Home/Security
Security

A small product with a small attack surface

PTT Talkie does not ask for an account, a phone number or your contacts. That removes entire categories of risk before a single line of code runs.

How the product is designed

Identity stays on your device

There is no user database and no login. Your installation is identified by a random value generated locally; clearing the app data or reinstalling produces a new one. Nothing links that identifier to a real person.

Voice is retained briefly, then deleted

Voice segments are held on the server for 24 hours so that members who were offline can still catch up, then removed automatically. Voice is not used for advertising, profiling or training.

Channels are closed by default

A channel is reachable only if you know its 6-digit number, and a 6–8 digit password can be required on top. Members who leave deliberately are not silently readmitted.

No third-party trackers

The app contains no advertising SDK, no analytics SDK and no social login. This website loads no external scripts, fonts or images.

Updates come from the product itself

New versions are installed from the app's own update screen. The installer permission is used for that single purpose and nothing else.

Data at a glance

What exists, where, and for how long

Account dataNone. No email address, no phone number, no password for a user account.
Device identifierRandom value generated on the device, stored locally, not linked to a person.
Contact listNever read from the device and never uploaded.
Voice segmentsStreamed to members of the channel; kept on the server for 24 hours for offline replay, then deleted.
Message historyStored on the device so you can replay it. Clearing app data removes it.
Channel passwordVerified by the server; the app keeps only what it needs to reconnect.
AnalyticsNone. No advertising or analytics SDK is bundled.
Reporting

Found a problem?

Vulnerability reports

Please write to the security contact with enough detail to reproduce the issue. We will confirm receipt and keep you informed while we investigate. Please do not test against channels or devices you do not own.

Privacy questions

Questions about what is stored and for how long are welcome at the privacy contact. The privacy policy describes each category of data and its retention period.

Security contact

bp_ptt@gmail.com

Privacy contact

bp_ptt@gmail.com