PRIVACY POLICY
(Personal Data Processing Policy)
«Tap & Talk» voice translation service
Version dated 25 August 2026
This English text is a translation provided for convenience only. The legally binding version of this document is the Russian original — Политика конфиденциальности. In the event of any discrepancy between the two versions, the Russian text prevails.
1. General provisions
1.1. This Privacy Policy (hereinafter — the “Policy”) sets out the procedure for the processing and protection of the personal data of users of the “Tap & Talk” mobile application and of the website https://tapntalk.world/ (hereinafter jointly — the “Service”).
1.2. The Policy has been developed in accordance with Federal Law No. 152-FZ of 27 July 2006 “On Personal Data” (hereinafter — “FZ-152”), Federal Law No. 149-FZ of 27 July 2006 “On Information, Information Technologies and Information Protection”, and other applicable regulations of the Russian Federation.
1.3. Personal data operator (hereinafter — the “Operator”):
Sergei Vladimirovich Shestopalov, self-employed (professional income tax payer)
INN (taxpayer identification number): 614706689424
Phone: +7 903 656-08-07
E-mail: support@tapntalk.world
1.4. By using the Service (registering an account, taking out a subscription, using the translation features), the User expresses agreement with this Policy. A separate consent to the processing of personal data is executed in accordance with Article 9 of FZ-152 upon registration of the account.
1.5. If the User does not agree with the terms of this Policy, the User must stop using the Service and is entitled to request deletion of the account (Section 9).
1.6. This Policy is publicly available at: https://tapntalk.world/legal/en/privacy-policy.html (Russian original: https://tapntalk.world/legal/privacy-policy.html) and in the Application.
2. Terms and definitions
The terms are used with the meanings established by FZ-152:
Personal data — any information relating to a directly or indirectly identified or identifiable natural person (a personal data subject).
Processing of personal data — any action (operation) or set of actions performed on personal data: collection, recording, systematization, accumulation, storage, clarification, extraction, use, transfer, anonymization, blocking, deletion, destruction.
User — a natural person using the Service.
3. Categories of personal data processed
3.1. Data provided by the User upon registration and use:
- e-mail address — the mandatory account identifier;
- name (display name);
- country of residence (selected by the User);
- native language (selected by the User);
- password (stored solely in the form of a cryptographic hash; the Operator has no access to the password in clear text).
3.2. Data obtained when signing in via third-party authentication providers (at the User’s option): when signing in via Google or Yandex, the Operator receives the User’s e-mail address and name from the respective provider. Data is transferred via the OAuth protocol; the Operator does not receive the User’s password for the provider’s account.
3.3. Payment data: payment is made through the payment agent Robokassa LLC (ООО «Робокасса»). Payment details (card number, expiry date, CVV, etc.) are entered on the secure page of the payment agent and are not transferred to, stored by, or processed by the Operator. From the payment agent, the Operator receives only information about the fact, amount and status of the payment and the order number, as required to perform the contract and to issue the fiscal receipt.
3.4. Voice data: audio recordings of the User’s speech are transmitted from the User’s device to the Operator’s server in real time solely for the purpose of performing voice translation. Audio data is processed on the fly and is not used by the Operator for any other purpose. The translation history (texts and audio) is stored locally on the User’s device and is not transferred to the Operator.
3.5. Technical data: IP address, server technical logs (date, time and parameters of requests) — processed for the purposes of ensuring the operability and security of the Service and of recording the User’s consents.
3.6. The Operator does not carry out: collection of phone number data, precise geolocation data, or contact lists; use of web analytics systems and advertising identifiers (Yandex.Metrica, Google Analytics and similar tools are absent from the Service); collection of special categories of personal data (racial, political, religious, etc.) or biometric personal data (voice data is used solely for translation and is not used to establish identity).
4. Purposes of personal data processing
4.1. Personal data is processed for the following purposes:
- creation and administration of the User’s account;
- authentication of the User and provision of access to the Service;
- provision of the voice translation service (performance of the contract concluded by acceptance of the Public Offer);
- accounting for the subscription, Credits and payments, and management of auto-renewal;
- acceptance of payments through the payment agent and issuance of fiscal receipts in accordance with the laws of the Russian Federation;
- sending service messages to the User (e-mail confirmation code, password recovery, notifications about subscription status and changes to the terms, fiscal receipts);
- handling of the User’s support enquiries, including refund requests;
- compliance with the requirements of the laws of the Russian Federation.
