’s public STUN connection-discovery service may see your network address. Our backend handles private connection descriptions and call setup metadata, not the call media. Descriptions are cleared on normal hang-up; expired records are removed when calling is next checked or started. Short-lived metadata may also appear in infrastructure logs or backups under their retention rules. Both people must keep Speakly open. Without a relay, some networks cannot connect; internet data charges still apply.
4. Who we share data with
- People in your chats and groups — they receive the messages you send them.
- Service providers (processors) who host our database, storage and sign-in, and who run AI translation and speech models, under contracts limiting use to providing the service.
- Google, only if you choose “Continue with Google” to sign in.
- Authorities, only where Indian or other applicable law requires it (for example, a lawful request under the IT Rules, 2021).
We do not sell or “share” your personal information as those terms are defined under the CCPA/CPRA, and we do not use it for targeted advertising.
5. International transfers
Our hosting and AI providers may process data outside India and outside your country, including in the United States and the EU. Transfers from the EU/UK rely on the European Commission's Standard Contractual Clauses or other lawful mechanisms. Transfers from India follow Section 16 of the DPDP Act and any restrictions notified by the Government.
6. How long we keep it
- Statuses and their photos/videos: deleted automatically 24 hours after posting.
- Messages and media: kept until the sender deletes them for everyone. “Delete for me” and “Clear chat” hide them only for you.
- When you delete your account we erase your account, email, name, About, date of birth, profile photo, intro video, statuses (and their photos/videos and view records), your status replies, reactions and online/last-seen information, and remove you from all groups.
- So that other people's conversations stay complete, text messages and voice notes you already sent — with their transcripts and translations — polls, poll votes, glossary entries and “What did they mean?” exchanges remain visible to the other participants, shown as from “Deleted user” and no longer linked to your name, email or photo.
- Reports you send about another person contain only the reason, your optional note and the messages you chose to include. Only authorised Speakly moderators can read them. A daily cleanup deletes each report 180 days after it was sent. Reports stay until then even if you or the reported person deletes their account.
- Blocks you make, your read-receipt setting and your private read markers are deleted with your account.
- We may keep limited records where the law requires it (for example, 180 days of security logs under CERT-In Directions).
Draft wording describing how the app currently works — pending review by our lawyer.
7. Your rights
Depending on where you live, you have the right to:
- access and get a copy of your personal data (DPDP s.11, GDPR art. 15 and 20, CCPA “right to know”);
- correct or update it (DPDP s.12, GDPR art. 16) — most details can be changed directly in Settings and Profile;
- erase it — use Settings → Delete my account, or write to us (DPDP s.12, GDPR art. 17, CCPA “right to delete”);
- withdraw consent at any time, as easily as you gave it (DPDP s.6(4), GDPR art. 7(3));
- object to or restrict processing (GDPR art. 18 and 21);
- nominate a person to exercise your rights if you die or become incapacitated (DPDP s.14);
- not be discriminated against for exercising any of these rights (CCPA).
Write to care@worldofwillpower.com or the Grievance Officer below. We answer within 30 days (one month under GDPR) and may ask you to confirm your identity. You can also complain to the Data Protection Board of India, your EU/UK supervisory authority, or your US state Attorney General.
8. Children
Speakly is not for children under 13. Users aged 13 to 17 may sign up only with the verifiable consent of a parent or lawful guardian (DPDP s.9). We do not track, behaviourally monitor or target advertising at anyone under 18. If you believe a child has signed up without consent, contact us and we will delete the account.
9. Security and breaches
Data is encrypted in transit, access is limited by strict per-chat permissions so only members of a chat can read it, and media is stored privately. We will notify affected users and the Data Protection Board of India of a personal data breach as required by the DPDP Rules, report incidents to CERT-In within 6 hours, and notify EU authorities within 72 hours where GDPR applies.
10. Grievance Officer and contact
Vrushali Thorat, Attorney and Solicitor, Grievance Officer, A1/202, Samruddhi CHS, Kumbhare Park, Kothrud, Pune, Maharashtra, India 411038. Email: vrushali@winlegaladvisors.com · Phone/WhatsApp: +91 8808748088. See the Grievance Officer page for timelines.
11. Changes
We will show a notice in the app before any material change to this policy takes effect.