Privacy Policy
Walkie Pro
Last updated: 21 October 2026 Version: 2.15
The short version
We want you to understand three things before you read the rest. They are the parts people find surprising.
1. Every call is recorded, transcribed, and summarized by automated systems. The audio goes to a speech-recognition company. The transcript goes to AI companies. The recording and transcript are available to everyone in the conversation — not only the people who were on the call.
2. We keep things for a long time. We do not automatically delete messages, photos, documents or transcripts. Call audio is kept for 3 years and then deleted. Transcripts and summaries are kept like messages, indefinitely.
3. Deleting your account closes your access. It does not remove you from the record. Your name, your phone number, your recorded voice, and everything you sent remain.
1. Who we are
Walkie Corporation, doing business as Walkie Pro, is the controller of the personal information described here. We decide how and why it is processed.
23945 Calabasas Rd, Suite 101, Calabasas, CA 91302, United States support@walkiepro.com · +1 (323) 504-7400
This policy covers the Walkie Pro mobile app, walkiepro.com, and related services (the “Services”). It forms part of our Terms of Use.
You must be 18 or older to use the Services.
2. What we collect
2.1 Information you give us
| What | Detail |
|---|---|
| Account | Phone number, email address, name, profile photo, company name, job title |
| Sign-in | Whether you signed in by SMS code, Apple, or Google. From Apple or Google we receive your name and email address |
| Communications content | Messages, photos, videos, documents, voice memos, lists, list items, notes, map pins, tags, follow-ups, reactions |
| Call content | Recorded call audio and verbatim transcripts — see Section 3 |
| Support | What you tell us when you contact us |
| Payment | Subscription status, transaction and invoice records, and the identifier of your customer record at our payment processor, Stripe. We never see or store your card details — Stripe holds your payment details and handles payment |
2.2 Contacts from your device
If you allow it, the app reads your device address book so it can show you which of your contacts already use Walkie Pro. The names, numbers, and email addresses themselves are not sent to us. The app sends transformed (hashed) versions of the phone numbers and email addresses, our server compares them against Walkie Pro accounts, returns the ones that match, and keeps none of them. There is no copy of your address book on our servers.
The only record the check leaves behind is a count of how many entries your account submitted in the current hour, which is there to stop the check being abused. It holds no contact data.
“Someone you know joined Walkie Pro” is worked out on your phone. The app keeps the matched Walkie Pro accounts on the device, re-runs the check from time to time while you use it, and notices there when a contact of yours has become a Walkie Pro user. That notification is created by your own phone, not sent by us.
Transformed address-book entries uploaded by earlier versions of the app have been deleted.
2.3 Information collected automatically
| What | Detail |
|---|---|
| Device | Device model, operating system and version, device identifiers, language, time zone, app version, carrier, IP address |
| Usage | Features used, screens viewed, actions taken, timestamps, session length |
| Message metadata | Who sent what to whom and when, delivery and read status |
| File metadata | File names, types, sizes, upload times |
| Diagnostics | Crash reports, error logs, performance data, battery and memory state at time of error |
| Call metadata | Who called whom, when, duration, connection quality, which device |
2.4 Location
- Job site map pins come from addresses you type. We do not track you to create them.
- “Send my ETA” uses your device location once, when you tap it.
- Photo location. Photos you upload keep the GPS coordinates embedded by your camera. These are stored on our servers and visible to everyone in the conversation. This is precise location data, and it may reveal a client’s home address. Turn off location for your camera app if you do not want this.
We do not track your location continuously or in the background.
2.5 Information from other people
We receive information about you from other users — most importantly, anything they say about you in messages, calls, or lists, and your phone number and a name from their contacts when they call you from Walkie Pro (Section 3.7). When another user’s app checks their address book against Walkie Pro accounts, the transformed contact details reach our server only for the length of that check and are not kept (Section 2.2).
An earlier version of this policy said we collect no information from third parties. That was incorrect and we have corrected it.
People in a Slack workspace connected to Walkie Pro. If someone connects a Slack workspace to Walkie Pro (Section 6.13), we receive information about people in that workspace when they reply in Slack to something sent from Walkie Pro, or mention Walkie Pro in a connected channel: their Slack display name or full name, their Slack profile photo, their Slack user ID, and the text of that message, which becomes a message in Walkie Pro. Slack also tells us about other messages in connected channels. We do not keep their text; our server logs record only Slack’s identifiers for the workspace, the channel, the person and the message.
2.6 Access requests from people without an account
A job can have a public bulletin page, reachable by a link or a printed QR code (Terms of Use §9.3). Someone standing at that jobsite — a delivery driver, a trade, an inspector — can scan it and send an access request for one thing on the board. That person has no Walkie Pro account, has agreed to nothing else, and may never become a user, so this section says exactly what we take from them and what we do with it.
What they give us. A name, either a mobile number or an email address — whichever they choose — and an optional note saying why they are asking. Nothing else — no photograph, no contacts, no location. Choosing email needs no phone number and no consent to text messages. There is no sign-in and no account is created.
What we record with it. Which post they asked about, the note if they wrote one, the time they asked, and a one-way hash of the internet address the request came from. The hash is there to stop one person flooding a board, and it is used for nothing else — we do not store the address itself. We also keep the wording of the disclosure they were shown, its version, and which of the two they chose; for someone who chose text, that is the record that the text messages in Section 6.8 were allowed.
Possession verification, not identity or worksite authority. We verify possession of the mobile number or email address they chose by sending a verification code or tap-link to it — by text message or by email — before delivering private access, and when recovering access. Neither the requester’s name nor their worksite authority is verified. We do not check names against government records or employer rosters, and we make no claim that the person has authority to enter or act on site. What the crew sees is that the number or address was verified for possession, but any name, company, trade, or note provided is a claim about who someone is and their authority on site, not proof of it, and we tell the crew so where they decide.
What happens to it. The request is shown to the people on that job who are entitled to answer it, and they decide. Nothing decides automatically — we do not score, rank, or filter requests. The mobile number or email address is shown only to those people. We tell the person the outcome the way they chose — see Section 6.8 for texts and Section 6.11 for email.
If they are let in. We create a private web page for them and send them the link. It is theirs to keep, and anything else the crew later shares with that person on the same job appears on the same link, so it accumulates. We record when that link is first opened and how many times it has been opened, and the people who shared it can see both. That is behavioral information about someone who has no account with us, so we state it twice: here, and on the page itself, which tells the reader the crew can see when they opened it.
Being removed. The crew can take back anything they shared, at any time, and can block the number or address — which ends the access and stops further requests from it. If you asked for access and want the record of it removed, or want no more messages, write to support@walkiepro.com. Section 8 says how long we keep these records and Section 11 lists the controls.
2.7 When you call Walkie support
When you call Walkie support — +1 (323) 504-7400, or our Spanish-language support line — an AI assistant named “Walkie’s Super Assistant” answers. It speaks in a synthetic voice. A recorded notice at the start of every call tells you the call is recorded, before the assistant says anything else: “Thanks for calling Walkie. This is Walkie’s Super Assistant, and this call is recorded. What can I help you with?” On the Spanish line the notice is in Spanish.
