Privacy policy

Private voice stays private.

Effective August 24, 2026. PTT Talk is a private, end-to-end encrypted push-to-talk service for teams. It does not use advertising, analytics, cross-app tracking, or profiling, and it does not sell personal data.

PTT Talk is self-hosted. The organization operating the instance you join controls its service records, infrastructure providers, and retention settings.

Data handled

• Account and team data: email address, invitation and recovery state, roles, channel memberships, device names, and random service identifiers.
• Security data: public identity keys and prekeys, hashed tokens, key epochs, device status, and security audit events. Private encryption keys remain in protected storage on your device.
• Delivery data: privacy-minimized Apple or Google push tokens and encrypted mailbox envelopes. Push notifications contain no voice, email address, channel name, or message text.
• Voice and history: the microphone is used only while you transmit. Voice is encrypted on the sending device; relays and object storage receive ciphertext, not plaintext or decryption keys.
• Operational data: network addresses, source tuples, timestamps, floor and authentication events, rate limits, and service health needed to securely operate the service.

Use, storage, and recipients

Data is used to authenticate invited members, link or revoke up to two devices, deliver encrypted voice and history, enforce channel membership and floor control, send reconnect notifications, recover accounts with administrator approval, prevent abuse, and maintain security. It is disclosed only to the instance operator and necessary hosting, storage, email, backup, network, Apple, or Google providers, plus authorized member devices.

Server history uses the operator-selected retention period from 1 to 365 days. Local encrypted history is limited to 30 days and 1 GB per device. Newly linked devices receive future transmissions only.

Your choices and deletion

You may disable microphone access or notifications in system settings and revoke a linked device in the app. You can request account deletion from the Device section or from your instance administrator. Deletion revokes devices, removes memberships, de-identifies the email address, deletes delivery and key material, and rotates affected channel key epochs. Security audit records, shared encrypted history, legal records, and backups may remain for their applicable retention periods.

Security and children

PTT Talk uses end-to-end encryption, protected key storage, authenticated transport, access controls, and replay and source validation. No security measure is perfect. PTT Talk is intended for private organizations and is not directed to children under 13.

Contact and changes

Contact your instance administrator about privacy, deletion, or suspected compromise. Software-level privacy and security questions can be opened at github.com/golanbenoni/ptt/issues. This policy may change as the product or applicable requirements change; the effective date identifies the current version.