1. We Do Not Sell Your Personal Information
ShyTalk does not sell, rent, or trade your personal information to third parties for monetary or other valuable consideration. This applies to every user of ShyTalk worldwide, including residents of California.
We also do not "share" your personal information for cross-context behavioural advertising as defined under the California Consumer Privacy Act (CCPA / CPRA).
2. What Personal Information We Collect
For the full list of personal information categories we collect and why, see our Privacy Policy. In summary: account identifiers (email, display name, profile photo), device and network metadata (manufacturer, model, OS version, IP-derived approximate location), and usage logs (app actions, crash reports, voice-room connection metadata — never voice audio).
3. Service Providers We Share With
To operate ShyTalk we share data with a small number of service providers under contracts that prohibit them from selling your information or using it for their own purposes:
Firebase (Google) for authentication and database; Cloudflare for CDN, storage, and page hosting; LiveKit (self-hosted on Oracle Cloud) for voice-room connections; ip-api.com for IP-based geolocation. Disclosure to a service provider operating on our behalf is not a "sale" or "share" under the CCPA.
4. Your California Privacy Rights
If you are a California resident, you have the right to:
- Know what personal information we collect, use, disclose, and (if applicable) sell
- Delete the personal information we hold about you
- Correct inaccurate personal information
- Opt out of the sale or sharing of your personal information — already the default state for every ShyTalk user, since we do not sell or share
- Limit the use of sensitive personal information
- Not be discriminated against for exercising any of these rights
To request access, deletion, or correction, contact us at shytalk.help@gmail.com from the email address associated with your account, or use the in-app Settings → Account data-export and account-deletion controls (which fulfil the same right under GDPR Article 17 / 20).
5. Authorised Agents
You may designate an authorised agent to make a request on your behalf. We will require written proof of the agent's authority and may verify your identity directly before fulfilling the request.
6. Contact
For questions about this notice or to exercise any of the rights above, email shytalk.help@gmail.com. The data controller is Shyden Ltd (UK company number 17110487), 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.