This section applies whether or not you have a Walkie Pro account. Many people who call us have no account, have agreed to nothing else, and may never become users. Everything below applies to them in full, including how long we keep the recording.
What we collect.
- The number you call from, and when the call started, how long it lasted, and how it ended.
- A recording of the call.
- A transcript of what you and the assistant said, turn by turn.
- A summary of the call, written by AI: what it was about, and any next step.
- What you asked about: the questions the assistant looked up, which Help Center articles it used, and the questions no article answered.
- A message for our team, if you leave one.
- An email address, if you give us one on the call and the assistant reads it back to you.
- Whether your number matches an account. If the number you call from belongs to exactly one Walkie Pro account, the assistant may greet you by that account’s first name. On that basis alone it tells you nothing else about the account.
- Verification. Before the assistant discusses your account, it may text a one-time code to the number you are calling from, through Twilio Verify, and ask you to read it back. We record that a code was sent and whether it was accepted. We do not store the code. If you started the call from the Walkie Pro app in the last few minutes, and you are calling from the phone number on your account, the app tells us so, and which call you asked about, and that confirms it is you instead.
- Your account, read but never changed. Once you are confirmed, the assistant reads your plan, your usage, and your recent calls — when they happened, how long they lasted, the jobs they were about, and whether their summaries are ready — so it can answer you. It cannot change your account, your plan, or any charge.
- Your yes to a text. If the assistant offers to text you the app link or a recap of the call and you say yes, we keep the words of your reply, when in the call you said them, and the version of the question you were asked.
Why. To answer your question, to route your call to the right place — the assistant, someone on our team, or a message for later — to follow up on what you asked, and to improve the Help Center. Once a week we review the questions no article answered, and AI may draft a fix for an article from them.
Who receives it.
- LiveKit carries the call and runs the assistant. Through LiveKit Inference, Deepgram turns what you say into text (speech recognition), Google Gemini writes the assistant’s replies from the conversation so far (the language model), and Cartesia turns those replies into the assistant’s voice. All three work with zero data retention. LiveKit also keeps its own diagnostic copy of each call for 30 days, and then deletes it. LiveKit redacts personal data from that copy, except the number you called from, which is part of the call’s internal name and is not redacted.
- Anthropic writes the summary from the transcript, and drafts the weekly article fixes from the questions no article answered.
- SparrowDesk, our support inbox, receives the summary, the next step, the number you called from and, if you gave one, your email address, when the call needs our team to follow up, when you leave a message, when you were connected to someone, or when you called about starting with Walkie Pro and gave us no email address. It does not receive the full transcript.
- Attio, our sales CRM, receives your email address, the number you called from, and a note about the call, if you called about starting with Walkie Pro and gave us an email address.
- Resend may send a recap of the call by email to the address you gave us on the call, or, if the assistant confirmed you are the account holder, to your account’s email address.
- Twilio sends the verification code, and any text you said yes to.
The assistant does not recognize anyone by their voice. Its voice is a stock synthetic voice from our voice provider, and we don’t collect voiceprints of users or callers. Section 3.5 applies to these calls as it does to every other call.
Texts after the call. We text only the number you are calling from, and only after you say yes on the recorded call: the app link, or one recap of the call. Message frequency: one text for each yes, nothing recurring, and no marketing. Message and data rates may apply. Reply STOP to opt out and HELP for help. Section 6.7 applies to that number and to your yes. Our Text Messaging Terms §2.6 set out the exact questions the assistant asks.
How long we keep it. We keep support-call recordings, transcripts, summaries, and the rest of the record above indefinitely. The 3-year window on call audio described in Section 3.6 does not apply to a call to our support line. That is true if you do not have a Walkie Pro account. If you call our support line, the recording of your voice and what you said are kept with no end date. Only LiveKit’s own diagnostic copy is deleted, after 30 days.
Asking us to delete it. Write to support@walkiepro.com with the number you called from and roughly when you called. We may need to confirm the number is yours. We will consider the request and give you an answer with reasons, as Section 4 describes.
3. Calls, recordings, and automated processing
This is the most important section. Please read it.
3.1 What we capture
Every Walkie call is recorded. There is no setting to turn it off. When a call connects we capture each participant’s audio, store it, and process it as described below.
Before your first call, Walkie asks for your consent to recording, and we keep a record of it. You give it on its own screen, separately from accepting our Terms, and the record says which version of the wording you agreed to and when.
Voice memos are recorded and transcribed the same way.
3.2 What we do with it
| Step | What happens | Who receives it |
|---|---|---|
| Carry the call | Real-time audio routing | LiveKit |
| Store the audio | Recording written to private storage | Supabase |
| Speech to text | Raw audio converted to a verbatim transcript: call recordings, including voicemails, voice memos, walkthrough recordings, and the audio of videos where video transcription is on — sometimes sent as the video file itself. For calls, the names of the conversation’s jobs, the street part of their addresses, and the first and last names of the people on the call are also sent, to improve recognition of those words | Deepgram |
| Summarize | Full transcript processed to produce summaries, per-job summaries, action items, decisions, and follow-ups. We also write rolling summaries of conversations and summaries of voice memos, walkthroughs, and videos from the messages and transcripts they cover; if we switch that work to another provider, Google Gemini may write them instead, from the same content | Anthropic; Google (Gemini) may be used for rolling, voice memo, walkthrough, and video summaries |
| Translate | Transcripts and summaries translated on request, with the job and conversation name sent as context | Google (Gemini) |
| Search and Ask | So you can search and ask about your own records, the text of your messages, notes, list items, file names and change notes, photo and video captions and descriptions, voice memo, walkthrough, and call transcripts, call and walkthrough summaries and action items, follow-up notes, and calendar events — with the job, conversation, person, and date each belongs to — is turned into search vectors as it is saved, whether or not anyone uses Ask. Each question you ask in Ask is sent too | Google (Gemini) |
| Answer questions | When you use Ask, your question and the past content it finds are processed to write the answer | Anthropic |
| Describe photos | Photos may be described automatically, so they can be summarized and found by what they show. If they are, the photo, its caption, and details of the job and conversation it was posted in, including the job’s address, are sent | Google (Gemini) |
The transcript sent for summarization is not redacted. Everything said on the call — names, prices, addresses, phone numbers, and anything else — is included. The same is true of what is sent for search: transcripts and other content go as they were said or written.
3.3 What we generate
Automated systems produce summaries that name individual people and describe what they said, agreed to, or committed to. The system is instructed to attribute statements to named participants.
These can be wrong. Transcription mishears names, numbers, and prices. Summaries can attribute a statement to the wrong person or overstate agreement. Where a detail matters, check the recording.
Generated summaries cannot be edited or deleted, by you, by other participants, or by us. If a summary names you and is materially inaccurate, write to support@walkiepro.com.
3.4 Who can access a recording
Recordings, transcripts, and summaries are available to every member of the conversation the call took place in — not only the people on the call.
If you are in a twelve-person conversation and you call one person, all twelve can play the recording and read the transcript. People who join the conversation later may also be able to reach it.
3.5 We do not use voice biometrics
We do not create voiceprints. We do not use speaker recognition, voice authentication, or any technology that identifies people by their voice characteristics.
