Dotok Privacy Policy
Dotorisoft (도토리소프트, “we”) operates Dotok, a translation helper app for WhatsApp, KakaoTalk and Messenger, and its server (dotok.app), in compliance with the Personal Information Protection Act of the Republic of Korea and other applicable laws. This policy applies to the Dotok app and the dotok.app server.
1. Why we process data
- To translate WhatsApp, KakaoTalk and Messenger conversations, check the meaning of your message before sending (preview), and write messages for you (drafting)
- To apply daily usage limits per device and manage service costs
- To verify and restore Google Play subscriptions, compile subscription and revenue figures, and answer subscription inquiries
- To handle errors and prevent abuse
2. What we process and how
| Category | Data | Stored on server |
|---|---|---|
| Device registration | A random device ID created by the app on first launch, an authentication token (only an irreversible hash is stored), device language setting, app version, last-used date | Yes |
| Usage | Number of feature uses per day | Yes |
| Subscription | Google Play purchase token, subscription product ID and base plan, subscription state, start and expiry dates, whether it auto-renews, recurring price and currency, billing country, latest order number, cancellation type (by you, payment failure, plan change, etc.), and the history of subscription change notifications sent by Google Play (payment details such as card numbers are handled by Google; we never receive them) | Yes |
| Translation requests | The message to translate or draft, up to 6 messages just before it (up to 240 characters each, marked “me/other”), and the instructions or drafts you type | No (discarded right after the response) |
| Automatically generated | Web server access records such as IP address (the hosting provider’s server logs) | Per hosting provider policy |
How we collect it: the app sends it automatically when it talks to the server, and the conversation to translate is read from the screen through the accessibility service you agreed to (section 3). When a subscription changes (renewal, cancellation, refund, and so on), Google Play notifies our server directly and the server looks the subscription up again with Google Play. We also record service-wide daily totals of feature calls, tokens, and cost, and daily counts of new and active devices, which are statistics not linked to any device.
3. Use of the Accessibility Service
Dotok is not an accessibility tool for people with disabilities. It uses the Android Accessibility Service (AccessibilityService API) for translation. Nothing is read until you agree after a separate in-app disclosure.
- Which apps: WhatsApp, WhatsApp Business, KakaoTalk and Messenger only. The content of other apps is not read.
- What: the text of the message bubbles in the open conversation, their times, who sent them (me/other), and quoted replies.
- When: the conversation is read only while you have the Dotok panel open from the floating button. While the panel is closed, Dotok only checks whether WhatsApp, KakaoTalk or Messenger is the app in front, so the button can appear only there.
- What is sent: while the panel is open, the latest message you received is translated automatically; otherwise only what you tap or ask to translate or write is sent.
- What it writes: only the sentence you tap [Insert] is placed into the messenger’s input field. Dotok never presses Send.
- How to turn it off: Settings → Accessibility → turn off Dotok, and it stops immediately. “Turn off floating button” in the app also stops it.
4. Retention and deletion
| Data | Retention |
|---|---|
| Device record and subscription state | Deleted automatically 1 year after the last use |
| Daily usage count per device | Deleted automatically after 90 days |
| Subscription records (the subscription items in section 2) | Deleted automatically 1 year after the subscription ends (its expiry date) |
| History of subscription change notifications | Deleted automatically 1 year after receipt |
| Translation requests | Not stored |
| Data stored on your device (section 8) | Deleted when you uninstall the app |
Deletion is permanent removal from the database. Payment details and the original payment and refund records are kept by Google Play, which processes the payment.
5. Provision to third parties
We do not provide personal data to third parties, except where required by law. External processing needed to run the service is done through the processors in section 6.
6. Processors
| Processor | Task |
|---|---|
| Cafe24 Corp. | Server hosting and data storage (Republic of Korea) |
| OpenAI, L.L.C. | AI processing for translation, preview, and drafting |
7. International transfers
| Recipient | Country | Data | When and how | Purpose | Retention |
|---|---|---|---|---|---|
| OpenAI, L.L.C. | USA | Translation request content (section 2), target languages | Each time you use a feature, over HTTPS | Translation, preview, drafting | Up to 30 days for abuse monitoring under the OpenAI API policy, then deleted. Not used for model training |
| Google LLC | USA | Google Play purchase token, product ID | When verifying a subscription, over HTTPS. When a subscription changes, Google Play notifies our server through Google Cloud Pub/Sub | Subscription status check | Per Google policy |
If you do not want these transfers, do not agree to the accessibility use or do not use the translation features; Dotok’s core features will then be unavailable. Their policies: OpenAI · Google
8. Data stored on your device
The device ID, authentication token, plan status, language and display settings, the time you agreed to the accessibility disclosure, and a cache of translation results (the latest 500 at most, so the same message is not translated twice) are stored in the app’s private storage. Other apps cannot read it, it is excluded from device backups, and it is deleted when you uninstall the app.
9. Cookies, advertising IDs, and analytics
Dotok does not collect cookies, advertising IDs, location, contacts, or photos, and does not include any analytics or advertising SDKs.
10. Children
Dotok is not directed to children under 14. If we learn that data of a child under 14 has been processed, we delete it without delay.
11. Your rights
You may request access to, correction of, deletion of, or suspension of processing of your personal data at any time. Because Dotok does not collect names or contact details, a server record alone cannot easily identify a person.
- Uninstall the app: data on your device is deleted immediately, and the device record on our server is deleted automatically 1 year after the last use.
- Immediate deletion: email support@dotok.app. If you have a subscription, include your Google Play order number so we can find and delete the record, and we will tell you the result. What gets deleted is everything the server holds about you: the device record (device ID, language, plan), the daily usage counts, and the subscription records and notification history. Conversation content is never stored on the server in the first place.
12. Security
- All communication is encrypted with HTTPS.
- Authentication tokens are stored only as irreversible hashes.
- Configuration files and API keys are kept outside the web-accessible area.
- The operator’s admin screen is protected by a password and two-step verification, with limited login attempts.
- We process only the minimum data needed and keep access to a minimum.
13. Privacy officer
| Privacy officer | Kim Jisung (김지성) |
|---|---|
| Contact | support@dotok.app · Tel. +82 10-2401-7909 |
14. Remedies (Republic of Korea)
- Personal Information Dispute Mediation Committee: 1833-6972 / www.kopico.go.kr
- Personal Information Infringement Report Center: 118 / privacy.kisa.or.kr
- Supreme Prosecutors’ Office: 1301 / www.spo.go.kr
- Korean National Police Agency: 182 / ecrm.police.go.kr
15. Changes
This policy applies from the effective date. If it changes, we will announce it on this page and in the app at least 7 days before the change takes effect. If the English and Korean versions differ, the Korean version prevails.
Revision history
Announced September 13, 2026, effective September 20, 2026: because our server now receives subscription change notifications from Google Play, we added the subscription items we store (base plan, price, billing country, order number, cancellation type, notification history) and their retention (1 year after the subscription ends), and described how the admin screen is protected.
Announced September 12, 2026, effective September 19, 2026: KakaoTalk added to the apps that are read. Nothing else changed.
September 11, 2026: first version.