← keeptalking.dev

Terms & Privacy

KeepTalking Ltd. · Last updated June 2026

tl;dr
  • Your messages stay yours. All conversations are end-to-end encrypted on your device. Our servers relay connections but cannot read your content — not even us.
  • We store very little. Our infrastructure holds only node IDs and public keys. No message history, no private keys, no conversation data.
  • Three tiers. Community is free. Individual adds preconfigured AI services. Enterprise adds custom integrations and support.
  • No data selling, ever. We do not sell, rent, or broker your personal information to anyone.
  • You must be 16 or older to use KeepTalking.
  • UK & EU privacy rights apply. Access, correct, or delete your data at any time — company@rcex.live.

Terms of Service

1. The Service

  1. KeepTalking (“the Service”) is operated by KeepTalking Ltd., a company incorporated in England and Wales (“we”, “us”, “our”).
  2. These Terms govern your access to and use of KeepTalking across all platforms — including the iOS app, macOS app, and any associated services.
  3. By using the Service you agree to these Terms. If you do not agree, do not use the Service.

2. Eligibility

  1. You must be at least 16 years old to use KeepTalking. (UK GDPR sets the minimum age for information society services at 13; however, because we serve EU residents — where the default under EU GDPR is 16 — we apply the higher threshold to protect all users uniformly.)
  2. By using the Service you confirm you meet this requirement and have the legal capacity to enter binding agreements.

3. Your node identity

  1. Your KeepTalking identity is a cryptographic key pair generated locally on your device. You are solely responsible for keeping your private key secure.
  2. We cannot recover your account, reset your keys, or restore access on your behalf. Loss of your private key means permanent loss of your node identity.
  3. You are responsible for all activity associated with your node identity.

4. Service tiers

  1. Community — free access to the core KeepTalking platform: local-first conversations, peer-to-peer connections, and SDK features.
  2. Individual — paid tier providing access to preconfigured AI services and hosted capabilities. Pricing and billing terms are displayed at the point of purchase.
  3. Enterprise — paid tier providing custom integrations, dedicated support, and bespoke configuration. Governed by a separate Enterprise Agreement.
  4. We may change pricing. For existing paid plans, material price increases will be communicated at least 30 days in advance. Continued use after that date constitutes acceptance.

5. Acceptable use

  1. You agree not to use KeepTalking to:
    1. violate any applicable law or regulation;
    2. transmit content that is unlawful, harmful, threatening, abusive, or harassing;
    3. reverse-engineer, decompile, or extract source code from the proprietary parts of the Service;
    4. impersonate any person or entity, or misrepresent your affiliation;
    5. attempt to gain unauthorised access to any node, account, relay, or infrastructure component.
  2. We may suspend or terminate access for material or repeated breach without prior notice.

6. Intellectual property

  1. KeepTalking Ltd. owns all rights in the KeepTalking name, brand, platform, and proprietary software, excluding open-source components governed by their respective licences.
  2. You retain full ownership of any content you create using the Service. Using KeepTalking grants us no licence over your content.
  3. The KeepTalking SDK is published under an open-source licence. Community contributions are governed by that licence’s terms.

7. Third-party AI services

  1. KeepTalking may allow you to connect third-party AI providers (such as OpenAI or OpenRouter). These connections are optional and configured entirely by you.
  2. When you connect a provider, your prompts and responses are sent directly to that provider. Their terms of service and privacy policies govern that data — not ours.
  3. We are not responsible for the output, availability, or data practices of any third-party AI provider.

8. Disclaimer & limitation of liability

  1. The Service is provided “as is” and “as available” without warranties of any kind, express or implied, including fitness for a particular purpose or uninterrupted availability.
  2. To the fullest extent permitted by applicable law, we are not liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of the Service.
  3. Our total aggregate liability to you shall not exceed the greater of (a) the fees you paid us in the 12 months preceding the claim or (b) £100.
  4. Nothing in these Terms limits or excludes liability for fraud, fraudulent misrepresentation, death, or personal injury caused by our negligence.

9. Changes & termination

  1. We may update these Terms. We will notify you of material changes via in-app notice or email. For paid users, changes take effect no sooner than 30 days after notice. Continued use constitutes acceptance.
  2. You may stop using KeepTalking at any time. Cancellation terms for paid plans are set out at the point of purchase.
  3. We may terminate your access for breach of these Terms, or if we discontinue the Service, with reasonable notice where practicable.

10. Governing law

  1. These Terms are governed by the laws of England and Wales.
  2. Any dispute arising from or relating to these Terms shall be subject to the exclusive jurisdiction of the courts of England and Wales.