Speaker labels in transcripts come from the audio channel each person was recorded on — a channel already linked to their account — not from analyzing how anyone sounds. We collect no biometric identifiers of any kind.
(A previous version of this policy stated that we collect voiceprints. That was incorrect. We never have.)
3.6 How long a call is kept
Call audio is kept for 3 years and then deleted. Transcripts and summaries are kept like messages, indefinitely.
Neither you nor we can delete a recording, transcript, or summary on request, and they persist after you delete your account. The audio of a call is deleted on the 3-year schedule whether or not anyone asks; the transcript and the summary it produced stay. See Sections 8 and 9.
3.7 Calls to people who are not Walkie Pro users
You can call an ordinary phone number from Walkie Pro. These calls are recorded, transcribed, and summarized in the same way, and processed by the same providers.
The person called sees the caller’s own verified mobile number as the caller ID, or the caller’s Walkie line once they have one.
Recording begins after they answer and finish their greeting. The announcement that the call is recorded is the first thing in the recording.
If the call reaches an answering machine or voicemail, we do not record it.
What we hold about a person who is called. We create a record for them containing:
- Their phone number
- A name — taken from the caller’s own device contacts, not chosen by them
- The recording of their side of the call, the transcript of what they said, and the AI summary
- The date, time, and duration of the call
They have no account and no access. The conversation containing the call record is visible only to the Walkie Pro user who placed the call. The person called cannot see it, correct it, or delete it.
That record becomes theirs only after the Walkie Pro user who called them confirms it’s the same person.
Text messages. A caller can send the call summary to the person they called as a text. They can send it from their own phone, in which case it is their own message from their own number. We can also send it for them from a Walkie Pro number, or from the caller’s own Walkie line, and that is live today. A voice message the caller left on an unanswered call can be sent the same way, and from a Walkie line its recording is attached as audio.
We send nothing to a number until the caller has recorded in the app that the person agreed to receive call recaps from them. We keep that record — the number, which of our users attested to it, and when — and we check it again immediately before every send. A caller chooses, for their account and for each person separately, whether we send every time, ask them each time, or never; a new account asks each time. An automatic summary can be stopped until it has been written up, and is sent as soon as it is.
What we keep about a text we send: the recipient’s number, the exact text that was sent, when it was sent, what the phone network told us about its delivery, and the caller who sent it. A recipient who replies STOP is recorded as opted out, and that stops texts to that number from every Walkie Pro user, not only the one who texted them. The first message to a number identifies the caller, says that message and data rates may apply, and tells the recipient how to get help and how to stop; a later message repeats it once 30 days have passed. This part is about call summaries only. It does not cover the one-time download-link text you can request on walkiepro.com — see Section 6.7.
3.8 Your responsibility
Recording laws differ by place. You’re responsible for how you use Walkie where you work. If you’re unsure, ask a lawyer where you are. You are responsible for the legality of calls you place and people you invite, including obtaining any consent required and giving any notice required before recording or monitoring someone.
This matters most when you call someone who does not use Walkie Pro. That person did not choose this product, has agreed to nothing, and may not expect to be recorded. See Terms of Use §6.7.
3.9 The job bulletin
Every job has a bulletin. Posts carry a headline and, separately, details — a gate or lockbox code, a decision, or a document reference.
Where each half goes:
- The headline is visible to everyone on the job, and appears on the job’s public web page if one is turned on
- The details are visible only to the audience chosen when the post was made, and to anyone later let in
Access codes. Codes posted to a bulletin are stored in readable form on our servers and cached on the devices of people entitled to see them. They are protected by access controls, not by encryption. Consider that before posting a code that opens something valuable.
The public page. If a job’s public page is turned on, anyone with the link or QR code can read it without signing in. It shows the job’s short name and the headlines, types, and timing of active posts. It never shows the details half of any post, anyone’s name, anyone’s phone number, or the street address. It carries no cookies, no analytics, and contacts no third parties. We count page views in aggregate; we do not log visitors’ IP addresses.
Because the headline is free text, whatever is typed into it is published. Keep codes and private details out of headlines.
4. People who are not users
We hold information about people who have never used Walkie Pro and have agreed to nothing. There are three ways that happens, and we would rather set them out plainly than bury them.
Contacts are not one of them. A user’s address book is checked against Walkie Pro accounts and nothing from it is kept, so being in someone’s contacts does not put you in our records (Section 2.2). The transformed address-book records we used to retain have been deleted.
1. People who are called. When a user calls an ordinary phone number, we record, transcribe, summarize, and retain that call, and we create a record holding the person’s phone number, a name taken from the caller’s contacts, and the recording of their voice. Call audio is kept for 3 years and then deleted. Transcripts and summaries are kept like messages, indefinitely. See Section 3.7. This is the most significant information we hold about non-users.
2. People who ask for bulletin access. Someone who scans a job’s QR code or opens its public page can ask to see one post’s details without installing Walkie Pro or creating an account. They give a name, a mobile number or an email address, and an optional note. We send a code or tap-link to that number or address to confirm they hold it, and the people on that job decide whether to let them in. If they are let in, they see what was shared with them on a private web page we send them a link to, and we record when that page is first opened and how many times. Section 2.6 sets out exactly what we take from them and what we do with it. Apart from that, we do not collect anything from anonymous visitors to a public bulletin page, beyond an aggregate view count.
3. People who call Walkie support. Anyone can call our support line, with or without an account. We record, transcribe, summarize, and keep every support call indefinitely, with the number it came from — including when the caller has no account and has agreed to nothing else. Section 2.7 sets out exactly what we take and who receives it.
If you are not a Walkie Pro user and want us to remove information about you
Write to support@walkiepro.com from the phone number or email address in question, or tell us which one to look for.
What we can do: suppress future notifications, and stop you being called or texted through the Services. We no longer hold records of anyone’s address book, so there is nothing of that kind left to remove.
What we generally cannot do: delete a recording, transcript, or summary of a call you took part in ahead of its schedule. That record is equally the personal information of the other person on the call, and we retain it to establish and defend legal claims. Section 9.4 explains our reasoning. The audio of that call is deleted 3 years after it was made, whether or not anyone asks; its transcript and summary are kept like messages, indefinitely. If you object, tell us and we will consider it and give you an answer with reasons — we do not treat this as automatic.
We may need to verify that the contact detail is yours, and we will not use what you send us for anything else.
5. How we use information
| Purpose | Examples |
|---|---|
| Provide the Services | Deliver messages, connect calls, sync across devices, store your content |
| Record and process calls | Recording, transcription, summarization, translation — Section 3 |
| Connect you to people | Contact matching — nothing from your address book is kept — and conversation invitations. “Someone you know joined” is produced by the app on your own device, not by us — Section 2.2 |
| Notifications | Push, SMS, and email about activity, follow-ups, and your account |
| Support | Answer questions, investigate problems |
| Reliability and security | Diagnose crashes, prevent abuse and fraud, enforce our Terms, protect accounts |
| Improve the Services | Understand which features are used and where they fail |
| Billing | Manage subscriptions, entitlements, and allowances |
| Advertising | Show ads for Walkie Pro to people likely to want it, and measure which ads lead to visits, signups, and payments — Section 7 |
| Legal | Comply with law, respond to legal process, establish or defend legal claims |
6. Who we share with
We share personal information with the service providers below. They may only use it to provide services to us. Our Subprocessor List has current details.
