Privacy Policy

CupPhone · Last updated 5 November 2026

CupPhone lets two people who do not share a language talk to each other. To do that, it has to hear what you say and read what you write. This page explains exactly what that means, in plain language.

CupPhone is operated by Achelois LLC. Where this page says “we”, it means Achelois LLC, and it is the company responsible for the information described below.

CupPhone is not end-to-end encrypted, and it cannot be. Translating your words requires our servers and our translation provider to process them. Anyone telling you a translation app is end-to-end encrypted is mistaken about one of the two.

What we store

Your email address. It is how you sign in. There is no password.
Your CupPhone number — the 12-digit number every account is given. It is how people find and call you.
Your name, the language you speak, and the voice you chose. Who can see them is explained below.
Your privacy choices — whether you share your email address, whether people can find you by it, and whether people who are not your contacts can see your photo.
Your photo, if you add one. Optional, and you can remove it.
Messages you send — both what you wrote and its translation.
Voice messages — the recording, what it was transcribed as, and its translation.
What is said on translated calls. Each translated sentence is saved into your conversation with that person, in both languages, so you can read it afterwards. Calls between two people who speak the same language are not translated and nothing from them is stored.
Your call history — who you called and who called you, when, how long, whether the call connected, and the two languages.
How much translating you have used each month, so your allowance can be counted.
A record of what the app did — which screens you opened, when calls started and failed, and any errors. It never contains messages or anything you said. Kept for 14 days.
The contacts you added in the app — which accounts you have saved, the name you gave each of them, any private note you added, and whether you pinned them to Favourites. Notes are visible only to you. This is kept so that signing in on a new phone brings your people with you. It is not read from your phone's address book; see below.
A delivery token for the phone you are signed in on, from Apple or Google, so that a call can make it ring.
Which phone an account was made on. A number the operating system gives us for this app on this device. We keep it so one phone cannot create account after account to collect free allowances. It is not your IMEI or serial number — apps cannot read those — and it is not an advertising identifier. It is never shared, and it is deleted with your account.
Who you have blocked, and reports: reports you submit about other users and reports other users submit about your account, including the reason and any note written with them.
Your plan and subscription — which plan you are on, its status and renewal date, and the purchase reference Apple or Google gives us so we can confirm it.
What you write in the problem-report box, if you use it. It is kept with the record of what the app did.

What we do not store

Your phone's own address book. CupPhone does not read it. The contacts inside the app are the ones you added there yourself.
Your location. We never ask for it.
Payment details. Apple and Google handle payment; we never see a card.
Advertising identifiers. There is no advertising and no tracking.

Who can see your profile

Your name, language and CupPhone number can be seen by:

anyone you message or call, and anyone who messages or calls you;
anyone signed in to CupPhone who looks you up by your CupPhone number, or by your email address unless you have turned that off.

Your photo is always visible to your contacts. People who are not your contacts — someone who looks you up, or someone you call — see it only if you allow it.

You control these in Settings:

Findable by email. On unless you turn it off. When it is off, searching for your email address finds nobody. People can always find you by your CupPhone number, because sharing that number is how calls happen.
Show my photo to new people. On unless you turn it off.
Show my email to contacts. Off unless you turn it on. Whether people who have you as a contact, or who find you by your CupPhone number, are shown your email address. Someone who searched for you by your email address already has it.

Lookups are limited, so nobody can search through accounts in bulk.

Who else sees it

Only the companies needed to make a call work:

OpenAI — receives the audio and text of translated conversations, including text messages, to translate them.
LiveKit — carries the audio of a call between the two phones.
Cloudflare R2 — stores profile photos and voice recordings. Each file sits at a long, random web address that cannot be guessed, but anyone who has that address can open the file.
Railway — runs the server and the database.
Resend — sends your sign-in code by email, and an alert when your account is signed in to.
Expo — delivers app updates, and passes message notifications to Apple and Google for delivery. A message notification shows the sender's name and a preview of the translated message.
Apple and Google — deliver notifications to your phone: the one that makes it ring, and message notifications.
Google Play — confirms purchases made through Google Play.

We do not sell your data. We do not share it for advertising. Nobody receives it for any purpose other than the one listed above.

We can read what is stored. Messages and call transcripts sit in our database in a readable form, and the person who runs CupPhone can access them — in practice, to investigate a fault you report. We are telling you this because it is true of almost every app of this kind and rarely said out loud.

How long we keep it

Messages, voice recordings and call transcripts: until you delete them or delete your account. Deleting an account removes your copy; the other person in a conversation keeps theirs until they delete it or their own account. It can be done from cupphone.app/delete without the app.
Call history: until you hide a call or delete your account. The other person keeps their call history with you until they do the same.
The record of what the app did, including anything you wrote in the problem-report box: 14 days, then deleted automatically.
Sign-in codes: ten minutes.
Your contacts and notes, blocks, reports, your usage history and your subscription records: for as long as you have an account.
Everything else: for as long as you have an account.
Call records for accounting and analytics: see the next section.
Backups: deleted data can remain in our database backups for up to 35 days, then is deleted automatically. Backups are only used to restore the service after a failure.
Server logs: the server records technical events as it runs, such as a sign-in, a new account or a code email that could not be sent. Some of these lines include your email address. They contain no messages, recordings or transcripts, and are kept for up to 30 days, then deleted automatically.

Call Records for Accounting and Analytics

CupPhone maintains technical records of calls, including the date, duration, languages used, associated costs, and internal call and account identifiers.

These records do not directly contain users’ names, email addresses, or CupPhone numbers.

We use this information for billing, operational accounting, service improvement, and analysis of translation usage.

When you delete your account, we retain call records for accounting and analytics, including the account IDs associated with those records. The account itself is deleted. Certain accounting records may be retained for legitimate business, legal, or financial purposes, subject to applicable retention requirements.

We may retain aggregated or anonymized statistical information for long-term analysis when individuals can no longer reasonably be identified.

These accounting records do not contain the audio or translated content of conversations.

Deleting your account

Settings → Delete my account. It removes your account, your photo, your messages, your recordings, your call transcripts and your usage history, permanently and immediately, apart from copies in our backups and server logs, which are kept for up to 35 days and then deleted automatically. There is no recovery.

The people you talked with keep their side. A conversation belongs to both people, so deleting your account does not take it from the other person. They keep it, including voice messages, call transcripts and their call history with you, and you appear to them as a deleted account, without your name, photo or number. It is removed for good once they delete it or delete their own account.

Children

CupPhone is for adults. You must be 18 or over to use it, and we do not knowingly create accounts for anyone younger. If you believe a child has an account, write to us and we will remove it.

Your rights

Depending on where you live you may have the right to see a copy of your data, correct it, or have it deleted. Deletion is built into the app. For anything else, write to privacy@cupphone.app and we will answer within 30 days.

Changes

If this policy changes in a way that affects what we collect or who sees it, we will send you a notice in the official, read-only “CupPhone” conversation in the app before the change takes effect, saying what changed, rather than quietly updating this page. Where applicable law requires your separate consent for a change in how we use your information, we will ask for it before making that change.