AllSpeak AI Privacy Policy
Last updated: 2026-10-08 (draft, pending legal review)
AllSpeak AI ("AllSpeak AI", "we", "us") is a Windows app that translates in-game chat in real time. It is run from New York, USA. For questions and requests, write to allspeakai@gmail.com.
This policy explains what data the app and our servers handle, why, who receives it and what you can do about it. The English version is the binding one; translations are for convenience.
The short version
- The app reads the chat area of your game window on your PC. Text recognition runs on your PC; screenshots never leave it.
- Chat lines that need translating and the messages you type go through our server to AI providers to be translated. Before that, the app replaces players' names with codes like P1. Names written inside a message are sent as written.
- Our servers don't store chat. They store your account, your plan, daily usage counts and short-lived security logs.
- We don't sell your data, show ads, or use your chat to train AI models.
- AllSpeak AI is for adults: you must be 18 or older.
1. What we handle and why
Kept on your PC (we can't see it)
- Your settings: languages, hotkeys, overlay layout and your in-game name.
- Your Steam display name, read from your local Steam files so that your own messages aren't translated back to you.
- If you turn it on: a history of translated lines.
- The app reads the game window with Windows screen capture and recognizes the text on your PC. For some games it also reads the console log the game writes to disk, only if you start the game with the -condebug option. It doesn't inject code into games or read their memory.
- To put a translation into the game chat, the app uses the clipboard and simulated key presses (Ctrl+V and, if you allow it, Enter).
- The stream page for OBS (http://127.0.0.1:17890/overlay) is served only on your PC.
Sent to our servers
- Account: your email address; the IDs the sign-in services give us (Google account ID and email, Discord user ID and username, SteamID64 and Steam display name); when you signed up; invite codes you redeemed.
- Plan and payments: your plan, its status and end date, and the IDs Paddle or Steam give us for your purchase. We never receive your card details.
- Usage: how many lines were translated each day, in which direction, by which provider and what it cost us. We use this for the free quota, the fair-use limit and our costs.
- Text to translate: chat lines and your messages, with the target language and up to three earlier lines for context, with players' names replaced by codes. We pass the text to an AI provider and return the translation. We don't save it or link it to you; common lines (like "gg wp") stay in an in-memory cache of recent translations, shared by all users and cleared when the server restarts.
- Technical data: IP address, app version, Windows version and a random install ID (stored hashed), which limits how many free accounts can be created on one PC. We use your IP address to choose the AI provider for your region, to protect the service from abuse and in short-lived security logs.
- Update checks: the app asks our update server whether a new version exists. The request includes the app version and your IP address.
- Support: what you send us when you contact us.
What we don't collect
- Screenshots or video of your screen.
- Your voice or microphone.
- Payment card details: Paddle or Steam handles them.
- Crash reports or usage analytics: the app sends none today. If we add them, we'll update this policy first and ask for your permission where the law requires it.
2. Why we may use your data (legal bases)
- To provide the service you asked for (contract): your account, sign-in, translation, your plan and quotas, and support.
- Our legitimate interests: keeping the service secure, preventing abuse of free quotas, choosing providers by region, keeping translation reliable, and translating other players' chat for you (see section 4).
- Legal obligations: tax and accounting records (mostly kept by Paddle) and lawful requests from authorities.
- Your consent, where we ask for it: for example, emails about product news. You can withdraw consent at any time.
We don't make decisions about you based solely on automated processing that have legal or similarly significant effects.
3. Who receives data
We share data only with companies that help us run AllSpeak AI, and only what they need:
- AI providers translate the text: OpenAI (USA) and Google (Gemini API, USA). For users of the mainland China route: DeepSeek and Alibaba Cloud (Qwen) in China, see section 9. Under their terms, OpenAI and Google don't use this text to train models. They may keep it for a limited time to detect abuse: up to 30 days at OpenAI and up to 55 days at Google.
- Paddle (payments) sells our subscriptions as the merchant of record and handles payment, tax, invoices and refunds. Paddle is responsible for the data it collects at checkout under its own privacy notice.