6.1 Providers that receive your communications content
| Provider | What they receive | Where |
|---|---|---|
| Supabase | Everything — the database, file storage, and authentication behind the Services | United States |
| LiveKit | Live call audio, and recordings written to storage. Also connects calls to ordinary phone numbers. Calls to our support line: LiveKit runs the AI assistant that answers, and through LiveKit Inference sends what the caller says to Deepgram (speech recognition), the conversation to Google Gemini (the language model), and the assistant’s replies to Cartesia (its voice), each with zero data retention. LiveKit keeps its own diagnostic copy of each support call for 30 days, with personal data redacted except the calling number — Section 2.7 | United States |
| Twilio (as LiveKit’s telephone carrier) | Call audio for calls to and from ordinary phone numbers | United States |
| Deepgram | Call recordings, including voicemails; voice memo and walkthrough audio; and the audio of videos where video transcription is on, sometimes as the video file itself. For calls, also job names, the street part of job-site addresses, and the names of the people on the call. Through LiveKit Inference, what callers say on calls to our support line, with zero data retention — Section 2.7 | United States |
| Anthropic | Full verbatim call transcripts, and your content when you use Ask. Also transcripts of calls to our support line, to write their summaries, and the questions callers asked that no Help Center article answered — Section 2.7 | United States |
| Google (Gemini) | The text of your content, to make it searchable — messages, notes, list items, file names and change notes, photo and video captions and descriptions, voice memo, walkthrough, and call transcripts, summaries and action items, follow-up notes, and calendar events, with the job, conversation, person, and date each belongs to — and every question you ask in Ask. Transcripts and summaries submitted for translation. Photos you upload, with their captions and job details, may also be sent to be described automatically. If we switch summary writing to Gemini, it may also receive the messages and the voice memo, walkthrough, and video transcripts it summarizes, with their job and conversation details. Through LiveKit Inference, the conversation on calls to our support line, with zero data retention — Section 2.7 | United States |
| Google (Firebase Cloud Messaging) | Push notification content, including message text, sender name, and conversation name | United States |
We call this out because it is easy to assume push notifications carry only an alert. They carry the message itself, which means Google receives communications content.
Search indexing is not something you switch on. Your content is sent to Google Gemini to be indexed as it is saved, whether or not anyone in the conversation uses Ask, and that includes call transcripts.
6.2 Other providers
| Provider | Purpose |
|---|---|
| Apple, Google | Sign-in and app distribution. Neither processes payments for Walkie Pro subscriptions |
| Stripe | Payment processing, subscriptions, invoices, and sales-tax calculation. Stripe receives your email address and a Walkie account identifier, and what you enter on its checkout page, such as your name, billing address, and payment details. Stripe holds your payment details; we never see them |
| Google (Google Play) | Android only. When you subscribe from the Android app, Google shows you an information screen before you go to Stripe’s checkout page, and we report each resulting charge and refund to Google, as its external content links programme requires — the amount, the tax, the time, your country, and a transaction token Google issued. Google does not process the payment |
| Google Maps Platform | Address lookup and map display |
| Twilio | SMS verification codes; the one-time download-link text sent from walkiepro.com; texts about jobsite access requests; call summaries and voice messages texted to people our users call; the phone numbers, calls and texts of Walkie lines; and, for calls to our support line, the verification code sent through Twilio Verify and any text the caller said yes to — Section 2.7 |
| Resend | The download-link email sent from walkiepro.com, the email confirming a message you sent us through the contact form, the recap of a call to our support line (Section 2.7), and product updates if you asked for them |
| SparrowDesk | Our customer-support inbox and live chat. SparrowDesk receives the messages you send us through the contact form, help-article feedback, and live chat on walkiepro.com, with your name and the email address or phone number you asked us to reply to — a phone number only if you ticked the box to be called or texted back; and your name, email address, and phone number, if you gave one, when you create an account. For a call to our support line that needs our team, SparrowDesk receives the AI summary, the next step, and the caller’s email address or phone number — never the full transcript (Section 2.7) |
| Attio | Our sales CRM. Attio receives your name, email address, phone number if you gave one, and your Walkie Pro plan when you create an account; and, if you called our support line about starting with Walkie Pro and gave us an email address, that address, the number you called from, and a note about the call — Section 2.7 |
6.3 Advertising and website measurement
| Provider | What they receive | Purpose |
|---|---|---|
| Google Analytics | Visits to walkiepro.com — pages viewed, device and browser information, an analytics identifier — only after you accept the Analytics category | Website traffic measurement |
| Meta Platforms (Facebook, Instagram) | From walkiepro.com, only after you accept the Advertising category: the pages you view, the actions that start a signup or send us a request, your IP address, browser information, and Meta’s advertising identifiers. From our servers, when you create an account or pay for a plan: that it happened and when, a one-way hash of your email address, and, where we have it, the ad-click identifier from the link you followed | Showing Walkie Pro ads to people who visited our website or are like our customers, and measuring which ads lead to signups and payments — Section 7 |
| Google Ads | From walkiepro.com, only after you accept the Advertising category: the pages you view, the taps that open the App Store, Google Play, or the web app, your IP address, browser information, and Google’s advertising identifiers. Before you accept: a consent-state ping from each page — the time, your browser’s user-agent and referrer, whether each consent is granted or denied, a random number, and the page address — with your IP address truncated and no cookie written or read. From our servers: nothing — no signup event, no payment event, and no email address, hashed or otherwise | Measuring which ads lead people to install the app or open it in a browser, and modelling the ones it cannot measure. No remarketing — no audience is built from your visit — Section 7 |
| CookieYes | Your cookie choices | Cookie consent management |
Meta receives nothing you create or say in the app, and neither do Google Ads or Google Analytics — no messages, calls, recordings, transcripts, photos, documents, lists, or contacts — and none of them ever receives your phone number. Section 7 sets out exactly what each of them receives and what it does not. Google also works for us as a service provider, and in that role it does receive app content: Google Gemini receives the content listed in Sections 3.2 and 6.1, to translate it and make it searchable and, where used, to describe photos and write summaries, and Firebase Cloud Messaging carries push notifications. We use neither for advertising.
6.4 Training
We do not use your recordings, transcripts, messages or files to train AI models. If we ever want to, we will ask first, and it will be opt-in.
We require the providers who receive your content to exclude it from training their models.
- Deepgram — data logging disabled, zero data retention enabled
- Anthropic — commercial API account; under Anthropic’s commercial terms, API inputs and outputs are not used to train models. 30-day retention
- Google (Gemini) — paid tier. Google’s terms state that for paid services, prompts and responses are not used to improve Google’s products. This covers everything we send Gemini: translation, search indexing, Ask questions, photo descriptions, and summaries
- LiveKit and Supabase — infrastructure providers; they do not train models on customer data
6.5 Other users
Your name, profile photo, company, messages, files, recordings, and transcripts are visible to the people in your conversations — see Section 3.4 for how widely.
