GoToc Privacy Policy

Article1 — Data processed and purposes

Good Morning Nha Trang (the Operator) describes how GoToc and its website handle personal data, distinguishing transmitted information from information retained by the Operator. Audio and voice may include personal conversations and are processed to send capture-permitted audio between devices after the user starts transmission and grants required Android permissions. Temporary connection data may include IP addresses, endpoints, session identifiers and connection status. Language and transmission settings may be stored locally. Support email, message contents, attachments and replies are processed for assistance. Website access may generate IP, time, requested path and browser logs. GoToc has no account registration or login and does not seek sign-up passwords or profiles.

Article2 — Legal grounds and permitted use

Processing is limited to delivering user-requested connections and audio, answering enquiries, protecting security and stability and fulfilling legal duties. Depending on the activity, the legal basis may be contract performance, legal obligation, legitimate interests or consent; separate consent will be obtained where required.

Article3 — Live audio transmission and storage

Only when users expressly start transmission is audio sent to a connected recipient, who may hear private conversation. GoToc does not offer central-server storage of voice as conversation history, though temporary memory, operating-system processing and network transfers occur. Recipients may record, store or resend audio; independently used translation and media apps have their own practices. Material changes such as relays, analytics, recording or retention features will be disclosed with necessary consent.

Article4 — Retention periods

Transmitted audio is processed temporarily and is not saved as a central-server recording or chat history; transmission buffers are released when the session ends. Connection information is needed temporarily during setup and use, not as a permanent conversation log. Local settings may be deleted by clearing app data or uninstalling, subject to OS backup behavior. Support emails and replies are kept no more than one year after a request is closed, unless legal duties or active disputes require otherwise. Website technical access logs are kept no more than 30 days unless law requires otherwise. Other legally required records are separated and deleted after the required period.

Article5 — Deletion procedures

When purposes are fulfilled or retention expires, personal data is deleted promptly unless retention is required by law. Electronic information is removed using methods reasonably preventing recovery appropriate to the storage medium; any paper records are securely destroyed. Temporary transmission memory is not the same as a stored recording. Records on recipients' devices or third-party apps are controlled by those parties, not the Operator.

Article6 — Recipients and third-party disclosure

The connected recipient device receives audio by design. The Operator does not sell personal data or audio or use it for third-party behavioral-advertising disclosure. If further third-party disclosure occurs, the recipient, data categories, purpose and legal basis will be disclosed and necessary legal processes followed.

Article7 — Processors and international transfers

External providers may support website hosting, email delivery or network connections. When they process information on the Operator's behalf, the Operator will identify the processor and entrusted work and apply appropriate safeguards as required by law. International transfers or overseas processing, if any, will be disclosed with recipient, country, purpose, data, transfer method and time, retention, rights and required procedures. Separately operated Google Translate, YouTube and similar apps follow their own privacy policies.

Article8 — Independent third-party apps

External apps independently determine their own speech recognition, translation, speech synthesis, account and usage-record processing. GoToc does not operate those third-party services; their data processing is separate from GoToc's transmission of permitted playback audio.

Article9 — User and guardian rights

Users may request access, correction, deletion, restriction/suspension of processing or withdrawal of consent as available under law at info@gotoc.app. The Operator may verify identity and process lawful requests. Guardians or authorized representatives can exercise rights where permitted. There is no GoToc account to close. Local data can be controlled by resetting settings, clearing app data or uninstalling. The Operator cannot delete records it does not possess.

Article10 — Children and young people

GoToc does not request children's personal details through account creation. If information about a child is received through support or other channels, required parental consent and safeguards will be applied. Legal guardians may request access, correction or deletion under applicable law.

Article11 — App permissions and audio transmission

To transmit user-requested audio, GoToc uses Android permissions and approvals related to audio capture, MediaProjection and foreground services as appropriate to the device, OS and feature. The app explains that audio is sent to another device and how to stop transmission, and obtains legally or platform-required consent. Users can start, inspect status and stop sending.

Article12 — Security safeguards

The Operator takes appropriate technical and organizational measures, such as access controls, protecting transmissions, limiting permissions, minimizing temporary data and reviewing configuration changes. It does not claim encryption or relay-server security beyond what is actually implemented.

Article13 — Cookies and automatically collected data

The website may use browser cookies or produce access logs. Users can restrict or delete cookies in their browser, which may affect functionality. If tracking, advertising or analytics tools are introduced, their added processing and purposes will be disclosed.

Article14 — Data protection contact

Controller/operator: Good Morning Nha Trang (굿모닝나트랑). Representative: Lee Sang-won (이상원). Registration: 327-16-02414. Address: 4th Floor, H17, 81 Singal-ro, Giheung-gu, Yongin-si, Gyeonggi-do, Republic of Korea. Privacy enquiries and rights requests: info@gotoc.app. Website: https://gotoc.app. Privacy contact: Good Morning Nha Trang privacy desk, info@gotoc.app.

Article15 — Changes to the policy

Changes to this policy, their effective dates and significant details will be announced in the app or on the official website. Separate notice or consent will be obtained when legally required. Effective date: October 25, 2026.

Connection security and data minimization

GoToc requires no account registration or login. The connection service processes only the six-character invitation code, minimal identifiers needed to locate a sending session, and information needed to maintain or revoke that session. The Operator does not store transmitted audio, translations, or conversation recordings on its servers.

Only the sending device owner retains invitation-session management authority. Looking up a code does not disclose the sender-only management secret to a receiver. A new device requests access, and the sender may allow or reject it; rejected devices are blocked. Ending the sending session invalidates its code.

Audio between devices uses an encrypted WebRTC transport path. Invitation and third-party signaling infrastructure may participate in connection setup, exposing IP addresses or network metadata to relevant providers. Transport encryption does not control recordings or data stored on recipient devices or independent translation apps.