Saylator Privacy Policy
Last updated: 24 October 2026
Saylator is a voice translator for your phone: you hold the button, speak, and Saylator says it out loud in the other language. This policy explains, in plain words, what data that takes, where it goes, how long it is kept and what you can do about it.
The short version
- You do not create an account. We never ask for your name, email address or phone number.
- What you say is turned into text on your phone, sent to our server and to Anthropic (the company behind the Claude AI) to be translated, and then turned into speech on our own server. We do not store your conversations.
- Your conversation history stays on your phone, and you can delete it at any time.
- To keep track of your credits we store a random device identifier, a hash of a device secret and your credit records. Nothing in them says who you are.
- Payments are handled by Apple or Google. We never see your card details.
- No ads, no tracking, no analytics tools, and we do not sell your data.
1. Who is responsible
The data controller (in Turkish law, the "veri sorumlusu") for Saylator is:
USK MOBILE
Email: support@saylator.com
This policy is written to meet the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law No. 6698 (KVKK). It covers the Saylator app on iPhone and Android and the website saylator.com.
2. What we process and why
2.1 What you say
- Speech recognition happens on your phone's own system. When you hold the talk button, Saylator uses the speech recognizer built into your phone: Apple's on iPhone, Google's on Android. Depending on your phone and language, Apple or Google may process the audio on the device or on their own servers, under their own privacy policies. Saylator never receives a recording of your voice. It only receives the recognized text.
- The text is translated. The text is sent over an encrypted connection to our server, which sends it to Anthropic's Claude AI to be translated. So that "it" and "that one" are translated correctly, the last two exchanges of the current conversation (at most 300 characters of each) are sent along as context.
- The translation is spoken. Our own server turns the translated text into speech and sends the text and the audio back to your phone.
- Nothing of it is stored on our server. The text and the translation are held in memory only while the translation is running, usually a few seconds. Our server logs never contain what you said or its translation. One exception, which says nothing about you: so that very common short phrases (six words or fewer, such as "Thank you" or "How much is it?") play faster, the spoken audio of such a translated phrase may be kept in a cache on our server. A cache entry is not linked to any device or person, and old entries are removed automatically as the cache fills.
Please do not say anything you would not want an AI service to process. Saylator does not need sensitive information to work, and we do not ask you for it.
2.2 Quick phrases
The ready-made quick phrases play audio that is already on your phone. Using them sends nothing to us.
2.3 Device identifier and device secret
When Saylator first starts, it creates two random values on your phone:
- a device identifier, which names your phone's credit balance on our server, and
- a device secret (a 256-bit random value), kept in your phone's secure storage, which proves that requests really come from your phone.
Our server stores the device identifier and only a one-way hash of the secret, never the secret itself. Neither value is your Apple ID, your Google account, your phone number or an advertising identifier, and we do not link them to any of those.
2.4 Credit records
For each device we keep its credit balance and a record of every change to it: free gift credits, credits spent on a translation, credits given back when a translation fails on our side, purchases, refunds by Apple or Google, and manual corrections by our support. Each record holds the device identifier, the type of change, the number of credits, a reference and the time. These records are what make sure you get exactly the credits you paid for.
2.5 Purchases
Credits are bought through the Apple App Store or Google Play, which handle the payment. To add the credits, our server checks the purchase with Apple or Google: it receives the signed transaction (Apple) or the purchase token (Google) and records the transaction or order identifier, the product and whether it was a test purchase. We never see your name, your payment card or your store account. Each purchase is tied to your device by a code derived from the device identifier, so that it cannot be claimed by another device.
2.6 Technical data
- IP address. Our server uses your IP address while you are connected, to limit abuse (for example, how many translations or free gifts one network can get in a day). These limits are kept in memory and are not written to the credit records. Our web server's access logs record the IP address and time of each connection.
- Server logs. For each translation our logs record the languages, the length in characters, timings, error codes, the AI usage counts and a shortened device identifier, but never the text or the translation. For purchases they record identifiers and amounts, never tokens or signatures.
We use this to run the service, find faults, keep it secure and price credits fairly.
2.7 What stays on your phone
Your conversation history (what you said, its translation and the spoken audio), your settings, and the device identifier and secret are stored on your phone. You can delete the history at any time in the app. Deleting the app removes them from the phone. On iPhone, the device identifier and secret are kept in the iOS Keychain: they can survive reinstalling the app and can move to a new iPhone with an encrypted or iCloud backup, so that your credits are not lost.