6.6 Legal and business
We may disclose information to comply with law or legal process, enforce our Terms, prevent fraud or harm, or protect anyone’s rights or safety. See our Law Enforcement and Legal Process Policy.
Because we keep transcripts, summaries, and messages indefinitely, and call audio for 3 years, that content may be sought by subpoena or court order — including in disputes between users of the Services.
If we are involved in a merger, acquisition, financing, or sale of assets, information may transfer as part of it. We will tell you if a different organization becomes the controller.
6.7 Text messaging
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. Mobile numbers collected for text messaging, the consent records behind them, and any record of an opt-out are excluded from every category of sharing described above: they are never sold, rented, shared for anyone else’s marketing, or used to build advertising audiences. Delivering the message is not sharing — we give the recipient’s number to our messaging provider, Twilio, for the sole purpose of sending the message, and Twilio may not use it for anything else. See our Subprocessor List.
The download-link text. If you type your mobile number into the “Text me the link” form on walkiepro.com, we send you one text message containing a link to download the app. That is the whole programme — message frequency: one message each time you ask for the link, nothing recurring, and no marketing messages. Message and data rates may apply. Reply STOP to opt out and HELP for help, or write to support@walkiepro.com. We keep a record of your consent — a one-way hash of your number, the time, your IP address, your browser’s user agent, and the version of the disclosure you agreed to — for 90 days. We do not store the number itself.
6.8 Texts about an access request
When someone asks for access or recovers access from a job’s public page (Section 2.6) and chooses to be reached by text, we text them about that request, phone possession verification, and access delivery, and about nothing else. Message frequency: one or two messages for each request or recovery — a verification code or tap-link to confirm phone possession, and, if approved, a message carrying the private bulletin link. Nothing recurs, nothing renews, and asking for access subscribes them to no list. We send no marketing messages to that number, ever. Message and data rates may apply.
Someone who chooses email gets no texts at all — see Section 6.11.
Reply STOP to opt out and HELP for help, or write to support@walkiepro.com. An opt-out applies across Walkie Pro, not to the one job. It is recorded against the number, so it stops these messages from every job and every crew at once — not only the board the person happened to be standing at.
The number, the record of consent behind it, and any opt-out are ring-fenced from every category of sharing described above. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. In this programme as in the one in Section 6.7, the number is never sold, rented, shared for anyone else’s marketing, or used to build advertising audiences. Delivering the message is not sharing — we give the number to our messaging provider, Twilio, for the sole purpose of sending that message, and Twilio may not use it for anything else. See our Subprocessor List.
6.9 The download-link email
If you type your email address into the “Email me a link to Walkie Pro” form on walkiepro.com, we send you one email containing a link to download the app. That is the whole of this programme — one email each time you ask for the link, nothing recurring, and no marketing.
Giving us an email address is optional and is not a condition of anything. The same page offers a browser link and a QR code that need no email address and no phone number, and nothing on the page creates an account or gates a service. The form asks for an email address and nothing else — no phone number, not even optionally.
Two separate permissions, two separate boxes. The form carries two checkboxes. Neither is ticked when the page loads. The first is consent to this one email. The second, described in Section 6.10, is a separate request for occasional updates — it is optional, it does not have to be ticked for the form to submit, and ticking it is the only thing that puts you on any list. We do not bundle the two, and we do not treat a request for the download link as permission to market to you.
What we keep. We keep a record of your consent — a one-way hash of your address, the time, a one-way hash of the internet address the request came from, your browser’s user agent, and the version of the disclosure you agreed to — for 90 days. Unless you also asked for updates under Section 6.10, we do not retain the address itself once the message has been sent, and you are on no list. Our email provider keeps the address in its own delivery logs for a short period, set by them rather than by us.
No email address is sold, rented, or used to build advertising audiences. Delivering the message is not sharing — we give the address to our email provider, Resend, for the sole purpose of sending it, and Resend may not use it for anything else. Transactional mail is sent from send.walkiepro.com. See our Subprocessor List.
If someone typed in your address and you did not ask for this, or you want the consent record removed before the 90 days are out, write to support@walkiepro.com.
6.10 Product updates, if you ask for them
This is the only marketing email we send, and the only way onto the list is to tick the box.
What ticking the box means. Beside the download-link form on walkiepro.com there is a second, separate checkbox: “Also email me occasional updates about Walkie Pro. Unsubscribe any time.” It is not ticked when the page loads, and the form submits whether or not you tick it. If you leave it alone you get the one download-link email described in Section 6.9, you are on no list, and we keep no address. If you tick it, you are asking for two different things in two different controls, and we record that you asked for each.
It is tied to nothing else. Asking for updates is not a condition of getting the download link, of using Walkie Pro, of any plan, or of any support we give you. Declining costs you nothing and unsubscribing later costs you nothing. Nothing in Walkie Pro works differently because you are or are not on this list.
What we store, and for how long. Your email address, the time you asked, a one-way hash of the internet address the request came from, and the version of the wording you agreed to — kept until you unsubscribe, and then replaced by a record that you unsubscribed. Unlike Section 6.9, here we do keep the address itself, because a list you asked to be on is a list we have to be able to find you on.
How often. Occasionally — we expect no more than about two emails a month, and often fewer. These are product updates: what is new, what changed, what we are working on. We do not send daily mail, we do not send other companies’ offers, and we do not send anything on anyone else’s behalf.
Every message has a way out. Every update carries a one-click unsubscribe link and a List-Unsubscribe header, so your mail app can unsubscribe you without opening the message, and every message carries our postal address. You can also write to support@walkiepro.com. We act on an unsubscribe immediately, and in every case within ten business days.
An unsubscribe is honoured everywhere. It is recorded against your address at our email provider and it stops mail from every Walkie Pro sending domain at once — not only the one the message came from. That includes the download-link email in Section 6.9: if you unsubscribe and later ask for the download link by email, we will tell you on the page that we cannot email you, and give you the link, the QR code and the browser address there instead. Unsubscribing has no effect on your ability to use Walkie Pro, on your account, or on anything you have in the app. If you are a user, the mail you need in order to use the Service — a sign-in code, a security notice, a billing receipt — is not marketing and is not what you unsubscribed from.
Where it is sent from. Product updates are sent from news.walkiepro.com, which is separate from the send.walkiepro.com address our transactional mail uses. Both go through Resend. Your address is never sold or rented, never shared for anyone else’s marketing, and never used to build advertising audiences. See our Subprocessor List and Section 7.
Having the record deleted. Unsubscribing stops the mail and keeps a minimal record that you unsubscribed, so that we do not mail you again by mistake. If you want the record itself removed, write to support@walkiepro.com and we will delete it — we will tell you when it is done. Section 12 covers your rights generally; Section 11 lists the control.
Where this list is offered. The updates checkbox is offered to visitors in the United States. Section 14 explains that we do not currently offer the Services in the EEA, the UK, or Switzerland, and the same is true of this list.
