Privacy

This notice covers the RealTalck consumer product: magic-link accounts, matchmaking, timed video calls, report-gated chat, and optional in-person meetup evidence. It is not legal advice. Signed-in members can start export or erasure requests from Profile → Privacy requests.

Controller

The controller for this product is HUMAN-CONFIRM. Replace that placeholder with the confirmed legal entity name.

What we process

Account email and authentication session (Supabase Auth).
Match profile fields you provide (display name, geography, category, optional bio and interests).
Queue, session, and report records needed to run matching, safety, and moderation.
Short in-call and DM message content when those features are unlocked by product rules.
Meetup evidence images you upload (private storage; operators review for attestation).
Standard hosting logs (IP, user agent) used to serve the app and limit abuse.
Page-use and performance measurements through Vercel. The app removes query strings, replaces call and conversation identifiers with route labels, and excludes account access, invitation, and admin routes before sending these measurements.
Daily connection-setup counts visible to operators. These counts contain no member identifiers, call content, network addresses, or relay credentials. Your session participation record stores only whether each setup stage has already been counted.

Why we process it

To authenticate you, run geography-aware matchmaking, deliver timed peer video, enforce safety and report workflows, and support operator moderation. Live media uses WebRTC; relay credentials (TURN) are minted server-side when configured.

Who else sees data

Peers see limited match signals required for a session. Moderators and owners see reports, evidence, and operational queues. Infrastructure processors include Supabase (Auth, Postgres, Storage, Realtime), the app host (Vercel), email delivery (Resend when Auth SMTP is configured), and a TURN provider when enabled for calls. We do not sell member data.

Retention and your choices

Account and match data retention is HUMAN-CONFIRM days. Report, audit, support, direct message, and meetup-evidence retention is HUMAN-CONFIRM days. The hourly retention job applies a purge only after REALTALCK_RETENTION_DAYS is set to the approved number. Signed-in members can start an export or erasure request from Profile → Privacy requests. Operators process verified requests from the admin privacy queue.

Privacy contact

People who cannot sign in can ask for access or deletion at HUMAN-CONFIRM. Replace that placeholder with a contact address that is separate from account login.