TalkKim Privacy Policy (pre-trial)

Version AU-PT-PP-1.1

TalkKim was called AURA. Some screens in your app may still say AURA until the next update; this policy covers the app under either name.

Version AU-PT-PP-1.1 · Effective: 21 Oct 2026

1. Who we are. The TalkKim pre-trial is provided by EBIZCO AUSTRALIA PTY. LTD. (ABN 44 091 466 858, 29 Farrer Street, Braddon ACT 2612) ("we"). Privacy contact: admin@ebizco.com.au. This policy follows the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). The pre-trial is invite-only, free and for people 16 and over (at sign-up you tick "I am 16 or older").

2. What we collect, why, where, and for how long

Information	Why	Where	Kept
Display name, phone number or email, PIN (hashed), date of birth	create, sign in to and protect your account	our servers in Australia	while your account is open
Your TalkKim Contact Book (people you add, or link with by QR code, with their phone number if their account has one): name, phone number, relationship and any other details you enter	connecting, messaging, calling, reminders; available on a new phone	our servers in Australia (backed up with your account); the keys that link your phones and your chat history stay only on your phone	while your account is open, or until you delete the contact
People you block: their account ID and when you blocked them	so we don't deliver their messages or calls	Australia	until you unblock them, or until your or their account is deleted
Message and call metadata: who to whom, when, size, call length	delivering messages, connecting calls, stopping abuse	Australia	30 days (calls: 30 days; messages: deleted on delivery, at most 30 days)
Message, photo, file, voice-note and call content	we can't read it (end-to-end encrypted)	messages and files: encrypted packets waiting on our Australian relay; calls: directly between the two phones, or, if a network blocks that, through our relay server in Australia, which can't decrypt them	messages: deleted once delivered, or after 30 days if never collected; photos, files and voice notes: deleted 30 days after the last recipient downloads them (or 30 days after sending if never downloaded)
Call connection data on our relay server: IP addresses, timing, data volume (the relay sees a random code, not your account)	connecting calls when a direct link fails; stopping abuse	Australia	14 days
Personal calendar (events you create in TalkKim)	reminders, available on a new phone	Australia	while your account is open
Your own books (income and expenses; the books don't store receipt photos) and the people you record in them (names, relationship, e.g. dependants)	keeping your household records; the Family Concession summary	Australia	while your account is open
Location and places you search for	showing the demo map and route, the address at your pin, and where you are when you ask ("Where am I?"); local weather	phone → our Australian server (routing, not stored); address at your pin and "Where am I?": your position goes from our server to OpenStreetMap Nominatim (Europe); local weather: a position rounded to ~1 km, or your address, goes to OpenWeatherMap (UK); place search: an approximate position goes to Google (USA); map tiles: Geoapify through our server	not stored
Sign-in logs, IP address, device	security, fraud prevention	Australia	24 months
Support calls: who called, when, the staff member, the outcome (the call itself is not recorded)	helping you, and checking what was done	Australia	12 months (longer only on a legal hold)
A random app-install ID and push token	sending notifications	Google Firebase (Cloud Messaging, Installations) / Apple (USA)	while you use the app
Crash reports (device, app version, error; no name, no content)	fixing the app	Google Firebase Crashlytics (USA)	~90 days
"AI help": the text of a phrase the assistant didn't understand (never audio), with context (what the assistant expected, the menu or list it was using, any order in progress, your language, the assistant's name); after three tries, the conversation so far as text; at most 5 KB per request	understanding your request (the TalkKim assistant)	Australia → OpenAI (USA) (model gpt-4o-mini)	our servers: the sentence is kept at most 5 minutes while it is worked out; no record of it is linked to you (learned sentence shapes without names or numbers (from onboarding) may be kept up to 12 months); OpenAI: not used for training under its API terms, and may be kept up to 30 days for abuse monitoring
Consent records (which consent, version, when)	showing we asked properly	Australia	while your account is open; then 24 months without your name