6.11 Emails about an access request
When someone asks for access or recovers access from a job’s public page (Section 2.6) and chooses email, we email them about that request, and about nothing else: a verification code or tap-link to confirm they control the address and, if the crew lets them in, a message carrying the private bulletin link. One or two emails for each request or recovery. Nothing recurs, and asking for access puts no one on any list. We send no marketing email to that address.
What we keep. The address is kept with the access request, the same way a mobile number is (Data Retention Schedule §2.3B), because the people who answer the request see it and a later recovery is sent to it.
Delivering the email is not sharing — we give the address to our email provider, Resend, for the sole purpose of sending it, and Resend may not use it for anything else. Transactional mail is sent from send.walkiepro.com. See our Subprocessor List.
If someone typed in your address and you did not ask for this, ignore the email — nothing more is sent unless someone asks again — or write to support@walkiepro.com.
6.12 The email confirming a message you sent us
When you send us a message through the contact form on walkiepro.com and choose to hear back by email, we send one email to that address confirming we received it. It says what the message is about and when to expect a reply. It does not repeat your message. At most one a day to the same address, nothing recurring, and no marketing.
What we keep. Your message, your name and your address are kept with the conversation in our customer-support inbox, SparrowDesk (Section 6.2). To hold the one-a-day limit we keep a one-way hash of the address for 24 hours, and nothing else.
Delivering the email is not sharing — we give the address to our email provider, Resend, for the sole purpose of sending it, and Resend may not use it for anything else. Transactional mail is sent from send.walkiepro.com. See our Subprocessor List.
If someone typed in your address and you did not send us a message, you can ignore the email, or write to support@walkiepro.com.
6.13 A Slack workspace you connect (Send to office)
Any Walkie Pro user can connect a Slack workspace they belong to. Connecting creates an office in Walkie Pro, owned by the person who connected it, and the owner chooses which Slack channels to connect. Slack is not one of our service providers. It is a service you choose to send to, and what arrives in Slack is kept by Slack under that workspace’s rules, not ours.
What we send to Slack when someone uses Send to office:
- the message text;
- the sender’s first and last name and their profile photo, shown as the post’s author;
- if the message was forwarded, the name of the person who first sent it;
- the job’s short name (or, if it has none, its street address) and the conversation’s name;
- photos and videos attached to the message — the files themselves, with their file names, not links.
Documents, voice memos, call summaries, calendar events and bulletin posts cannot be sent to Slack. Slack may fetch and preview any web link in the message text. Editing or deleting the message in Walkie Pro afterwards does not change the copy in Slack.
What we keep: the connection (the Slack workspace’s ID and name, who connected it, and the permissions Slack granted), the connected channels’ IDs and names, a link between your Walkie Pro account and your Slack user ID if you connected or joined through Slack, and a record of each message that crossed and whether it arrived. The access token Slack issues is stored in an encrypted vault, not with the rest of the data.
Replies from Slack come back into Walkie Pro as described in Section 2.5, and the people in the conversation they land in can see them.
Disconnecting. The office’s owner can disconnect it at any time. After that, nothing more is sent to Slack and nothing more is received from it. Disconnecting, or deleting your account, does not remove anything already sent to Slack — ask the workspace’s owner to remove it under Slack’s rules. What came into Walkie Pro from Slack stays in Walkie Pro, like any other message.
7. Advertising — and the line we draw
We advertise Walkie Pro on Meta (Facebook and Instagram) and on Google (Google Search and Google’s advertising network). We show Meta ads to people who have visited our website and to people Meta predicts are like our customers, and we measure which ads lead to signups and payments. Under California law that counts as “sharing” personal information for cross-context behavioral advertising, and you can opt out — see Section 13.
On Google we measure; we build no audiences. Google tells us which of our ads led someone to open the App Store, Google Play, or the web app, and Google uses those conversions to decide who to show our ads to next — which is how every ad platform works. We do not remarket on Google: no list of our visitors is built, and none is handed to Google. If we ever decide to turn remarketing on, we will update this policy and our Cookie Policy before we do, not after. Our servers send Google Ads nothing. The signup and payment events described below go to Meta alone. Google’s separate work for us as a service provider — Gemini and push notifications, Section 6.1 — is not advertising.
On our website
Your consent is the switch, and it is off until you turn it on. Meta’s pixel is not loaded, Google’s tag is told to store nothing for advertising, and no advertising cookie is set unless you accept the Advertising category in our cookie banner. What Google’s tag still sends while that switch is off is set out below, in full. If your browser sends a Global Privacy Control signal, we treat it as a no. You can withdraw at any time through the Cookie preferences link in the website footer. Our Cookie Policy lists each advertising cookie.
Once you have accepted, Meta receives the pages you view — without the part of the address after the “?”, where invitation codes live — the actions that start a signup or send us a request, your IP address and browser information, and Meta’s own advertising identifiers. We send each of these from your browser and from our servers, so a visit is not lost to an ad blocker, and Meta counts each one once. We do not send Meta anything you type into a form on the website.
Google differs from Meta in two ways, and both are worth stating plainly.
The switch. Google’s tag is already on the page for our website analytics, so what waits for your consent is not the loading of a script but the storing and the reading. Until you accept the Advertising category we set Google’s own consent signals to deny advertising storage: no Google advertising cookie is written, and none already on your device is read. Google does still receive a small ping from each page you open. Google documents it as carrying the time, your browser’s user-agent and referrer, whether each consent is granted or denied, a random number, and the page address — including an ad-click identifier if the link you followed carried one — with your IP address truncated when it is collected. No cookie is involved, and Google uses these pings to estimate the conversions it cannot measure. We would rather tell you that than call the switch a silence it is not.
The address. Once you have accepted, Google Ads receives the pages you view, your IP address and browser information, and the ad-click identifiers held in the cookies our Cookie Policy lists. The address is not trimmed the way Meta’s is: Google Ads reads the click identifier that sits after the “?” in the link you followed, so the address goes as your browser has it, including anything else in it, such as an invitation code. Two taps are reported as conversions: the tap that opens the App Store or Google Play, and the tap that opens the web app. We do not send Google anything you type into a form on the website, and nothing about you is sent to Google Ads from our servers.
When you sign up or pay
When you finish creating your account, and when you start a paid plan, our servers tell Meta that it happened. This is how we learn which ads bring customers, and it lets Meta show our ads to more people like them and stop showing them to people who already signed up. Each event carries only:
- what happened — an account was created, or a subscription started — and when
- a one-way hash of your email address: a scrambled form Meta can compare with the hashes of its own users’ addresses, but cannot turn back into your address
- where we have it, the ad-click identifier from the link that brought you to us
It never carries your phone number, your name, the amount you paid, or anything you do or say in the app. If Meta finds no matching account, it discards the hash.
On iPhone, we send these events only if you allow Walkie Pro to track you when iOS asks. Everywhere, you can opt out at any time — Section 13.
What we keep about the ad you came from
When you create an account, we store with it how you found us, if we know. That is the campaign tags in the link you followed — utm_source, utm_medium, utm_campaign, utm_content, utm_term — and the ad-click identifier from it: gclid, gbraid, or wbraid from a Google ad, fbclid from a Meta one. The first values we see win and later ones are ignored, and a value that does not have the shape of a campaign tag or a click identifier is dropped rather than stored.
