Privacy Policy

Talxen is a private messaging, calls, groups, and reels app. Privacy is on by default and every sensitive decision is made and enforced on our servers, never trusted to another person's device. This policy explains what we collect, why, how long we keep it, and the choices you have. It is written to match how the app actually works.

1.Who we are

Talxen (“Talxen”, “we”, “us”, or “our”) is operated by Muhammad Waqas, an individual operator based in Pakistan. For the purposes of applicable data-protection law, the operator is the data controller for personal information processed through Talxen. You can reach us any time at support@talxen.com.

2.Information we collect

We collect only what we need to run the service securely. This falls into the following categories:

Account information

• Your phone number and/or email address (used to sign in and verify you).
• Your display name, unique username, avatar photo, “about” text, locale/language, and app settings.

Authentication & security information

• Verification attempts (one-time codes are stored only as a salted hash, never in the clear, and expire quickly).
• Device sessions and rotating refresh-token records, so you can see and revoke your signed-in devices.
• Approximate technical signals such as IP address, user agent, and abuse-prevention/anti-fraud signals.

Messaging, media & calls

• Message content and attachments you send, and metadata needed to deliver them: conversation membership, ordering, timestamps, delivery/read state, reactions, and edits.
• Media metadata such as file type and size. Image location (EXIF/GPS) metadata is stripped on upload.
• For calls, signalling and connection metadata (start/end, participants, quality). Call audio and video are sent peer-to-peer over WebRTC and are not recorded or stored on our servers.

Social features (reels & related)

• Reels you publish, and interactions such as likes, comments, views, saved collections, streaks, and activity.

Optional contacts

• If you choose contact discovery, and only after you consent, we use your address-book contacts to help you find people you already know. You can decline and still use Talxen.

Safety & support

• Reports you file (the reporter, the reported user/message/media reference, a reason category, and any notes), moderation status and actions.
• Notification preferences and any marketing consent (off by default).
• Messages you send us for support.

3.How we use information

• Create, verify, and secure your account.
• Deliver messages, calls, media, groups, reels, notifications, and support.
• Enforce your privacy settings, blocks, mutes, and safety controls.
• Prevent spam, abuse, fraud, and unauthorised access, including rate limiting and anomaly detection.
• Review reports and take moderation action.
• Maintain reliability, security, and performance.
• Comply with legal obligations and enforce our Terms of Service.

4.Legal bases (where GDPR/UK GDPR applies)

5.Device permissions

Talxen requests OS permissions only when you use a feature that needs them (“just in time”), never during onboarding:

• Camera — capturing photos/video, video calls, and camera effects.
• Microphone — voice notes and voice/video calls.
• Photos / media / files — only for media you choose to send.
• Contacts — optional contact discovery, after explicit consent.
• Notifications — after you opt in, for chat, call, safety, and account alerts.

You can change or revoke any of these in your device settings at any time.

6.How we share information

We do not sell your personal information and we do not share it for cross-context behavioural advertising. We share information only:

• With other users as you direct — for example, the people and groups you message, or the audience for a reel you publish.
• With service providers who help us operate Talxen (see below), under contracts that limit their use of the data.
• To comply with the law, respond to valid legal process, protect people from harm, enforce our Terms, or investigate abuse.
• In connection with a business transfer (e.g. merger or acquisition), subject to this policy.

7.Service providers

We use a small set of trusted providers, each only for its stated function:

8.Retention & deletion

We keep personal information only as long as needed for the purposes above. Talxen enforces configurable retention windows automatically. When you request account deletion (see Account & Data Deletion), we:

• Revoke your active sessions and sign-in identities;
• Delete or anonymise your profile identifiers, device push tokens, notification preferences, blocks, mutes, and starred items;
• Retain a limited set of records where we are legally required to, or for safety, security, fraud-prevention, dispute-resolution, or abuse-investigation reasons.

Messages or media you already sent to other people may remain in those recipients' accounts unless our policy or the law requires removal.

9.Security & encryption

We protect information with technical and organisational safeguards including HTTPS/TLS in transit, access controls, server-side authorisation on every request, rate limiting, and abuse detection. Message content that you lock lives in an encrypted on-device store.

10.Children & minimum age

Talxen is not directed to children. You must be at least 13 years old (or 16, or the higher minimum age required by the law of your country) to use Talxen. We have zero tolerance for child sexual abuse and exploitation — see our Child Safety Standards. Where required or permitted by law, we may preserve and report suspected child-exploitation content and related account information to the appropriate authorities.

11.International transfers

Talxen is operated from Pakistan and information may be processed in Pakistan and in other countries where our providers operate. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

12.Your rights & choices

Depending on where you live, you may have the right to access, correct, delete, export (port), restrict, or object to processing of your personal information, and to withdraw consent. To exercise these rights, email support@talxen.com or use the in-app controls in Settings.

• EU / UK (GDPR / UK GDPR): you may access, correct, delete, port, restrict, or object to processing, and lodge a complaint with your local supervisory authority.
• California (CCPA/CPRA): you have rights to know, delete, correct, and to opt out of “sale”/“sharing”. We do not sell or share personal information as those terms are defined, and we do not discriminate against you for exercising your rights.
• Other regions: Talxen is operated from Pakistan and offered worldwide. You may have similar rights under your national data-protection law; contact us and we will honour the rights that apply to you.

13.Cookies & local storage

The Talxen web app uses a strictly-necessary, HttpOnly, SameSite=Strict session cookie to keep you signed in, a small non-secret marker to restore your session on refresh, and local storage for your theme/appearance preferences. We use no advertising or cross-site tracking cookies. See the full Cookie Policy.

14.Changes to this policy

We may update this policy as the product and the law evolve. We will change the “Last updated” date above and, for material changes, give notice in the app or by email where required.

15.Contact us

Operator

Muhammad Waqas (individual operator)

Location

Pakistan

Privacy & general contact

support@talxen.com

Postal address

Available on request — email us and we will provide our registered contact address.

This document is provided for transparency and app-store/compliance purposes and is not legal advice.