Privacy policy

What we collect

• Your account. The email address, username and display name you sign up with, or that your sign-in provider gives us, the profile picture your provider gives us or that you upload, and a password we store only as a hash.
• Your profile. Anything you choose to add about yourself, such as a few lines of profile text, when you are next in Thailand, and your language.
• Your messages. The text of what you send and what she sends back, in both languages. We keep it because a messenger that forgets the conversation is not a messenger, and because her replies have to stay readable to you.
• What you do in the app. Who you have starred, who you have blocked, and which conversations you have read, so unread counts are right.
• What you have paid for. Whether a pass is running and the date it runs to, your drinks, Shop orders and video calls, and any Lady Sponsorship. Not your card. See below.
• A delivery address, if you use one. When you have something from the Shop delivered, the address, map pin and phone number you give us.
• Visit counting and a browser code. On the pages you see before you sign in, and on the sign-up page, a small script (track-visit.js) reads your browser and screen settings and counts the visit. Separately, the cookie described under Cookies gives your browser a random code, and we record which accounts are used in that browser, so we can spot one person running several accounts.
• Operational records. Standard technical logs, page views inside the app, and how you first arrived, so we can find faults and know what is worth building. These are ours, kept in our own systems, and never handed to an advertising or analytics company.

Who else sees your messages

She does. That is the point.

ThaiPo does, because ThaiPo is what translates them and delivers them to her. Your messages are processed by its AI translation and stored on its side too, under its own privacy policy. Using Up To You Ka means your messages go through ThaiPo, and there is no version of the product where they do not.

Her bar's management can. The managers of the bar a woman works at can read the conversations customers have with the women who work there, including the pictures in them, through a read-only view we give them. They cannot change, hide, delete or write anything in it, and you are not told when they look.

We do, when we have to. An operator reads a conversation when she reports it, when our automated review flags it (for recruitment, a request for contact details, abuse, a scam, someone posing as police or staff, a complaint about a payment, or a sign she may be under 20 or unsafe), or when we need to keep the service safe, such as looking into abuse or fixing a fault you have told us about. Not otherwise, and never out of curiosity.

An automatic check does, looking for phone numbers and messaging handles. It does not stop, change or delay anything you write, and no person reads your message because of it. When it spots one, it adds a note beside your message about keeping the conversation here, and sends her a short safety note. That is the whole of it.

We also review conversations, using automated tools and a person, for recruitment, for requests for contact details and for threats, harassment and abuse, which the Terms do not allow, and for scams, people posing as police or staff, complaints about payments, and signs that a woman may be under 20 or unsafe, so that a person can look. What we act on is the account: your messages are never changed or held because of it.

We do not sell your data. We do not show advertising. We do not build a profile of you for anyone else, and we do not use one person's conversations for anything to do with another.

What the women see about you

The women you write to see your username and your profile picture, which is the one your sign-in provider gave us unless you have changed it. Anything you write on your profile is translated into Thai for them.

Ladies at our bars can also see you in a list of customers, with the same username and picture, and can message you first. A woman can see whether you have starred her. You can switch that off in Account, under Messages from ladies: you then appear only to the women you have written to.

Whether you hold a Pro pass is shown to them as well. While your pass runs, your conversation carries a Pro mark in her inbox, and you are listed ahead of customers without a pass (her sponsors aside) in the customer list the ladies browse. While you hold a pass, we also show you whether she has opened your conversation, using our record of which conversations she has read.

Who else is involved

These are the companies that touch your data so that the service can work. There are no others.

• ThaiPo translates your messages and delivers them, and takes payments through Stripe.
• Fly.io hosts the service, in Singapore.
• Stripe takes every payment, arranged through ThaiPo: passes, lady drinks, the Shop, the hold when you ring her for a video call, and Lady Sponsorship. Lady drinks and Shop orders paid by card may go through a separate Stripe account. We never see your full card details.
• LINE carries the message to her phone, where she reads and answers on LINE or in her own app.
• Google. Its Gemini AI translates the profile text you write into Thai, checks that your profile picture shows a face, and makes the live captions on a video call. Google also translates the short profile text a woman writes about herself, and serves the two typefaces this site uses. When a woman has not answered your last message for two days, Gemini reads the last few messages of that conversation to suggest what she might write back. Only she sees the suggestions, and Google does not train its models on them. Otherwise your written messages do not go to Google.
• TypeSafe AI (Jev) reads the text of the messages customers send, and the replies in those conversations, to check for recruiting, for requests for contact details, for threats, harassment and abuse, for scams and people posing as police or staff, for complaints about payments, and for signs a woman may be under 20 or unsafe. It is hosted in the United States and does not train its models on them.
• Your sign-in provider, if you use one: Google, Facebook, LINE or Discord. It tells us your name, email address, profile picture and the rest of the profile you let it share, such as your LINE status message.
• Cloudflare runs the video calls and the anti-spam check on the Contact form, and holds backup copies.
• Tigris stores pictures and our usage records.
• GitHub runs our backup jobs and holds a recovery copy.
• Resend sends every email we send you: account emails such as a password reset, receipts, an email when a lady replies, and now and then news about your account and the women here.
• Browser push services (Apple, Google or Mozilla, depending on your browser) carry the notifications you allow.
• For Shop delivery only: OpenStreetMap draws the map and its Nominatim service turns your map pin into an address line, and Lalamove, the courier, gets the address, pin and phone number to bring it to you.

