Privacy Policy

Effective October 1, 2026

This policy describes how Xaplore LLC ("Xaplore", "we") handles information in its apps, currently Walkie Talkie for iPhone and iPad. We collect as little as possible, keep it only as long as it's needed to make the app work, and never sell it or use it for advertising.

No accounts, no audio on our servers

Walkie Talkie has no sign-up and no account system. Once two devices are connected, voice audio flows directly between them (peer-to-peer via WebRTC). Audio is never sent to, recorded by, or stored on our servers.

What our signaling server sees

To help devices find each other, the app sends the following to our signaling server:

• The room code you enter (chosen by you or your family, not an account identifier).
• The display name you enter and a randomly generated device/session ID.
• WebRTC connection handshake data (offers, answers, ICE candidates) needed to open a direct audio connection.
• Your device's IP address, as part of any network request. It is not logged separately or linked to an identity.
• An Apple VoIP push token, used only to wake the app when someone is trying to reach you.

This data is short-lived: presence entries expire after 15 seconds of inactivity, queued handshake messages expire after 60 seconds, and push tokens expire after 30 days of inactivity. Nothing is used for analytics, advertising, or profiling.

Background wake-up (VoIP push)

If the app has gone idle in the background, we use Apple's push notification service to wake it so you don't miss someone trying to talk to you. The push only tells your device to reconnect; it carries no audio or message content.

TURN relay (connectivity fallback)

When two devices cannot connect directly (for example, on different home networks), the connection is forwarded through a TURN relay. Media sent through the relay is encrypted end-to-end by WebRTC (DTLS-SRTP); the relay operator cannot read it.

Microphone

The app uses the microphone only while you are holding the push-to-talk button. It does not use the camera, contacts, photos, or location.

Subscriptions and payments

Subscriptions are purchased and managed entirely through Apple's App Store. We never see or store your payment details. The app receives only the subscription status from Apple to unlock features.

Third parties

We do not sell or share data with advertisers or data brokers. The only third-party infrastructure involved is our hosting provider (Vercel), our database provider for temporary signaling data (Upstash), the TURN relay provider (Metered) used only when a direct connection fails, and Apple (push notifications and in-app purchases).

Children

Walkie Talkie is designed for families. We do not knowingly collect personal information from children beyond the short-lived connection data described above, which is the same for every user.

Changes

If this policy changes, the updated version will be posted at this address with a new effective date.

Contact

Questions about privacy: support@xaplore.dev
Xaplore LLC, Cary, North Carolina, USA