Privacy policy

1. Who we are

ZuluTalk is a product of Thanaaya Technologies, an establishment licensed by the Dubai Department of Economy and Tourism under professional licence 964356 (unified licence BL1484), established in 2021, at Office 2106-B40, Westburry Tower 1, Business Bay, Dubai, United Arab Emirates. We are the controller of the personal data described in this policy. It covers this website (zulutalk.com), the ZuluTalk app, and problem reports sent to reports@zulutalk.com.

2. The ZuluTalk app

The ZuluTalk app does not send us any personal data. It contains no advertising, no analytics and no crash reporting. Your contacts, call history and settings are stored on your phone.

The app connects to the SIP server of the account you add, and to any setup link you open. That service processes your calls, and its operator is responsible for that data under its own privacy policy.

In version 1.2, accounts you add by hand use Belledonne Communications' public STUN server (stun.linphone.org) by default to work out your public IP address for calls, so Belledonne receives that IP address. This default is removed in version 1.3.

The app asks for permissions such as the microphone, camera, contacts and notifications only for its calling features.

3. Problem reports and logs

In version 1.2, the app's Share logs button uploads logs to Belledonne Communications' file server, which is Linphone's default. We ask users not to use it. From version 1.3, it attaches the logs to an email to us instead.

If you email us at reports@zulutalk.com, we receive your email address, your message, and any logs you attach. App logs can contain your device model, app version, SIP addresses, phone numbers, IP addresses and call times. We use them only to answer you and fix the problem, and delete them when they are no longer needed for that.

4. ZuluTalk accounts on our own server

We do not sell phone service. We run a private SIP server for a small number of invited users. If we have given you an account on it, we process your account name and extension, the IP address and app details of your registered devices, call records (who called whom, when, for how long and the outcome), and voicemail left for you. Where you have asked for it, missed call alerts and voicemail are forwarded to a messaging app you choose. This data is used only to run the service. Call records are kept for record keeping and to resolve problems. Voicemail is kept until it is deleted.

5. This website

zulutalk.com is hosted on GitHub Pages. GitHub records the IP address and request details of visitors in its server logs for security and operation. See the GitHub privacy statement. This site sets no cookies, uses no analytics and loads nothing from third-party servers. Downloads from GitHub are also covered by GitHub's privacy statement.

6. Marketing

We do not send marketing. We will not add you to a mailing list because you contacted us, and we do not sell, rent or share personal data for anyone's marketing.

7. Who else sees it

Our mail and servers are operated by us on infrastructure we control. Outgoing email may be delivered through a transactional email provider acting on our instructions. We disclose personal data to no one else, except where the law requires it.

8. Your rights

You may ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Write to info@thanaaya.com and we will respond within a reasonable period.

9. Security

This website and our email are encrypted in transit. Calls through our own server use SIP over TLS with SRTP where the device supports it. Data at rest is held on infrastructure we operate, with access limited to the people who need it.

10. Changes

If we change this policy we will update this page. Material changes will be noted here with the date they took effect.