These are ours, not Google’s. We do not send them to Google. We use them to learn which ads bring customers, and that is all. If that ever changes we will update this policy before the first one goes, not after. What Meta receives is described above, and is limited to what is listed there.
On the website these values live in the walkie_attr cookie — the campaign tags with your Analytics consent, the click identifier only with your Advertising consent — which our Cookie Policy describes. Opting out (Section 13) stops every send to an advertising platform. We keep our own record of how you found us for our own reporting, and it is never joined to anything you say or send in the app.
The line we draw
| Marketing website (walkiepro.com) | Your account | Your communications in the app | |
|---|---|---|---|
| Analytics cookies | Yes, once you accept the Analytics category | No | Never |
| Advertising cookies | Yes, once you accept the Advertising category | No | Never |
| Sent to Meta | Pages viewed and actions taken, once you accept the Advertising category | That you signed up or started a plan, with a hashed email address. Never your phone number | Never |
| Sent to Google Ads | Pages viewed, and the App Store, Google Play, and web-app taps, once you accept the Advertising category. Before then, a consent-state ping with no cookie | Nothing | Never |
| Used to target ads | Yes | Yes — to find people like our customers, and to stop showing ads to people who already signed up | Never |
We never use your messages, calls, recordings, transcripts, summaries, photos, documents, lists, or contacts for advertising. We do not sell them. We do not share them with advertising platforms. We do not build audiences or infer anything about you from them for marketing. We show no advertising inside the app.
Your project conversations and your visit to our marketing page are different things, and we treat them differently on purpose.
We also do not
- Sell your personal information for money. We do not.
- Use voice biometrics — Section 3.5.
- Track your location continuously or in the background.
- Read your messages or listen to your calls to moderate them. We act on reports — see Terms of Use §16.
8. How long we keep information
We retain content indefinitely, with one exception: the audio of a call. Call audio is kept for 3 years and then deleted. Transcripts and summaries are kept like messages, indefinitely. Nothing else is deleted automatically after a set period.
| Category | Retention |
|---|---|
| Call recordings (audio) | 3 years, then deleted. Not deletable by anyone before that |
| Transcripts, summaries | Indefinite. Not deletable by anyone, and they survive account deletion |
| Messages, photos, videos, documents, voice memos | Indefinite |
| Lists, notes, map pins, follow-ups | Indefinite |
| Frozen list snapshots | Indefinite and not deletable by any means |
| Account profile and settings | Until you delete your account |
| Transformed address-book entries from the contacts check | Not retained. They are matched against Walkie Pro accounts in the request and not kept — Section 2.2 |
| Contacts-check rate counter — how many entries an account submitted in the current hour, and no contact data | The current hour. The previous hour’s count is cleared on that account’s next check |
| Records of people who were called — phone number, name, recording, transcript, summary | Indefinite, except the call audio, which is deleted after 3 years |
| Bulletin posts, access grants, access requests, and revocations | Indefinite. Expired posts and resolved requests are retained, not deleted |
| Public bulletin page links and their aggregate view counts | Indefinite, including after the link expires or is revoked |
| Access requests from people with no Walkie Pro account — the name and mobile number given, the post asked about, the note, the record of consent, and the outcome | Indefinite. Declined and expired requests are kept as well as granted ones |
| Guest access links and their open records — first opened, number of opens | Indefinite, including after every item on the link has been taken back |
| Download-link email consent record — a one-way hash of the address, the time, a hashed internet address, user agent, disclosure version | 90 days. The address itself is not retained once the email is sent — Section 6.9 |
| Product update list — email address and the record of consent behind it | Until you unsubscribe. A minimal record that you unsubscribed is kept after that, so we do not mail you again — Section 6.10 |
| Diagnostics and crash reports | Retained on our infrastructure; no separate crash-reporting service is currently active |
| Website analytics and advertising data | Up to 14 months in our analytics and advertising accounts. Meta and Google keep what we send them under their own terms |
| Slack connections — the workspace, connected channels, account links, and the record of each message that crossed | Indefinite, including after the connection is removed. What was sent to Slack is kept by Slack under the workspace’s rules — Section 6.13 |
| Calls to Walkie support — the number called from, the recording, transcript, summary, questions asked, any message or email address given, verification events, and any yes to a text, whether or not the caller has an account | Indefinite. LiveKit’s own diagnostic copy is deleted after 30 days — Section 2.7 |
| Deleted-account record | Indefinite — Section 9.3 |
The Services exist so project history stays retrievable. Our Data Retention Schedule has the detail.
9. Deleting your account
9.1 How
In the app under Settings, or by writing to support@walkiepro.com.
9.2 What deletion does
Deleting your account closes your access. It does not remove you from the record.
Deletion removes:
- Your ability to sign in
- Your email address from your profile, so it no longer identifies you in the Services
- Your profile photo
- Your settings, preferences, and follow-up lists
9.3 What remains
- Your name, wherever it appears in conversations, transcripts, summaries, lists, and snapshots
- Your phone number, which we retain
- Call recordings, transcripts, and summaries including your recorded voice and your words. Call audio is kept for 3 years and then deleted; transcripts and summaries are kept like messages, indefinitely
- Messages, photos, videos, documents, and voice memos you sent
- Lists, notes, map pins, and frozen snapshots you created or were named in
- Anything already sent to a connected Slack workspace, which Slack keeps under that workspace’s rules — Section 6.13
- A restricted internal record containing your email address, kept so a recycled address cannot be used to reconnect to conversations it no longer belongs to. This record is retained indefinitely and the address is not deleted from it — which is why we say your email is removed from your profile rather than deleted
9.4 Why
Walkie Pro exists to give everyone on a project the same reliable account of what was said and agreed. That only works if the record is stable — a record any participant could erase afterward, particularly a record of a commitment they made, would be worth nothing to the people who relied on it.
A call recording is not only your personal information. It is equally the record of every other person on that call. Removing it at one person’s request would take something from everyone else.
This is why we tell you a call is recorded before you answer it. The decision point is before you speak, not after.
10. Security — and its limits
We use administrative, technical and physical safeguards designed to protect your information, including encryption in transit, access controls and restricted internal access, and we keep improving them. Calls to ordinary phone numbers travel over the public phone network, which is not encrypted end to end. Keep your phone locked. Anyone who can unlock it can read what Walkie has stored on it. No system is completely secure.
If you believe your account has been compromised, contact support@walkiepro.com immediately.