Voice: speech recognition and spoken replies run on your phone; audio is never sent. "AI help" (on by default): when the assistant can't understand a phrase, the text of that phrase, with a little context, may go to our Australian server and to OpenAI (USA) to work it out. If it still can't after three tries, the conversation so far is sent as text (never more than a few kilobytes). Turn "AI help" off in Settings and everything stays on your phone.
Support: you can call us from the app, Monday–Friday 9 am–5 pm (Canberra time). We keep a short record of each call (who, when, who helped, the outcome), not the call itself.
Your books: the income and expenses you record in TalkKim, and the people you record in them, are stored on our Australian servers; the books don't store receipt photos. People you record (names, relationship, e.g. dependants) are other people's information; add only what you need. Your Contact Book is also kept on our Australian servers; it's other people's information too, so add only what you need.
Calls: one-to-one calls go directly between the two phones and are end-to-end encrypted; only if a network blocks a direct link does the call go through our relay server in Australia, which can't decrypt it. In a direct call, each phone can see the other's internet (IP) address, as with any direct call; it can show a rough location. Call only people you trust.
People in another country: if you message, send a file to, call or invite someone who uses our app in another country (for example TalkKim in Vietnam), your random account ID, the encrypted content, the time, whether it is an audio or video call, and, for an invite, the invite code and your name go to our server for that country (today in Australia; later in Vietnam). We can't read the content. That server deletes a message once it is delivered (at most 30 days) and keeps call and invite records for 30 days. A record that you have been in contact with someone in another country is kept for 30 days after your last contact; a report of abuse about an account is kept for 12 months. Our servers don't send your IP address; a direct call itself shows the other phone a network address, as any call does.
Your QR code: when someone scans your TalkKim QR code, your two phones link through an encrypted handshake. If your account has a phone number, it is sent to them in that handshake (we only pass on the sealed packet and can't read it; the number isn't in the code image) and saved in their Contact Book, which is backed up on our servers with their account, like a number they typed. It only fills their phone field if it is empty. Each code works once, for 2 minutes; a new one appears after each scan. Removing someone from your contacts doesn't remove your number from theirs. If you don't want your number shared, only show your code to people you want to have it, or sign up with email instead (a number used to sign up can't be removed in the app). We never read or change your phone's own address book.
Demos: rides, hotels, food, the marketplace and TalkPOS venues use sample data. Nothing is booked, bought or delivered, and no money changes hands. A demo route you try is used to draw the map and isn't stored.
How we collect it: from you, when you sign up and use the app. We don't buy data, and we don't read or upload your phone's address book.
If you don't give it: we need your name and a phone number or email to run an account. Location and crash reports are optional; without location the demo map can't show where you are.
We don't sell personal information, show ads or track you across apps. We don't use automated decisions that significantly affect you.

3. Who we disclose it to. Service providers that work for us: our hosting provider, Vultr (data centre in Sydney, Australia); Google (Firebase Cloud Messaging, Crashlytics) and Apple (push) in the USA; Google (USA) sends our sign-in code emails; OpenAI (USA) for "AI help" text; for the demo map, Google (USA) (place search), OpenStreetMap Nominatim (address lookup, Europe), OpenWeatherMap (local weather, UK) and Geoapify (map tiles, through our server). Authorities when Australian law requires it. For users in Vietnam, Vietnamese authorities under Vietnamese law (see the TalkKim VN policy). We can't disclose message or call content because we don't have it.

Our website, ebizco.com.au, is hosted in Singapore. When you visit it, the web server records standard logs (your IP address, browser type, the page and time), kept 14 days for security, then deleted.

4. Security. Encryption in transit; one-to-one messages and calls are end-to-end encrypted (support calls with our staff are encrypted in transit, not end to end); role-based staff access. If a data breach is likely to cause you serious harm, we tell you and the OAIC under the Notifiable Data Breaches scheme.

5. Delete your account. In TalkKim (Profile → Delete account) or at https://ebizco.com.au/delete-account. Your profile, Contact Book, calendar, your own books, devices and waiting messages are deleted after 23 days (you can cancel before then); you're signed out everywhere and this phone's copy is removed now. Messages you sent stay on the recipient's phone. Your chat history isn't included in iCloud/Google backups; if you lose or change your phone, old history can't be restored. We keep only security logs (24 months) and a consent record without your name (24 months).

6. Access, correction, complaints. Ask in the app or at admin@ebizco.com.au; we reply within 30 days. If you're not satisfied, complain to the OAIC (oaic.gov.au, 1300 363 992).

7. Changes. We tell you in the app before a change takes effect. Your account carries on after the pre-trial: when the TalkKim trial and launch begin, your account, contacts and calendar stay as they are, with the same company and the same Australian servers. The full TalkKim policy then replaces this one; we show you what changed in the app first, and ask again for any new purpose.

Gallery Posts

Office Maps

TalkKim Privacy Policy (pre-trial)