Sponkly Privacy Review: Is It Safe for Freelance Client Calls?
Short answer: Sponkly’s app chats are genuinely end-to-end encrypted and translated on your phone, but every sentence spoken in a translated meeting or call goes to its servers and on to Deepgram, OpenAI and Anthropic. Our verdict is USE WITH CAUTION for client work. Policy reviewed October 2026, one day after Sponkly launched on Product Hunt as a chat, call and meeting app with live translation in 32 languages, plus a Chrome extension that subtitles Google Meet, Zoom and Teams. For a freelancer with clients in Madrid, Berlin or Tokyo, that is an appealing shortcut. It also means the most sensitive part of a project, the live conversation, can leave the encrypted lane without much warning. We scored it using how we evaluate AI tools, based only on Sponkly’s own published documents.
What Sponkly does with your data
Privacy at a glance
| Privacy dimension | Sponkly’s answer |
|---|---|
| Trains on your data? | Not stated for Sponkly or its AI vendors |
| Training opt-out | No toggle described anywhere |
| Data retention | Speech audio discarded after translation; transcripts kept 30 days |
| Third-party sharing | Deepgram, OpenAI, Anthropic, Cloudflare, Stripe and others |
| Storage region | Own servers; some vendors outside the EU |
| End-to-end encryption | App chats and untranslated call media only |
| Enterprise / team tier | Business and Enterprise plans; no DPA mentioned |
| Legal entity | AtaForge, Inc., Dover, Delaware, USA |
Sponkly is really three products sharing one account: a messaging app, a call and meeting service, and a browser extension that translates whatever plays in a tab. Each handles your data differently, and the privacy policy (per Sponkly’s privacy policy, retrieved 2026-10-22, last updated October 21, 2026) is candid about the split.
What the policy gets right:
- App chats use the same Signal-style key exchange and ratcheting scheme found in well-known secure messengers. Sponkly says it only relays ciphertext it cannot read, and drops undelivered copies after 30 days.
- Chat translation happens on the device, so the text of a message is not sent to Sponkly or a translation vendor.
- Speech sent for translation is not stored once it has been translated, and Sponkly says it does not record meeting audio or video.
- Payment cards go straight to Stripe, and two-factor login with an authenticator app is available.
The other side of the ledger is the live voice path. When you translate a call or join a Sponkly meeting, each sentence you say travels to Sponkly’s servers. Deepgram (or your phone’s own speech service) turns it into text, an AI model translates it, and an OpenAI voice reads it out. Meetings are encrypted in transit only, not end to end. The Chrome extension captures the sound of the tab you pick and, if you switch on voice translation, your microphone too, and sends both through the same vendor chain.
Three gaps matter. First, Sponkly’s pages disagree on who translates: the privacy policy says OpenAI handles meeting translation, the About page credits Anthropic’s Claude, and the GDPR page lists OpenAI and Deepgram but leaves Anthropic out of its processor list. Second, no page says how long Deepgram, OpenAI or Anthropic keep the snippets they receive, or whether those vendors may use them for model training. Third, the terms of service let Sponkly run anonymized analysis on your content to improve the service, without defining what that covers.
What this means for solo freelancers
Sponkly’s marketing leads with end-to-end encryption, and for app-to-app text that claim holds up. The trouble is that the features freelancers actually pay for, translated client calls and meetings, sit outside it. Based on the policy as written, here is how that plays out. If you already use a transcription tool, the pattern will look familiar from our Otter.ai client-call review.
Scenario 1: a confidential pitch goes through three AI vendors. You run a discovery call with a German client in Sponkly Meetings so both of you can speak your own language. Pricing, a product roadmap under NDA, maybe a named competitor: every sentence is sent to Deepgram for transcription and to OpenAI or Anthropic for translation and voice. Sponkly discards the audio afterwards, but its policy does not tell you what each vendor does with what it saw. If your NDA bans disclosure to third parties, you have three you did not list.
