Privacy policy

Private communication stays private.

Effective August 31, 2026. PTT Talk is a private, end-to-end encrypted push-to-talk and channel messaging service for teams. It does not use advertising, analytics, cross-app tracking, or profiling, and it does not sell personal data.

PTT Talk is self-hosted. The organization operating the instance you join controls its service records, infrastructure providers, and retention settings.

Data handled

• Account and team data: email address, invitation and recovery state, roles, channel memberships, device names, and random service identifiers.
• Security data: public identity keys and prekeys, hashed tokens, key epochs, device status, and security audit events. Private encryption keys remain in protected storage on your device.
• Delivery data: privacy-minimized Apple or Google push tokens and encrypted mailbox and chat envelopes. Push notifications contain no voice, email address, channel name, message text, filename, or caption.
• Voice, chat, and attachments: the microphone is used only while you transmit or record a voice note. Text, files, voice notes, video, and live voice are encrypted on the sending device; relays and object storage receive ciphertext, not plaintext or decryption keys.
• Operational data: network addresses, source tuples, timestamps, floor and authentication events, rate limits, ciphertext sizes, and service health needed to securely operate the service.

Use, storage, and recipients

Data is used to authenticate invited members, link or revoke up to two devices, deliver encrypted voice, chat, attachments, and history, enforce channel membership and floor control, send privacy-minimized notifications, recover accounts with administrator approval, prevent abuse, and maintain security. It is disclosed only to the instance operator and necessary hosting, storage, email, backup, network, Apple, or Google providers, plus authorized member devices.

Server history and encrypted attachments use the operator-selected channel retention period from 1 to 365 days. Local encrypted history and attachment caches are limited to 30 days and 1 GB per device. Newly linked devices receive future communications only and cannot retrieve earlier attachments or history.

Your choices and deletion

You may disable microphone access, photo access, or notifications in system settings and revoke a linked device in the app. You can request account deletion from the Device section or from your instance administrator. Deletion revokes devices, removes memberships, de-identifies the email address, deletes delivery and key material, and rotates affected channel key epochs. Security audit records, encrypted content already delivered to authorized teammates, legal records, and backups may remain for their applicable retention periods.

Security and children

PTT Talk uses end-to-end encryption, protected key storage, authenticated transport, access controls, and replay and source validation. No security measure is perfect. PTT Talk is intended for private organizations and is not directed to children under 13.

Contact and changes

Contact your instance administrator about privacy, deletion, or suspected compromise. Report software vulnerabilities privately through GitHub Security Advisories; do not include security-sensitive details in a public issue. This policy may change as the product or applicable requirements change; the effective date identifies the current version.