Privacy policy

Last updated: 26 July 2026

Up To You Ka (uptoyouka.com) lets you write to real women in Thailand in your own language. This page says what we collect, who else sees it, how long we keep it and how to get rid of it.

The short version. We store your messages so the conversation still exists tomorrow. Your messages pass through ThaiPo, which does the translating. We run no advertising and no third-party tracking of any kind, we never see your card details, and we will delete everything if you ask.

What we collect

Your account. The email address and display name you sign up with, or that your sign-in provider gives us, and a password we store only as a hash. Optionally a profile picture if you upload one.
Your messages. The text of what you send and what she sends back, in both languages. We keep it because a messenger that forgets the conversation is not a messenger, and because her replies have to stay readable to you.
What you do in the app. Who you have favourited, who you have blocked, who you have reported and why, and which conversations you have read, so unread counts are right.
Your subscription status. Whether you have one and when it runs to. Not your card. See below.
Operational records. Standard technical logs, page views inside the app, and how you first arrived, so we can find faults and know what is worth building. These are ours, kept on our own servers, and never handed to an advertising or analytics company.

Who else sees your messages

She does. That is the point.

ThaiPo does, because ThaiPo is what translates them and delivers them to her. Your messages are processed by its AI translation and stored on its side too, under its own privacy policy. Using Up To You Ka means your messages go through ThaiPo, and there is no version of the product where they do not.

We do, when we have to. A named operator can read a conversation when someone reports it, when we are investigating abuse, or when we are fixing a fault you have told us about. Not otherwise, and never out of curiosity.

We do not sell your data. We do not show advertising. We do not build a profile of you for anyone else, and we do not use one person's conversations for anything to do with another.

Payment

Subscriptions are billed by ThaiPo through Stripe. We hold no payment integration at all: your card number never reaches us, we could not store it if we wanted to, and all we ever learn is whether your subscription is active. Refund and billing records live with ThaiPo and Stripe.

Tracking, or the lack of it

There is no Google Analytics here, no advertising pixel, no Meta or TikTok tag, no session recorder, no third-party error reporter, and no cross-site tracking cookie. Not a reduced amount: none. Everything we measure, we measure ourselves on our own servers.

We set two cookies. One keeps you signed in. One remembers whether you asked for the phone or desktop layout. That is the lot, and the site works the same either way.

Notifications

If you install the app to your home screen and allow notifications, we send you one kind: a woman has replied to you. Nothing else is ever pushed, and you can turn it off from your phone's settings or by muting the conversation.

Where it lives, and how long

Everything is hosted on Fly.io in Singapore and travels encrypted between your phone and us. We keep your messages for as long as your account exists, because that is the conversation. Operational logs age out on their own within weeks.

What you can do about it

Block someone. Blocking stops the conversation from both ends.
Read what you have. Ask us and we will send you a copy of your account and your messages.
Delete everything. Ask us and we will delete your account, your messages and everything attached to them. We do this by hand and quickly, and we will confirm when it is done. Deleting on our side does not by itself clear ThaiPo's copy, so tell us if you want that too and we will pass the request on.

All of it starts at the contact page.

The women here

They are real people who joined by choice and are all 18 or over. The photographs you see are not photographs: they are illustrations, drawn so that no one is identifiable from a picture. Anyone here can withdraw at any time by telling the venue's management, and when she does she is removed and stays removed, including from any later refresh of our records.

Treat what she writes to you as private to the two of you. Reposting a woman's messages or her picture elsewhere is not something we can undo for her, and it is grounds for closing your account.

Your rights

Under Thailand's Personal Data Protection Act (PDPA), and equivalent laws elsewhere, you can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Ask us and we will sort it out. If you are not happy with how we handled it, you can complain to your local data-protection authority.

Children

This service is for adults. It is not for anyone under 18, we do not knowingly collect anything from anyone under 18, and an account we find to belong to a minor is closed and deleted.

Changes

If we change this policy we will update this page and the date at the top, and say so in the app when the change matters.

Contact

Any question about your data goes to the contact page and a person reads it.