Scenario 2: the extension listens to a Zoom call your client is hosting. You click “Translate this tab” during a client’s Zoom or Teams meeting. Sponkly now processes what everyone in that call says, not just you, and the other participants have no idea, because nothing on their side changes. Based on the policy as written, this carries a consent risk: the people speaking never agreed to a translation vendor hearing them.
Scenario 3: an EU client asks for your sub-processor list. If you process personal data for an EU client, the tools in your chain belong in your records, normally with a data processing agreement. Sponkly cites GDPR rights and standard contractual clauses, but it is a Delaware company, mentions no DPA for business plans, and its own pages give conflicting processor lists. You would be documenting a chain the vendor has not pinned down.
Scenario 4: Business-plan transcripts sit on Sponkly’s servers. Hosts on Business and Enterprise plans can keep written transcripts. Sponkly deletes them after 30 days, which is a short window, but for a month a full text record of your client meeting lives on its infrastructure.
How to use it safely
If Sponkly solves a real language gap with a client, narrow what it touches:
- Keep sensitive details in app chat. Prices, account numbers and contract terms belong in end-to-end encrypted text messages, where translation runs on the phone.
- Turn translation off for the confidential part of a call. Untranslated call audio and video go phone to phone, encrypted between devices. Switch translation on only for small talk and scheduling.
- Ask before using the extension on someone else’s meeting. Tell your client that a translation service will process the audio, or skip it. Leave “Translate my voice too” off unless you need it.
- Check the security code once per client. In a new chat, compare the 60-digit code with your client over a separate channel to confirm nobody is sitting in the middle.
- Turn on two-factor sign-in. Go to Profile, then Security, and add an authenticator app. Save the backup codes in your password manager.
- Skip transcripts on Business plans. If you host, do not enable written transcripts for client meetings unless the client asks for one.
- Decline analytics cookies on the website and avoid Video Studio for client footage, since dubbing sends audio to ElevenLabs.
- Delete your account properly. Profile, then Danger zone, then Delete account. Then email Sponkly to remove meeting messages too, since those otherwise stay visible to other participants.
- Review your other AI tools. Our guide to opting out of AI training for freelance work lists the settings worth checking while you are at it.
Privacy-friendlier alternatives
Sponkly bundles encrypted messaging, video meetings and machine translation. You can get each piece separately with clearer data terms, at the cost of doing a little more work yourself.
1. Signal for client messages and calls. Signal is a nonprofit messenger that encrypts chats, voice and video end to end by default, and it uses the same encryption design Sponkly borrows.
- What it gives you that Sponkly doesn’t: encrypted calls that never route through an AI vendor, run by an organization whose business model does not depend on processing your speech.
- Pricing: free; funded by donations.
- Best for: freelancers whose clients can work in a shared language, or who are happy to paste messages into a translator themselves.
2. DeepL Pro for written and spoken translation. DeepL is a German translation company. Its paid Pro plans list no data training as an included feature, and the entry plan bundles a monthly allowance of DeepL Voice, its spoken translation product.
- What it gives you that Sponkly doesn’t: an EU-headquartered vendor that runs its own translation models, so client text and speech are not passed on to OpenAI or Anthropic.
- Pricing: the individual Pro plan starts around €7.49 per month billed annually (roughly $9 in the US); a free tier exists but comes with weaker data terms.
- Best for: translators, consultants and writers who exchange proposals and briefs across languages and want one translation vendor to document.
3. Jitsi Meet for video calls. Jitsi Meet is open-source video conferencing you can use on the hosted service or run on your own server.
- What it gives you that Sponkly doesn’t: no AI processing of speech at all, plus the option to self-host so meeting traffic never touches a third-party company.
- Pricing: free to use or self-host; a small VPS for your own instance costs a few dollars a month.
- Best for: technical freelancers and agencies of one who want full control over where client calls run.
