Privacy Policy

1. Scope and who we are

Limbo Inc. (“Limbo,” “we,” “us,” or “our”) operates FlashTalk. This Privacy Policy applies to personal information we process through FlashTalk’s mobile applications, websites, and related services (together, the “Service”).

This policy does not govern third-party products you choose to use outside FlashTalk. Our Terms of Service explain the rules for using the Service.

2. Information we collect

Account and authentication information

We collect your phone number and authentication identifiers when you register or sign in. Our authentication provider may also process verification codes, device signals, and technical information needed to prevent abuse and confirm access.

Profile and language-exchange information

We collect information you provide to build your experience, such as your display name, avatar configuration, biography or prompts, interests, languages, proficiency levels, learning goals, and connection intent.

We also collect your birth date and gender during profile setup. FlashTalk treats these as owner-private profile fields: they are used for eligibility, account operation, and appropriate matching or safety logic, and are not intended to appear in public profile projections.

Messages, voice, and media

We process conversations you send through the Service, including text messages, replies, voice notes and available transcripts, images, videos, timestamps, delivery information, and related storage metadata. This information is needed to deliver conversations and support message features.

FlashTalk is avatar-first. If you use photo sharing or mutual photo reveal, we process the photo, request and consent state, and the information required to apply your sharing controls. A recipient may still retain content they have received.

Learning and activity information

We collect vocabulary entries, language topics, review history, review outcomes, conversation participation, and related progress data to provide vocabulary capture, spaced review, and learning features.

Safety information

We collect blocks, reports, reported content references, reasons you provide, and information reasonably necessary to investigate potential misuse, enforce our rules, and protect users.

Device and notification information

If you enable notifications, we process push notification tokens and basic device or platform information needed to deliver notifications and manage token changes. Your operating system controls whether FlashTalk can send notifications.

Technical information

Our systems and service providers may automatically receive IP address, timestamps, request and error information, device or app version, and similar logs when you use the Service. We use this information to operate, secure, troubleshoot, and protect FlashTalk.

3. How we use information

We use personal information to:

• create, authenticate, maintain, and support your account;
• build your profile and connect you with relevant language partners based on goals and intent;
• deliver messages, voice notes, media, notifications, and mutual sharing features;
• generate and organize vocabulary and review activity from your use of learning features;
• apply privacy, contact, blocking, reporting, and safety controls;
• detect fraud, abuse, unauthorized access, and violations of our Terms;
• maintain, debug, understand, and improve the Service;
• communicate with you about support, security, policies, and the Service; and
• comply with law and protect the rights, safety, and integrity of users, Limbo, and others.

We may combine information collected through the Service when reasonably necessary for these purposes. We do not use owner-private birth date or gender fields as public profile content.

4. How we share information

With other users

Your public profile information is shown to other users as part of discovery and conversations. People you communicate with receive the messages and media you choose to send. Photo reveal information is shared according to the mutual controls presented in the Service.

With service providers

We use vendors to provide infrastructure and functions on our behalf. FlashTalk currently relies on Google Firebase services, including Firebase Authentication, Data Connect and associated database infrastructure, Cloud Storage, Cloud Functions, and Firebase Cloud Messaging. These providers process information under their own service terms and our instructions where applicable.

For safety, legal, and corporate purposes

We may disclose information when we reasonably believe it is necessary to comply with law or valid legal process; investigate fraud, abuse, or safety concerns; enforce our agreements; or protect users, Limbo, or others. We may also share information in connection with a financing, merger, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate confidentiality and legal requirements.

5. Data retention

We retain personal information for as long as reasonably necessary to provide the Service, maintain your account, support safety and security, meet legal obligations, resolve disputes, and enforce agreements. Retention varies by the type of information and why we process it.

When you delete content or request account deletion, some information may remain temporarily in backups or technical systems. We may retain limited records for fraud prevention, safety, legal compliance, and the establishment or defense of legal claims. Messages or media already delivered to another user may remain in that user’s conversation history or copies outside our control.

6. Your choices and controls

• Profile: You can edit supported profile fields and avatar settings in the app.
• Contact and sharing: Use conversation controls to manage photo requests, mutual photo reveal, and who can continue contacting you.
• Blocking and reporting: You can block users or report accounts and messages through available safety tools.
• Notifications: You can change notification permission in your device settings.
• Account deletion: Request deletion by emailing support@flashtalk.co from contact information associated with your account.

We may need to verify your identity before completing a privacy request. You may use an authorized agent where applicable law permits, but we may require proof of authorization and identity verification.

7. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including authenticated access and server-enforced data controls. No storage or transmission system is completely secure, and we cannot guarantee that unauthorized access, loss, or misuse will never occur.

You can help by maintaining control of your phone number and devices, using device security features, and contacting us if you suspect unauthorized use.

8. International processing

FlashTalk may be used internationally, and Limbo and its providers may process information in countries other than where you live. Those countries may have different data-protection laws. Where required, we use legally recognized safeguards for transfers and require providers to protect information consistent with applicable obligations.

9. US privacy rights

Depending on where you live and subject to legal exceptions, you may have rights to request access to personal information, correction, deletion, or a portable copy, and to appeal our response. You may also have rights concerning sale, sharing, targeted advertising, or certain sensitive information.

FlashTalk does not sell personal information for money or use it for cross-context behavioral advertising. To exercise an applicable right, email support@flashtalk.co with the subject “Privacy Request.” Describe your request and the state where you live. We will verify and respond as required by applicable law.

We will not discriminate against you for exercising a privacy right. If we deny an appealable request, our response will explain how to appeal.

10. Children

FlashTalk is for adults aged 18 and older. We do not knowingly allow anyone under 18 to create an account. If you believe a person under 18 has provided personal information through the Service, contact us so we can investigate and take appropriate action.

11. Changes to this policy

We may update this Privacy Policy as FlashTalk, our practices, or applicable law changes. We will post the revised policy and update the “Last updated” date. When reasonably required, we will provide additional notice of material changes through the Service or another appropriate channel.

12. Contact us