4.2. Personal data is not used for sending advertising materials without the User’s separate consent.
5. Legal grounds for processing
5.1. Processing is carried out on the following grounds (Article 6 of FZ-152):
- consent of the personal data subject (registration, processing of voice data for translation);
- performance of a contract to which the personal data subject is a party (the Public Offer);
- fulfilment of obligations imposed on the Operator by the laws of the Russian Federation (including Federal Law No. 422-FZ of 27 November 2018 as regards the issuance of fiscal receipts).
6. Transfer of personal data to third parties (processors)
6.1. For the operation of the Service, the Operator entrusts the processing of personal data to the following parties, which act on the basis of contracts and ensure the confidentiality and security of the data:
| Processor | Purpose of the transfer | Data transferred |
|---|---|---|
| Robokassa LLC (ООО «Робокасса») | Acceptance of payments, recurring charges, issuance of fiscal receipts (the “Robocheki” service) | e-mail (for the receipt), payment amount and description, order identifier |
| Google / Yandex (OAuth providers) | Authentication, at the User’s option | authentication identifier (exchanged via the OAuth protocol) |
6.2. Data is not transferred to any other third parties, except in the cases provided for by the laws of the Russian Federation (upon a lawful request from authorized bodies).
6.3. Cross-border data transfer. The servers of the Operator and of the processors listed in clause 6.1 are located within the territory of the Russian Federation. The recording and systematization of the personal data of citizens of the Russian Federation are carried out using databases located within the territory of the Russian Federation, in accordance with part 5 of Article 18 of FZ-152. Where the User signs in via Google, the authentication identifier may be transferred to the provider on the basis of the User’s own decision and consent.
7. Retention and processing periods
7.1. Personal data is processed for the term of the User’s account and thereafter for the periods necessary to fulfil the Operator’s obligations established by the laws of the Russian Federation (including statutory retention periods for payment and fiscal receipt records).
7.2. Server technical logs are stored for no longer than 12 (twelve) months.
7.3. Speech audio data is processed in real time for the purpose of performing the translation and is not accumulated by the Operator beyond the moment necessary to provide the service.
7.4. Once the purposes of processing have been achieved, or where the need for processing ceases, personal data shall be destroyed or anonymized within 30 (thirty) calendar days, unless otherwise required by the laws of the Russian Federation.
8. Personal data protection measures
8.1. The Operator takes the necessary and sufficient legal, organizational and technical measures to protect personal data against unlawful or accidental access, destruction, modification, blocking, copying and distribution, including:
- encryption of data transmission channels (TLS/HTTPS, secure WebSocket connections);
- storage of passwords solely in the form of a cryptographic hash;
- access control for the server infrastructure;
- use of the payment agent’s secure payment pages;
- recording of the fact that consents were given (date, time, document version).
9. Rights of the User (personal data subject)
9.1. In accordance with Article 14 of FZ-152, the User is entitled to:
- obtain information about the processing of their personal data: categories of data, purposes, legal grounds, periods, processors;
- demand the clarification, blocking or destruction of the data if the data is incomplete, outdated, inaccurate, unlawfully obtained, or not necessary for the stated purpose of processing;
- withdraw consent to the processing of personal data;
- demand deletion of the account and of the associated personal data;
- appeal against the acts or omissions of the Operator to Roskomnadzor — the Federal Service for Supervision of Communications, Information Technology and Mass Media (rsoc@rkn.gov.ru, https://rkn.gov.ru/) — or in court.
9.2. To exercise these rights, the User shall send a request to support@tapntalk.world from the e-mail address linked to the account. The Operator reviews the request within 10 (ten) business days from the date of receipt.
9.3. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal. Once the account has been deleted, use of the Service becomes impossible; any active subscription is thereby terminated, with access retained until the end of the paid period in accordance with the Public Offer, unless the deletion is connected with withdrawal from the contract.
10. Cookies and similar technologies
10.1. The “Tap & Talk” mobile application does not use cookies or web analytics systems. The website https://tapntalk.world/ may use technical cookies necessary for the correct operation of its pages. Technical cookies are not used for advertising or profiling.
11. Final provisions
11.1. The Operator may amend this Policy. The new version is published at https://tapntalk.world/legal/en/privacy-policy.html (Russian original: https://tapntalk.world/legal/privacy-policy.html) and takes effect upon publication, unless the new version provides otherwise. The Operator notifies Users of material changes in the Application or by e-mail.
11.2. The current version of the Policy is permanently publicly available.
11.3. For any questions regarding the processing of personal data, the User may contact: support@tapntalk.world.