Payment

Everything you buy here is processed by Stripe and arranged through ThaiPo. Your card number never reaches us. For Lady Sponsorship, Stripe stores the payment method used for monthly renewals, and for video calls it keeps the card the hold is placed on. We retain subscription and invoice identifiers, your renewal agreement and its date, paid periods, refund records and payout accounting. You manage sponsorship renewals and payment methods in Account > Lady Sponsorships.

Sponsor photos and videos are encrypted in storage and served only after an access check. The lady who uploaded a post can manage it; authorised operators review it before it is shared with her paying sponsors. Sponsor status is visible to the lady and the sponsoring customer, not a public spending leaderboard. Access controls cannot prevent a recipient from recording what they can view.

Optional ad measurement

We use Google Ads to advertise Up To You Ka. If you choose Allow measurement, Google's tag can run on public pages, the sign-in form and a one-time signup confirmation. It uses cookies to connect an ad visit with a completed signup. Google receives ad identifiers, a random signup reference and technical data such as your IP address and browser information. We do not send your email, name, messages, the women you view or your private chat activity to this tag. We disable personalised advertising and enhanced conversions.

Until you allow measurement, we load no Google Ads tag and send it no data. Declining does not affect your account or messages. You can change your choice below. Turning measurement off stops future tag loads and clears this site's Google Ads cookies; it does not erase data already sent to Google. Google may process data outside Thailand under its privacy policy. Change ad measurement choice

Google Analytics is disabled. We have no Meta or TikTok tag, session recorder or third-party error reporter. Our operational analytics stay in our own systems.

We use three cookies for site features. One keeps you signed in. One remembers whether you asked for the phone or desktop layout. One remembers which women Discover has already shown you, so the front of that page changes as you come back. Another cookie remembers your measurement choice for six months. If you opt in, Google's attribution cookies (whose names begin with _gcl_) normally last up to 90 days and may be renewed on a later visit. One more cookie remembers, for 30 days, which site first sent you here and the page you arrived on, so we can tell which links bring people who sign up. One more cookie gives your browser a random code, kept for up to 13 months, so we can see when several accounts are used in the same browser. The code is random and says nothing about you or your device.

Notifications

If you install the app to your home screen and allow notifications, we send you three kinds: a woman has replied to you, a woman you starred has started work, and a woman has invited you to a video call. Nothing else is ever pushed. You can turn off the reply and starred ones in Account, and all of them from your phone's settings.

Where it lives, and how long

The service runs on Fly.io in Singapore, and everything travels encrypted between your phone and us. Pictures and usage records are stored with Tigris, and backup copies are held with Cloudflare and on GitHub. Those can sit outside Thailand.

We keep your messages for as long as your account exists, because that is the conversation. Usage records, such as which pages were opened and when, are kept for analytics without a fixed end date. If you delete your account, a copy can remain in a backup for up to 30 days, after which the backups holding it have aged out.

One thing outlives a deleted account on purpose. If an account has been banned, the signals we use to recognise that person (the email address, the network address and the browser code described under Cookies) are kept after the account is deleted, so that the ban still holds.

What you can do about it

• Block someone. Blocking stops the conversation from both ends.
• Choose what the women see. In Account, under Messages from ladies.
• Read what you have. Ask us and we will send you a copy of your account and your messages.
• Delete your account. Do it yourself, straight away, from your Account page, or ask us and we will. Either way your account and messages are deleted, including ThaiPo's copy. Active sponsorships are cancelled before deletion; deletion waits if cancellation cannot be confirmed. Financial records needed to reconcile payments, refunds and payouts remain with the customer account identifier removed. Stripe retains its own billing records.

Anything else starts at the contact page.

The women here

They are real people who work at the bars here and joined by choice, by opening the link themselves and ticking a box that says they are 20 or over and agree to receive messages from customers. That agreement is recorded with the date. Her identity document is also checked in person at her bar, for whether it is genuine and not only for the date on it. The whole of it is set out under Safety, including every route back off the service.

Every woman has a drawn portrait. She can also add photographs of herself. Those are real pictures, and an operator approves each one before it appears. Signed-in customers see them; public pages show them blurred; and approved photos may appear in the Up To You Ka Discord community. She can hide any photo whenever she wants.

Anyone here can withdraw at any time, for any reason or none. She tells her bar's management, or uses the contact page, which reaches a person. Either way she is removed and stays removed, including from any later refresh of our records.

You do not have to be her to ask. If you are a partner, a family member, or anyone who has seen something on this service you think should not be there, the same contact page reaches us and a person reads it. We do not require proof of who you are before taking something down while we look into it.

Treat what she writes to you as private to the two of you. Reposting a woman's messages or her pictures elsewhere is grounds for closing your account, it is a breach of the terms, and it is one of the few things here we cannot undo for her afterwards.

Your rights

The data controller is the operator of Up To You Ka, reachable through the Contact page.

Under Thailand's Personal Data Protection Act (PDPA), and equivalent laws elsewhere, you can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Ask us and we will sort it out. If you are not happy with how we handled it, you can complain to your local data-protection authority.

Children

This service is for adults. You must be 18 or over to use it, we do not knowingly collect anything from anyone under 18, and an account we find to belong to a minor is closed and deleted.

Changes

If we change this policy we will update this page and the date at the top, and say so in the app when the change matters.

Contact

Any question about your data goes to the contact page and a person reads it.