Privacy Policy

Last updated 27 July 2026

Inditalk is operated by MOOMOLAB LLC, 3361 South Wabash Avenue, Chicago, IL 60616, United States, which is the controller responsible for the personal data described here. This policy explains what Inditalk (“we”, “the app”) collects when you use the Inditalk iOS app, why we collect it, and the choices you have. Questions: moomolab@gmail.com.

1. What we collect

Data	Why
Phone number	It is your account identifier. Sign-in is by SMS one-time code; we do not use passwords.
Account ID	An identifier assigned to your account, used to route messages and calls.
Profile: display name, About text, profile photo	Shown to people you chat with. All optional except the display name.
Contacts	Only if you grant contacts access. Phone numbers are hashed on your device before being sent, so we can tell you which of your contacts already use Inditalk without receiving your address book in readable form.
Messages and attachments	Stored so they can be delivered to the people you send them to. See “Encryption” below.
Status updates	Text, photos and videos you post as updates. These expire after 24 hours.
Call records	Who called whom, when, for how long, and whether it was voice or video. We do not record call audio or video.
Push notification token	So your device can be told a message or call has arrived.
Location	Only the location you explicitly choose to send in a chat. We do not track your location in the background.

2. What we do not do

We do not show advertising.
We do not use advertising identifiers (IDFA) and do not ask for tracking permission.
We do not include analytics or advertising SDKs.
We do not sell or rent your personal data.
We do not use your messages to build advertising or marketing profiles.

3. Encryption — what is and is not protected

We want to be precise here rather than make a broad claim.

One-to-one message bodies and attachments are encrypted on your device before they are stored, so our servers hold ciphertext rather than readable text.
This is not an audited end-to-end encryption system. Key management is still being hardened and has not been independently reviewed. Please do not rely on Inditalk for information whose disclosure would put you at serious risk.
Status updates are not encrypted this way. They are broadcast to your contacts, and their media is stored unencrypted.
Group chat bodies are not covered by the one-to-one encryption described above.
Metadata is visible to the service — who is messaging or calling whom, and when — even where message bodies are encrypted.
Calls use WebRTC and are encrypted in transit (SRTP/DTLS). When a direct connection cannot be made, media is relayed through a TURN server.

4. Service providers

Inditalk runs on Google Firebase (Google LLC). Firebase provides phone authentication, the database, file storage, push delivery and server functions, and processes the data above on our behalf. See Firebase privacy. We also operate a TURN relay server that carries call media when a direct peer-to-peer connection is not possible; it relays encrypted media and does not store it.

5. Retention

Messages and attachments are retained until deleted by you, or until they expire if you turned on disappearing messages.
Status updates are deleted automatically 24 hours after posting.
Your profile and account data are retained while your account exists.
Deleting your account removes your profile, keys, chat membership and stored files — see below.

6. Deleting your account and data

You can delete your account from inside the app at any time: Settings → Account → Delete Account. This deletes your account, removes your profile, encryption keys, chat membership and uploaded files from our servers, and wipes all Inditalk data stored on your device. It cannot be undone. Full steps are on the account deletion page. If you cannot access the app, email moomolab@gmail.com from the phone number on the account.

Note that messages you already sent to other people remain on their devices, in the same way that a sent SMS does.

7. Your rights

You can access and correct your profile in the app, delete your account and data as described above, withdraw contacts, camera, microphone, photos, location or notification permissions at any time in iOS Settings, and contact us at moomolab@gmail.com to ask what we hold about you. Depending on where you live, you may have additional rights under laws such as the GDPR or India's DPDP Act; write to us and we will honour them.

8. Children

Inditalk is not intended for children under 13, and you must be old enough to consent to this policy where you live. We do not knowingly collect data from children under 13. If you believe a child has created an account, contact moomolab@gmail.com and we will remove it.

9. International transfers

Our service providers operate globally, so your data may be processed in countries other than your own, including the United States.

10. Changes

If we change this policy we will update the date at the top of this page, and we will tell you in the app if the change is significant.

11. Contact

Privacy questions, data requests and complaints: moomolab@gmail.com.