Effective 21 August 2026
Overview
This policy explains information processed when you use TalmavoChat and the controls available to you. TalmavoChat does not claim end-to-end encryption.
Moment audiences, profile visibility and blocking are checked by the server. They are not merely visual filters in the application.
Information you provide
Account information includes username, email, date of birth confirmation, country, optional profile details and settings. The service processes messages, Room posts, Moments, media, call/session metadata, reports and support requests that you choose to submit.
Technical information
We process limited connection, device, session and security information needed to authenticate users, prevent abuse, deliver realtime features, diagnose failures and protect accounts. Raw passwords and one-time codes are never stored in readable form.
Calls and media
WebRTC carries voice and video between call participants, with signaling through TalmavoChat and relay servers when needed. TalmavoChat does not record calls. Uploaded media is stored outside the database and access is checked against the relevant conversation, Room, Moment or profile permissions.
Payments and email
Paystack processes hosted checkout. TalmavoChat stores transaction references, amount, currency, status and fees. After a verified payment with a reusable card, limited card details and an encrypted payment authorization may be stored. Automatic charges require your express renewal opt-in; full card numbers, PINs and CVVs are not stored. Brevo delivers verification codes, resets, receipts and security messages.
Visibility and safety
Profile visibility can be Everyone, Friends or Nobody. Separate settings control messages, Moments and online status. Each Moment can use Everyone, My Contacts, Only Selected People, Exclude Selected People or Only Me. Blocking restricts direct messages, calls, Friend requests, Moment access and Random matching. Reports are available only to authorised moderators.
Retention and deletion
Moments normally expire after approximately 24 hours. Session, security, report and transaction data is retained only as needed for the service, abuse prevention, disputes and legal obligations. Account deletion removes the active profile, communication content, media, contacts, settings and Premium access. Secure backups expire through the backup-retention cycle.
Your choices
You may update privacy and notification settings, select or exclude individual Moment viewers, review active devices, export eligible data, revoke other sessions, block users, or permanently delete your account. Contact [email protected] for privacy questions.
Read the Terms & Conditions for platform-use responsibilities.