Tolki privacy policy
The short version
- We never store your conversations: not the audio, not the text.
- We never store your voice recording. We keep only an ID for the voice Google makes from it.
- We never record the person you're talking to.
- No ads, no selling of data, no tracking across other sites.
- You can delete your voice, or your whole account, from Settings at any time.
Tolki is a face-to-face voice translator, run by Leo in Western Australia, Australia ("we"). This page says what we collect, why, where it goes and how to delete it. Questions: support@gettolki.app.
What we collect
From Google, when you sign in. Tolki uses Google sign-in with the basic scopes only (openid, email, profile). Google gives us your email address, your Google account ID, your name and a link to your profile photo. We use them only to create your account, sign you in and match you to your invite. We don't show your photo, and we don't access your Gmail, contacts, Drive or anything else in your Google account.
What you tell us.
- The name you want to be called and your language.
- Your consent to record your voice: the date and the version of the consent text.
Your voice, if you choose to record it. You read a short English passage and an English consent sentence (about 15 seconds). Both recordings go straight to Google's Gemini API, which builds a voice that sounds like you. We don't write the recordings to disk, to our database or to logs. We keep only the voice's ID and the date you made it. Google keeps the voice until you delete it, and deletes it by itself after a year without use; Google doesn't say whether it keeps the recordings themselves. You can skip recording and use a standard voice.
Usage counts. For each day: how many seconds of speech you sent, how many characters were translated and spoken, and how many voices you created. We use them for the daily limit and to see what Tolki costs. They contain no words and no audio.
Sign-in records. Our account provider (Supabase) keeps your active sessions, with the IP address and browser, so you stay signed in. Its request and sign-in logs, which include IP addresses, are kept for one day.
If you request an invite. The form on gettolki.app asks for your email address and, optionally, the languages you need. We keep the email, those languages, the language the page was shown in and the date and time of your request, only to send you an invite. Never for marketing, and nothing else is asked: no name, no phone number.
Request logs. Google Cloud, which hosts Tolki, logs every request to gettolki.app: your IP address, your browser, the address you opened (an invite link includes its invite code) and the time. We use these logs only to fix problems and stop abuse. They are kept for 30 days.
On your phone. The browser keeps your sign-in session, your two language choices, whether you closed the "Add to Home Screen" hint, a short-lived flag for the offline page, and a copy of Tolki's own files (code, icons, the offline page) so it opens quickly. None of it is about you beyond the session and the languages. Signing out ends the session; clearing the site's data in your browser removes the rest.
What we don't collect
Your conversations. While you hold the button, your speech is sent to Google Cloud to be transcribed, translated and spoken (and, for your own voice, to Google's Gemini API). It stays in our server's memory for that one turn and is then gone. Our own logs record only timings, the language pair and error codes, never what was said. One exception: if deleting a voice at Google fails, the error log keeps that voice's ID (not your name or email) so we can delete it by hand. The other person's voice is never recorded for a voice and never stored.
Who processes your data
| Service | What for | Where |
|---|---|---|
| Google Cloud (Speech-to-Text, Translation, Text-to-Speech, Cloud Run, Cloud Logging) | Running each conversation turn; hosting Tolki; request and error logs | Singapore; speech recognition in the United States |
| Google Gemini API | Making your voice and speaking your translations in it | Google's infrastructure |
| Supabase | Your account, invite requests and the data listed above | Singapore |
| Google sign-in | Signing you in |
They process data only to provide their service to us. Google Cloud doesn't use our conversation data to train its models. We don't share your data with anyone else, unless the law requires it.
Google user data
Tolki's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use your Google email, ID, name and photo link only to sign you in and run your account, and never for advertising.
How long we keep it, and how to delete it
We keep your account until you delete it.
- Settings → My voice → Delete my voice deletes your voice at Google and removes its ID from your account. Your translations switch to a standard voice.
- Settings → Delete account deletes your voice at Google, then your account, name, language, consent records, sessions and any invite linked to you. Your past usage counts stay in our totals but are no longer linked to you.
- Logs can't be deleted one person at a time; they expire by themselves: Supabase's after one day, Google Cloud's after 30 days.
- An invite request is deleted once we've emailed you an invite or decided not to, and six months after you made it at the latest. To have it removed sooner, write to support@gettolki.app.
After deletion, signing in again needs a new invite. If you can't use Settings, email support@gettolki.app and we'll delete it for you.
Your rights
You can see and change your name and language in Settings, and delete your voice or your account there. To ask what we hold about you, or anything else about your data, email support@gettolki.app.
Children
Tolki is not meant for children. Only adults may record a voice, and only their own.
Changes
If this policy changes, we update the date and version above.