2.8 What we do not do
We do not show ads, track you across apps or websites, use analytics or advertising tools, build profiles, sell or rent your data, or use your conversations to train AI models.
3. Legal bases
| Purpose | GDPR | KVKK |
|---|---|---|
| Translating and speaking what you say, keeping your credit balance, checking purchases | Performance of a contract with you, Art. 6(1)(b) | Necessary for the performance of a contract, Art. 5(2)(c) |
| Preventing abuse, keeping the service secure, logs and backups | Our legitimate interests, Art. 6(1)(f) | Our legitimate interests, Art. 5(2)(f) |
| Keeping purchase records for tax and accounting | Legal obligation, Art. 6(1)(c) | Legal obligation, Art. 5(2)(ç) |
| Answering your support emails | Performance of a contract or our legitimate interests | Art. 5(2)(c) and (f) |
4. Who receives data
We share data only with the service providers we need, and only for the purposes above.
- Anthropic PBC (USA) translates the text, as our processor. Under Anthropic's commercial terms it does not use this data to train its models, and it keeps it only for a limited time under its own data retention policy.
- Hetzner Online GmbH hosts our server in Helsinki, Finland (EU), as our processor.
- Cloudflare, Inc. carries the traffic to our server and protects it, serves the website saylator.com, keeps the off-site copies of our credit backups (in a private storage bucket) and forwards email sent to support@saylator.com, as our processor.
- Google provides the mailbox to which support email is forwarded.
- Apple and Google distribute the app, take payments and provide speech recognition on your phone. For these they act as independent controllers under their own privacy policies.
- Authorities, only when the law requires it.
5. International transfers
Some of these providers process data outside Turkey and outside the European Economic Area, in particular Anthropic and Cloudflare in the United States. Where the law requires it, we rely on the safeguards it provides: for the GDPR, the EU Standard Contractual Clauses or the EU-US Data Privacy Framework; for the KVKK, the safeguards under Article 9, such as standard contracts.
6. How long we keep data
| Data | How long |
|---|---|
| What you say and its translation | Not stored. Held in memory only while it is being translated. |
| Short phrase audio cache | Not linked to anyone. Removed automatically as the cache fills. |
| History on your phone | Until you delete it or the app. |
| Device identifier, secret hash and credit records | As long as the device's credits exist. Credits never expire, so we keep them until you ask us to delete them. Purchase records are kept for as long as tax and commercial law requires (in Turkey, up to 10 years). |
| Backups of the credit records | Made daily. Kept for 14 days on our server and for 30 days in Cloudflare R2. |
| Server logs and access logs | Up to 30 days. |
| Support emails | As long as needed to handle your request and any follow-up, then deleted. |
7. Your rights
Under the GDPR and Article 11 of the KVKK you can ask us to:
- tell you whether we process data about you, and give you a copy of it;
- correct it if it is wrong;
- delete it, or restrict how we use it;
- give it to you in a portable format;
- tell you who we have shared it with, including abroad;
- stop processing it where we rely on our legitimate interests (you can object);
- make up for any damage caused by unlawful processing.
To make a request, write to support@saylator.com. Because Saylator has no accounts, we do not know who you are. To find your data, please send the Apple transaction ID or the Google Play order ID of one of your purchases (you will find it on the store's receipt email). Without a purchase we may not be able to tell which device is yours; in that case, deleting the history and the app removes everything that is on your phone. Deleting your device's credit records also deletes its credits. We answer within 30 days, free of charge.
You can also complain to a data protection authority: in Turkey, the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu, www.kvkk.gov.tr); in the EU, the authority in the country where you live or work.
8. Children
Saylator is not directed to children under 13, and we do not knowingly process data about them. If you believe a child under 13 has used Saylator, write to us and we will delete what we hold about that device.
9. Security
All connections between the app and our server are encrypted (TLS). Each device proves itself with its own secret, of which our server keeps only a hash. Every change to a credit balance is recorded, and the records are checked against the balances. Our keys stay on our server and are never placed in the app. Backups are kept in a private storage bucket that only we can access.
10. The website
saylator.com is served by Cloudflare. It does not use cookies for tracking or advertising. Cloudflare processes visitors' IP addresses to deliver and protect the site.
11. Changes to this policy
When we change this policy, we update the date at the top. If a change affects how your data is used in an important way, we will also say so in the app or on saylator.com.
12. Contact
USK MOBILE
support@saylator.com