Privacy Policy

1. Introduction

Talklet ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our platform — including both group conversations and one-to-one conversations with our AI personas.

By using Talklet, you agree to this Privacy Policy. If you do not agree, please stop using the Service.

2. Data We Collect

3. AI Conversations, Reflections, and Memory

• No recordings. We do not record or store audio or video.
• One-to-one AI voice conversations. When you talk one-to-one with a Talklet AI persona, your speech is streamed in real time to OpenAI, which powers the AI and processes the audio live in order to understand and respond. This audio is processed transiently and is not recorded or stored by us.
• Group conversations. Live captions (speech-to-text) are generated during group sessions in order to produce AI summaries.
• Transcripts are ephemeral. Raw captions/transcripts exist only transiently — in memory during the session, and for up to 24 hours for operational reasons — and are then deleted. We never store a raw transcript.
• AI Reflections (also called AI Notes). After a qualifying conversation we generate a short written reflection/summary. We store the reflection text only — never the audio or a raw transcript.
• Memory and continuity. When you begin a new one-to-one conversation with the same AI persona, your recent reflections may be provided to that persona so it can continue with context and pick up where you left off. You can delete any individual reflection, or all of your data, at any time — doing so removes it from any future conversation.

4. How We Use Your Data

We use your personal data to:

• Provide and operate the Service (authentication, conversations, AI reflections, and conversation continuity).
• Manage subscriptions and payments.
• Improve platform performance and security.
• Send service-related communications (e.g. quota usage, plan changes).
• Detect and prevent fraud, abuse, or policy violations.

We do not sell your data to third parties.

5. Legal Basis for Processing

Under the GDPR, we process your data based on:

• Contractual necessity — to provide the Service you sign up for, including generating and storing your AI reflections and using them to personalize future conversations.
• Legitimate interest — to improve and secure the platform.
• Consent — where required (for example, marketing emails).

Special-category data and explicit consent. Some conversations — for example with our Mind & Mood persona — may involve sensitive topics such as your health or emotional wellbeing. Where a stored reflection reveals such information, it may constitute special-category data under Article 9 of the GDPR. We store and reuse this data only on the basis of your explicit consent, which you provide through a clear opt-in before using these features, and which you may withdraw at any time by deleting the relevant reflections or your account.

6. Data Sharing

We share your data only with trusted third-party processors necessary to provide the Service. These providers act as data processors under the GDPR, and we maintain Data Processing Agreements (DPAs) with them:

• Supabase — database, authentication, and storage.
• Daily.co — live video/audio and group captions (speech-to-text).
• OpenAI — powers the AI; processes conversation content (including streamed audio in one-to-one voice conversations, and caption text in group sessions) in real time to generate responses and reflections. Processed transiently; not stored by us as audio or a raw transcript.
• Stripe — payment processing.
• Vercel — hosting and infrastructure.

We do not sell your data to third parties.

7. Data Retention

• Account and profile data: stored until you delete your account.
• AI reflections and conversation metadata: stored until you delete them or your account. Deleting a reflection also removes it from the AI's memory for future conversations.
• Caption/transcript buffers: deleted within 24 hours.
• Payment records: retained as required by accounting and tax laws.

8. Your Rights (GDPR)

You have the right to:

• Access your personal data.
• Rectify incorrect or incomplete data.
• Delete your data ("right to be forgotten").
• Export your data in a portable format.
• Restrict or object to certain processing.
• Withdraw consent (where processing is based on consent).

Requests can be made by contacting us at support@talklet.com. We will respond within 30 days.

9. Security

• All data is encrypted in transit (TLS) and at rest.
• Access is restricted to authorized personnel only.
• No raw audio or video is ever stored.

10. International Transfers

Some of our processors (for example OpenAI and Stripe) may store or process data outside the EEA. Where this happens, we rely on appropriate safeguards such as the EU Standard Contractual Clauses (SCCs).

11. Age Requirement

Talklet is intended only for users aged 18 and over. When you create an account, you must confirm that you are at least 18 years old. We do not knowingly collect data from anyone under 18; if we discover that such data has been collected, it will be deleted promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on our website with a new "last updated" date. Significant changes will be communicated by email or in-app notification.

13. Contact

If you have questions about this Privacy Policy or how we handle your data, please contact us: support@talklet.com