None of these copies Sponkly’s all-in-one convenience, and DeepL Voice’s own data terms deserve a separate read before client calls. The trade-off is plain: real-time voice translation requires a server to hear what you say, so reserve it for conversations you would be comfortable having on a speakerphone in a cafe.
The verdict
ATP Privacy-Vetted: USE WITH CAUTION
Sponkly earns USE WITH CAUTION because its end-to-end encrypted chats are well built, yet the paid translated calls and meetings send every spoken sentence to Deepgram, OpenAI and Anthropic under terms Sponkly does not spell out. Its short retention windows, on-device chat translation and clear vendor list are real positives. For client work, keep confidential details in encrypted text, switch voice translation off for sensitive stretches, and never run the extension on a client’s meeting without telling them first.
Frequently asked questions
Is Sponkly really end-to-end encrypted?
Partly. Sponkly says app chats, files and voice messages are encrypted on your phone for the recipient’s phone, and that untranslated call audio and video are encrypted between devices. Meetings are not end-to-end encrypted, and when you translate a call, each spoken sentence is sent to Sponkly’s servers and its AI vendors. The encryption claim covers text chat well; it does not cover the translation features.
Does Sponkly train AI models on my conversations?
Sponkly’s privacy policy does not say it trains models on your content, and it says speech audio is not kept after translation. However, its terms allow anonymized analysis to improve the service, and no page explains how Deepgram, OpenAI or Anthropic handle the speech snippets they receive. Based on the policy as written, you cannot confirm that no vendor in the chain keeps or learns from them.
Is Sponkly GDPR-friendly for EU client meetings?
Based on the policy as written, it carries risk for EU client data. Sponkly lists GDPR rights and relies on standard contractual clauses for transfers, but it is run by a Delaware company, mentions no data processing agreement, and its GDPR page omits Anthropic even though other pages name it. If you act as a processor for an EU client, documenting this chain accurately would be difficult.
Can I use Sponkly for HIPAA or health data?
Sponkly’s documents do not mention HIPAA or a business associate agreement. Without a signed BAA, sending patient conversations through a translation service and its AI vendors leaves you exposed. Therapists, health coaches and medical interpreters should keep protected health information out of Sponkly meetings and translated calls. App chats are encrypted, but that alone does not satisfy HIPAA obligations.
Is the Sponkly Chrome extension safe to use on Zoom or Google Meet?
It only captures the tab you choose and says it does not read your pages or browsing history. The issue is consent: it sends what everyone in that meeting says to Sponkly’s servers and AI vendors, and other participants are not notified. Use it on client calls only after telling the client, and leave voice translation off unless you need it.
Sources
- Sponkly privacy policy, last updated 2026-10-21, retrieved 2026-10-22: https://sponkly.com/privacy
- Sponkly terms of service, retrieved 2026-10-22: https://sponkly.com/terms
- Sponkly security page, retrieved 2026-10-22: https://sponkly.com/security
- Sponkly GDPR page, retrieved 2026-10-22: https://sponkly.com/gdpr
- Sponkly About page, retrieved 2026-10-22: https://sponkly.com/about
- Sponkly translated chats feature page, retrieved 2026-10-22: https://sponkly.com/features/chats
- Sponkly MCP feature page, retrieved 2026-10-22: https://sponkly.com/features/mcp
- Sponkly on Product Hunt, launched 2026-10-21, retrieved 2026-10-22: https://www.producthunt.com/products/sponkly
- Signal homepage, retrieved 2026-10-22: https://signal.org
- DeepL Pro page, retrieved 2026-10-22: https://www.deepl.com/pro
- Jitsi Meet project page, retrieved 2026-10-22: https://jitsi.org/jitsi-meet/
Reviewed by Jérémy, founder of AidTaskPro and GreenBudgetHub. Based in central France. Privacy posture sourced from public policies and vendor documentation as of October 22, 2026.
Get Your Free Cybersecurity Checklist
Protect your digital life in 5 minutes. Free checklist + weekly productivity & security tips.