- Valve (Steam): if you buy through Steam or sign in with Steam.
- Sign-in services: Google, Discord and Steam, if you choose them.
- Infrastructure: Fly.io (servers, USA), Supabase (database, USA), Cloudflare (network, website, downloads) and Resend (sign-in and account emails).
- Authorities, when the law requires it. If AllSpeak AI is transferred to a company we form or to a buyer, your data goes with it; we'll tell you first.
We don't sell personal data or share it for targeted advertising.
4. If a AllSpeak AI user translated your chat
If you play with someone who uses AllSpeak AI, the app on their PC may read what you write in the game chat. Lines that need translating are sent, with up to three earlier lines, to an AI provider to translate them into that player's language. Before sending, the app replaces player names with codes like P1. Names or other details written inside a message are sent as written. We don't store these messages, we don't build profiles of players and we can't link a message to you.
We rely on our legitimate interest, and that of our users, in understanding team chat across languages. You can object or ask questions at allspeakai@gmail.com. Because we don't keep these messages or know who wrote them, there is usually nothing we can find or delete, but we'll tell you what we can do.
5. International transfers
We are based in the USA and our servers are in the USA. If you live in the EU, the UK or another region with data transfer rules, your data is transferred to the USA. We rely on the EU-US Data Privacy Framework (and its UK and Swiss extensions) where the recipient is certified, and on the European Commission's Standard Contractual Clauses (with the UK Addendum) otherwise. Data we get from Steam is stored in the USA. Contact us for a copy of the relevant safeguards.
6. How long we keep data
- Text to translate: we don't write it to disk or link it to you. Recent translations stay in the server's memory cache, without any user link, until they are pushed out by newer ones or the server restarts. AI providers may keep the text for a limited time, as described in section 3.
- Account and plan: while your account exists. We delete them within 30 days after you delete your account, and backups roll over within a further 30 days.
- Daily usage counts: 13 months.
- Security logs with IP addresses: 30 days.
- Support emails: 2 years after the conversation ends.
- Payment records: kept by Paddle or Steam as tax law requires.
7. Your rights
Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it or send it to you in a portable format, to restrict or object to how we use it, and to withdraw consent you gave. You can delete your account in the app's account page or by writing to allspeakai@gmail.com. We answer within one month (45 days for California residents) and won't treat you differently for using your rights.
- EU and UK: you can also complain to your data protection authority. EU representative: [EU REPRESENTATIVE]. UK representative: [UK REPRESENTATIVE].
- California and other US states: we don't sell or share personal information and don't use sensitive personal information to infer characteristics about you. An authorized agent can make requests for you.
8. Age
AllSpeak AI is for adults (18+). We don't knowingly collect data from anyone under 18. If you believe a minor uses AllSpeak AI, tell us and we'll close the account and delete its data.
9. Users in mainland China
When the mainland China route is available and you choose it, we handle your data under China's Personal Information Protection Law as follows:
- Text to translate goes to DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.) and, as a backup, Alibaba Cloud (Qwen). They process it in China under Chinese law.
- Your account data and the text to translate are transferred to our servers in the USA.
- Before you use the route, we ask for your separate consent to both. You can withdraw it at any time by switching the route off in Settings.
- To exercise your rights, write to allspeakai@gmail.com.
10. Security
We encrypt data in transit (HTTPS), keep sign-in tokens in Windows Credential Manager, limit access to our systems and don't log chat text. No system is perfectly secure. If a data breach affects you, we'll notify you and the authorities as the law requires.
11. Streaming the overlay
If you show the overlay or the stream page in a broadcast or a recording, you make other players' names and messages public. You're responsible for that and for following the rules of the platform and the game.
12. Cookies and Do Not Track
The app uses no advertising or tracking cookies. Our website uses only cookies it needs to work. Because we don't track you across websites, we treat every visitor the same whether or not the browser sends a Do Not Track or Global Privacy Control signal.
13. Changes to this policy
We'll post updates here and tell you in the app. For material changes we'll ask you to review and accept them before you continue.
14. Contact
AllSpeak AI, New York, USA. Email: allspeakai@gmail.com.