Dotok Privacy Policy
Dotorisoft (도토리소프트, “we”) operates Dotok, a translation helper app for WhatsApp and KakaoTalk, and its server (dotok.app), in compliance with the Personal Information Protection Act of the Republic of Korea and other applicable laws. This policy applies to the Dotok app and the dotok.app server.
1. Why we process data
- To translate WhatsApp and KakaoTalk conversations, check the meaning of your message before sending (preview), and write messages for you (drafting)
- To apply daily usage limits per device and manage service costs
- To verify and restore Google Play subscriptions
- To handle errors and prevent abuse
2. What we process and how
| Category | Data | Stored on server |
|---|---|---|
| Device registration | A random device ID created by the app on first launch, an authentication token (only an irreversible hash is stored), device language setting, app version, last-used date | Yes |
| Usage | Number of feature uses per day | Yes |
| Subscription | Google Play purchase token, subscription product ID, subscription state, expiry date (payment details such as card numbers are handled by Google; we never receive them) | Yes |
| Translation requests | The message to translate or draft, up to 6 messages just before it (up to 240 characters each, marked “me/other”), and the instructions or drafts you type | No (discarded right after the response) |
| Automatically generated | Web server access records such as IP address (the hosting provider’s server logs) | Per hosting provider policy |
How we collect it: the app sends it automatically when it talks to the server, and the conversation to translate is read from the screen through the accessibility service you agreed to (section 3). We also record service-wide daily totals of calls, tokens, and cost, which are statistics not linked to any device.
3. Use of the Accessibility Service
Dotok is not an accessibility tool for people with disabilities. It uses the Android Accessibility Service (AccessibilityService API) for translation. Nothing is read until you agree after a separate in-app disclosure.
- Which apps: WhatsApp, WhatsApp Business and KakaoTalk only. The content of other apps is not read.
- What: the text of the message bubbles in the open conversation, their times, who sent them (me/other), and quoted replies.
- When: the conversation is read only while you have the Dotok panel open from the floating button. While the panel is closed, Dotok only checks whether WhatsApp or KakaoTalk is the app in front, so the button can appear only there.
- What is sent: while the panel is open, the latest message you received is translated automatically; otherwise only what you tap or ask to translate or write is sent.
- What it writes: only the sentence you tap [Insert] is placed into the messenger’s input field. Dotok never presses Send.
- How to turn it off: Settings → Accessibility → turn off Dotok, and it stops immediately. “Turn off floating button” in the app also stops it.
4. Retention and deletion
| Data | Retention |
|---|---|
| Device record and subscription state | Deleted automatically 1 year after the last use |
| Daily usage count per device | Deleted automatically after 90 days |
| Translation requests | Not stored |
| Data stored on your device (section 8) | Deleted when you uninstall the app |
Deletion is permanent removal from the database. Subscription payment and refund records are kept by Google Play, which processes the payment.
5. Provision to third parties
We do not provide personal data to third parties, except where required by law. External processing needed to run the service is done through the processors in section 6.
6. Processors
| Processor | Task |
|---|---|
| Cafe24 Corp. | Server hosting and data storage (Republic of Korea) |
| OpenAI, L.L.C. | AI processing for translation, preview, and drafting |
7. International transfers
| Recipient | Country | Data | When and how | Purpose | Retention |
|---|---|---|---|---|---|
| OpenAI, L.L.C. | USA | Translation request content (section 2), target languages | Each time you use a feature, over HTTPS | Translation, preview, drafting | Up to 30 days for abuse monitoring under the OpenAI API policy, then deleted. Not used for model training |
| Google LLC | USA | Google Play purchase token, product ID | When verifying a subscription, over HTTPS | Subscription status check | Per Google policy |
If you do not want these transfers, do not agree to the accessibility use or do not use the translation features; Dotok’s core features will then be unavailable. Their policies: OpenAI · Google
8. Data stored on your device
The device ID, authentication token, plan status, language and display settings, the time you agreed to the accessibility disclosure, and a cache of translation results (the latest 500 at most, so the same message is not translated twice) are stored in the app’s private storage. Other apps cannot read it, it is excluded from device backups, and it is deleted when you uninstall the app.
9. Cookies, advertising IDs, and analytics
Dotok does not collect cookies, advertising IDs, location, contacts, or photos, and does not include any analytics or advertising SDKs.
10. Children
Dotok is not directed to children under 14. If we learn that data of a child under 14 has been processed, we delete it without delay.
11. Your rights
You may request access to, correction of, deletion of, or suspension of processing of your personal data at any time. Because Dotok does not collect names or contact details, a server record alone cannot easily identify a person.
- Uninstall the app: data on your device is deleted immediately, and the device record on our server is deleted automatically 1 year after the last use.
- Immediate deletion: email support@dotok.app. If you have a subscription, include your Google Play order number so we can find and delete the record, and we will tell you the result. What gets deleted is everything the server holds about you: the device record (device ID, language, plan) and the daily usage counts. Conversation content is never stored on the server in the first place.
12. Security
- All communication is encrypted with HTTPS.
- Authentication tokens are stored only as irreversible hashes.
- Configuration files and API keys are kept outside the web-accessible area.
- We process only the minimum data needed and keep access to a minimum.
13. Privacy officer
| Privacy officer | Kim Jisung (김지성) |
|---|---|
| Contact | support@dotok.app · Tel. +82 10-2401-7909 |
14. Remedies (Republic of Korea)
- Personal Information Dispute Mediation Committee: 1833-6972 / www.kopico.go.kr
- Personal Information Infringement Report Center: 118 / privacy.kisa.or.kr
- Supreme Prosecutors’ Office: 1301 / www.spo.go.kr
- Korean National Police Agency: 182 / ecrm.police.go.kr
15. Changes
This policy applies from the effective date. If it changes, we will announce it on this page and in the app at least 7 days before the change takes effect. If the English and Korean versions differ, the Korean version prevails.
Revision history
Announced September 12, 2026, effective September 19, 2026: KakaoTalk added to the apps that are read. Nothing else changed.
September 11, 2026: first version.