11. Your choices
| Control | How |
|---|---|
| Contacts | Turn off contacts permission in device settings. On iPhone you can also choose to share only some contacts rather than all of them. We do not keep your address book, so there is nothing for us to remove; the matches are held by the app on your phone — Section 2.2 |
| Location | Turn off location permission. To stop photo GPS, turn off location for your camera app |
| Push notifications | Device settings, or notification preferences in the app |
| Text messages | Reply STOP to any text, or HELP for help. Texts are sent only when you choose them — see the Text Messaging Terms. A sign-in code is sent only when you ask for one |
| Access-request texts | Reply STOP to any message we send, or write to support@walkiepro.com. Opting out stops them on every job, not only the one you asked about — Section 6.8 |
| Access-request emails | One or two for each request, then they stop by themselves. Write to support@walkiepro.com to have the record removed — Section 6.11 |
| Contact-form confirmation email | One for each message you send us, at most one a day, then nothing. Write to support@walkiepro.com if you did not send the message — Section 6.12 |
| Product update emails | Click the unsubscribe link in any update, or write to support@walkiepro.com. Unsubscribing has no effect on your account or your use of Walkie Pro — Section 6.10 |
| Advertising | On the website: the Cookie preferences link in the footer, or a Global Privacy Control signal. For your account: email support@walkiepro.com with the subject “Do Not Share”. On iPhone: Settings → Privacy & Security → Tracking — Section 13 |
| Slack (Send to office) | Send only what you want in Slack. The office’s owner can disconnect it at any time; that does not remove what was already sent — Section 6.13 |
| Microphone and camera | Device settings — though calls require the microphone |
| Your account | Update or delete in Settings |
You cannot turn off call recording. It is not a setting. If you do not want to be recorded, do not answer the call.
12. Your privacy rights
Depending on where you live, you may have rights to know what we hold, get a copy, correct inaccuracies, request deletion, and not be discriminated against for exercising them.
To make a request, email support@walkiepro.com with the subject “Privacy Request.” We will verify your identity using information already associated with your account. An authorized agent may act for you with written proof.
We respond within 45 days, and may extend once by a further 45 days where necessary.
Before you make a deletion request, please read Section 9. We will honor deletion of your account and profile information. We generally cannot delete conversation content, recordings, transcripts, or summaries ahead of their schedule, because they are equally the records of other participants, and because we retain them to establish and defend legal claims. Call audio is deleted 3 years after the call either way, and its transcript and summary are kept like messages, indefinitely. Where we decline, we will tell you specifically what we removed, what we retained, and why.
If we decline a request, you may appeal by replying to our response. Some states also allow you to complain to your Attorney General.
13. Your privacy choices
Wherever you live, you can ask us to:
- Tell you what we hold about you, and give you a copy of it
- Correct something we hold that is wrong
- Delete your account and your profile information
To make a request, use the process in Section 12. It costs nothing, and we do not treat you differently for asking. Before you ask us to delete something, please read Section 9 and Section 12 — they say what we remove, what stays, and why.
Turning off ad tracking. We advertise Walkie Pro, and Section 7 sets out exactly what each advertising platform receives. You can refuse it:
- On the website, the Cookie preferences link in the footer lets you refuse the Advertising category at any time. It appears on every page. With it off, Meta’s pixel is not loaded, Google’s tag writes and reads no advertising cookie, no advertising cookie is set at all, and no website visit data goes to an advertising platform — the only thing Google receives is the consent-state ping described in Section 7.
- We honor Global Privacy Control (GPC). If your browser or an extension sends a GPC signal, we treat it as a refusal for that browser, and you need do nothing else.
- For your account, email support@walkiepro.com with the subject “Do Not Share”, from the email address on your account. From then on we send no signup or payment event about your account to any advertising platform. We act on it within 15 business days and tell you when it is done. It changes nothing about your account or how the app works.
- On iPhone, you can also turn tracking off for Walkie Pro, or for every app, in Settings → Privacy & Security → Tracking.
You may also opt out of Google Analytics on any website using the Google Analytics Opt-out Browser Add-on, manage the ads Meta shows you at facebook.com/adpreferences, and manage the ads Google shows you at myadcenter.google.com. Meta’s own use of what it receives is governed by the Meta Privacy Policy, and Google’s by the Google Privacy Policy.
We do not use your communications for advertising, and nothing you create or say in the app is ever sent to an advertising platform — Section 7 sets out the line in a table.
If we say no, you can appeal. Reply to our answer and tell us why. We will look at it again and give you our decision and our reasons in writing.
14. Europe, the United Kingdom, and Switzerland
This section applies only where we offer the Services in the EEA, the UK, or Switzerland. We do not currently do so. It is published in advance so our position is clear.
14.1 Controller and representative
Walkie Corporation is the controller. Before offering the Services in these regions we will appoint a representative under Article 27 UK/EU GDPR and publish their details here.
14.2 Legal bases
| Processing | Basis |
|---|---|
| Providing the Services, including recording, transcribing, and summarizing calls | Article 6(1)(b) — necessary to perform our contract with you |
| Making recordings available to other conversation members, and retaining the record | Article 6(1)(f) — our legitimate interests and those of other participants in a reliable shared project record capable of establishing what was agreed |
| Contact matching (not stored) | Article 6(1)(f) — legitimate interest in connecting users, balanced against the interests of people in address books. Transformed entries are matched against Walkie Pro accounts in the request and not retained, and join notifications are produced on the user’s own device — Section 2.2 |
| Security, fraud prevention, enforcing our Terms | Article 6(1)(f) |
| Legal compliance | Article 6(1)(c) |
We have documented a legitimate interests assessment for each Article 6(1)(f) basis and will provide a summary on request.
We do not rely on consent as the legal basis for call recording, because recording cannot be switched off and cannot be undone. Relying on consent would imply a control you do not have. We think it is more honest to say that recording is what the Service is, disclose it before every call, and let you decide whether to answer.
14.3 Your rights
Access, rectification, erasure, restriction, portability, objection, and the right to complain to your supervisory authority.
14.4 Erasure — please read
We will erase your account and profile information. We will generally not erase conversation content, call recordings, transcripts, or summaries. Our grounds:
- The data remains necessary for the purpose it was collected — a stable shared record — so Article 17(1)(a) is not met
- Retention is necessary for the establishment, exercise, or defence of legal claims under Article 17(3)(e). Construction disputes turn on what was agreed, and that is what this record exists to preserve
- The record is joint personal data. A recording is equally the personal data of every other participant, and erasing it would remove their record and override their rights
Where you object under Article 21(1), we will weigh your interests against those of the other participants and tell you the outcome and our reasoning.
If this is not acceptable to you, do not use the Services. We would rather be clear in advance than argue about it later.
14.5 Transfers
Data is processed in the United States. Where we transfer personal data from these regions we will use Standard Contractual Clauses (or the UK Addendum) with supplementary measures as needed, and provide a copy on request.
14.6 Automated decision-making
Automated systems generate summaries and suggestions. They do not make decisions producing legal or similarly significant effects about you. Any consequence follows from what people in your conversation choose to do.
15. Children
The Services are for people 18 and over. We do not knowingly collect information from anyone under 18. If we learn that we have, we will close the account and remove the profile information — though content in shared conversations is subject to Sections 8 and 9. Contact support@walkiepro.com if you believe a minor is using the Services.
16. Changes
We may update this policy. The “Last updated” date shows when. If a change is material, we will make reasonable efforts to tell you in the app, by email, or on the website before it takes effect. Continued use after that means you accept it.
You can request the version in effect on a particular date by writing to support@walkiepro.com.
17. Contact
Walkie Corporation (dba Walkie Pro) 23945 Calabasas Rd, Suite 101, Calabasas, CA 91302, United States support@walkiepro.com · +1 (323) 504-7400
Privacy requests: email with the subject “Privacy Request.”