The English version of this legal document is the current version.
Laço is operated by Conversationalist Duo (Adam Galarneau). This policy explains what information the app and its supporting service handle, why we handle it, where it goes, the choices you have, and how you can delete it.
Information we handle
To use Laço conversations and calls, you sign in with Apple on iOS or Google on Android. We verify the identity token supplied by that provider and store a service account identifier, device-session identifiers, and hashed refresh credentials needed to keep your account signed in. We do not receive or store your Apple or Google password.
We also store the name, optional avatar, language preferences, contact connections, groups and their memberships, invitations, and Laço messages you create. Laço messages can include text, translated text, images, and short video attachments. If you ask the app to translate, understand, or help express text, we process the free form text you submit. If you choose a photo or screenshot for message understanding, we process that image. If you use voice translation, we process the recording for transcription. The app may receive generated speech audio when you ask it to speak a translation.
If you allow notifications, the app obtains an Expo push token. We store that token with your device session in the Laço database so we can deliver incoming-call and new-message alerts. Notification payloads identify only the relevant conversation; they do not include message text.
Why we use it
We use this information only to provide the features you ask for: sign-in, translation, explanation, reply assistance, profile and contact connection, message delivery, message and incoming-call notifications, and call setup. We use aggregate information that does not identify you to monitor reliability and improve performance. We do not sell personal information or use messages, recordings, images, or videos for advertising or tracking.
Where it goes
Laço sends the minimum content needed for AI-powered transcription, translation, message understanding, reply assistance, and speech generation to OpenAI, our AI service provider. OpenAI states that API data is not used to train its models unless the API organization explicitly opts in. OpenAI may retain API content and metadata for abuse monitoring for up to 30 days, subject to its published data controls and legal requirements.
Apple or Google handle the sign-in credential that you choose. Expo handles the push token and delivery of message and incoming-call notifications when you allow notifications. Voice and video calls use direct peer-to-peer WebRTC media where a connection can be established. The service relays call-setup signals but does not record or store call media. The other caller and the STUN service used to establish a call may process IP address and connection information needed to make that call work.
Your choices and provider processing
You choose whether to create a Laço profile, connect with another person, submit a message or attachment, use an AI powered feature, or allow notifications, microphone, camera, or photo library access. When you deliberately use an AI powered feature, we send the content needed for that request to OpenAI. You can decline or revoke device permissions in your device settings, stop using a feature, or delete your account as described below.
We share data only with service providers needed to operate the features described in this policy. We require providers processing data for us to protect it in a manner consistent with this policy and applicable law, and we limit the information we send to what is necessary for the service.
Retention and deletion
Profile, contact, group, invitation, and Laço message data remain in our database until the associated profile, group, or conversation is deleted. Audio submitted for transcription is processed in memory and is not saved by the Laço service after the transcription request finishes. We keep only aggregate operational information, such as endpoint, response status, and timing, for up to 90 days. Those aggregates do not contain message bodies, profile identifiers, IP addresses, or tokens.
You can permanently delete your account in the app from your Laço profile. This removes your sign-in access, profile, contact connections, group memberships and owned groups, invitations, and the messages and attachments in Laço conversations associated with your profile. Your contact's account remains, but that shared conversation is removed. If you cannot access the app, you can request the same deletion from our account deletion page or by emailing conversationalistduo@gmail.com. We may ask for enough information to verify that the request is yours.
Security
We use short-lived access tokens, rotating refresh credentials stored by the app in operating-system secure storage, and server-side authorization checks for Laço profiles, contacts, calls, and messages. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Children
Laço is not directed to children. Do not use the app if you are under the minimum age required to consent to data processing where you live.
Changes and contact
We may update this policy as Laço changes. The current version will be posted at this address. For privacy questions, contact Conversationalist Duo at conversationalistduo@gmail.com.