Privacy Policy

This policy explains how KeepTalking Ltd. processes personal data. Our obligations arise under the UK GDPR, the Data Protection Act 2018, and the Data (Use and Access) Act 2025 (in force from 5 February 2026), as well as EU GDPR where we process data of EU residents.

1. Who we are

  1. KeepTalking Ltd. is the data controller for personal data processed in connection with the Service.
  2. Contact us at company@rcex.live for any data protection matter.

2. What we collect & why

  1. We collect the minimum necessary to operate the Service:
    CategoryDataPurposeLawful basis (UK/EU GDPR Art 6)
    InfrastructureNode ID, public keyPeer routing & discoveryContract — Art 6(1)(b)
    AccountEmail addressAccount management, service noticesContract — Art 6(1)(b)
    BillingPayment reference, subscription statusBilling & subscription managementContract — Art 6(1)(b)
    AnalyticsAnonymised usage events, crash reportsService reliability & improvementLegitimate interests — Art 6(1)(f)
    SupportName, email, message contentResponding to enquiriesLegitimate interests — Art 6(1)(f)
  2. What we do not collect: message content, conversation history, attachments, and private keys. These never leave your device and are never accessible to us.

3. How our infrastructure works

  1. Our relay servers route encrypted packets between peers. They handle connection metadata (source/destination node IDs, timestamps) but cannot decrypt message content — messages are encrypted on your device before transmission.
  2. Our passkey/value server stores node IDs and public keys to enable peer discovery. It has no access to private keys or message content.

4. Who we share data with

  1. Infrastructure providers — hosting and relay services process limited technical data under data processing agreements compliant with UK/EU GDPR.
  2. Payment processors — when you subscribe to a paid plan, payment data is handled directly by our payment processor. We do not store card or bank details.
  3. Legal authorities — we may disclose data where required by law, court order, or to establish, exercise, or defend legal claims.
  4. We do not sell, rent, license, or broker personal data to third parties for their own commercial purposes.

5. International transfers

  1. Where personal data is transferred outside the UK or EEA, we ensure an appropriate safeguard is in place — either an ICO adequacy decision, a UK International Data Transfer Agreement (IDTA), or EU Standard Contractual Clauses (SCCs) under Art 46 GDPR.

6. Retention

  1. Infrastructure data (node IDs, public keys) — retained while your account is active; deleted within 90 days of account closure.
  2. Billing records — 7 years, as required by UK tax law.
  3. Support communications — 3 years from resolution.
  4. Anonymised analytics — no defined limit (no personal data is retained in this dataset).

7. Your rights

  1. Under UK GDPR and EU GDPR you have the following rights:
    1. Access (Art 15) — obtain a copy of the personal data we hold about you.
    2. Rectification (Art 16) — have inaccurate data corrected.
    3. Erasure (Art 17) — request deletion where no overriding legal basis applies.
    4. Restriction (Art 18) — limit how we process your data in certain circumstances.
    5. Portability (Art 20) — receive your data in a structured, machine-readable format.
    6. Object (Art 21) — object to processing based on legitimate interests.
    7. Withdraw consent — where processing relies on consent, withdraw it at any time without affecting lawfulness of prior processing.
  2. To exercise any right, contact company@rcex.live. We will respond within one month (extendable by two further months for complex requests, with notice).
  3. Under the Data (Use and Access) Act 2025 (effective 19 June 2026), you have the right to raise concerns with us directly before approaching the supervisory authority. We will acknowledge your concern within 30 days.
  4. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk, or — for EU residents — with your local data protection authority.

8. Security & breach notification

  1. All messages are end-to-end encrypted. Our infrastructure cannot read your content at any point.
  2. We apply appropriate technical and organisational measures to protect the personal data we do hold, including access controls, encryption at rest, and regular security review.
  3. In the event of a personal data breach likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and report to the ICO within 72 hours of becoming aware, as required by Art 33–34 UK/EU GDPR.

9. Children

  1. KeepTalking is not directed at, and should not be used by, anyone under 16.
  2. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has registered, contact company@rcex.live and we will delete that data promptly.
  3. Age threshold note: UK GDPR sets the consent age for information society services at 13 (s.9 DPA 2018). EU GDPR defaults to 16, with member states permitted to lower it to 13. We apply 16 across all jurisdictions as the conservative standard covering all EU member states uniformly.

10. Changes to this policy

  1. We may update this policy as the Service evolves or as regulatory requirements change. Material changes will be communicated by in-app notice or email before taking effect.
  2. The current version is always available at keeptalking.dev/legal.