← Back to TalkPal
Privacy Policy
Last updated: March 10, 2026
NEA-I ("we", "us", "our") operates the TalkPal mobile application and website at talkpal.chat (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
AI Transparency: TalkPal uses artificial intelligence (large language models) to generate chat responses, stories, voice output, and video content. You are interacting with AI, not real people. All AI-generated content is clearly labeled within the app.
1. Information We Collect
1.1 Information You Provide
| Data Type | Purpose | Retention |
| Account identifiers (email, guest ID) | Account creation, authentication, session management | Until account deletion |
| Chat messages & prompts | Delivering AI chat responses and conversation continuity | Until account deletion or 90 days of inactivity |
| Scene drafts & story content | Enabling scene building and story generation features | Until account deletion |
| Uploaded media (images, audio) | Processing for video generation and voice features | Deleted within 30 days of processing |
| Profile information | Personalization and persona configuration | Until account deletion |
1.2 Information Collected Automatically
- Device information: device model, operating system version, app version, unique device identifiers
- Usage telemetry: features used, session duration, interaction patterns, latency metrics
- Crash logs: technical error data for stability improvements
- IP address: for regional service optimization and fraud prevention
1.3 Payment Information
Subscription and in-app purchases are processed entirely by Apple (App Store) or Google (Google Play). We receive purchase confirmation and entitlement records but do not collect, store, or have access to your credit card numbers or payment credentials.
2. How We Use Your Information
- To deliver AI chat, story generation, voice synthesis, and video creation features
- To maintain your conversation history and scene progress
- To manage the points/rewards economy and subscription entitlements
- To enforce content moderation and safety policies
- To measure service reliability and performance
- To respond to customer support requests
- To detect and prevent fraud, abuse, or security incidents
- To comply with legal obligations
3. AI Processing
TalkPal uses large language models (LLMs) to power its core features. Specifically:
- Chat messages you send are processed by AI models to generate responses
- Story and scene content is generated using AI based on your prompts and selections
- Voice and video features use AI synthesis models to produce audio and visual output
- All AI processing occurs on secure cloud infrastructure via encrypted connections (TLS 1.2+)
- We do not use your personal chat content to train our AI models unless you explicitly opt in to a voluntary improvement program
- AI-generated content may contain imperfections, inaccuracies, or unexpected outputs
4. Points and Virtual Economy
TalkPal includes a points/rewards system. Points are virtual items with no monetary value and cannot be exchanged for cash, transferred to other users, or redeemed outside the Service. Points balances and transaction history are retained as part of your account data.
5. Content Moderation
We employ automated and manual content moderation systems to enforce our content policies. This may involve:
- Automated scanning of user-submitted prompts and content for policy violations
- AI-based safety filters on generated content
- Portrait/likeness checks on uploaded images
- Age verification checks where required
6. Data Sharing and Disclosure
We do not sell your personal data. We may share information with:
- AI service providers: LLM providers that process prompts and generate responses on our behalf, under strict data processing agreements
- Cloud infrastructure providers: hosting, storage, and compute services
- Analytics providers: aggregated, de-identified usage data for service improvement
- Legal requirements: when required by law, regulation, legal process, or government request
- Business transfers: in connection with a merger, acquisition, or sale of assets (with prior notice)
7. Data Security
We implement industry-standard security measures including:
- End-to-end encryption for data in transit (TLS 1.2+)
- Encryption at rest for stored data (AES-256)
- Session-based authentication with signed tokens
- Access controls and authentication for internal systems
- Regular security audits and vulnerability assessments
8. Your Rights
8.1 For All Users
- Access: request a copy of your personal data
- Deletion: request deletion of your account and associated data
- Correction: request correction of inaccurate data
- Portability: receive your data in a machine-readable format
- Data export: export your chat history and content through the app
8.2 European Economic Area (GDPR)
If you are in the EEA, you have additional rights under the GDPR:
- Right to restrict processing
- Right to object to processing based on legitimate interests
- Right to withdraw consent at any time
- Right to lodge a complaint with a supervisory authority
- Right not to be subject to decisions based solely on automated processing (Art. 22) — you may request human review of any automated decision that significantly affects you
Legal basis for processing: consent (content uploads, optional AI training), contract performance (service delivery), legitimate interests (security, analytics, moderation).
8.3 California Residents (CCPA/CPRA)
- Right to know what personal information is collected and how it is used
- Right to delete personal information
- Right to opt out of the sale or sharing of personal information (we do not sell personal data)
- Right to limit the use of sensitive personal information
- Right to non-discrimination for exercising your privacy rights
Categories of sensitive personal information collected: account login credentials, contents of communications (chat messages). These are used solely for providing the Service and are not used for profiling or advertising purposes.
9. Children's Privacy
The Service is rated 17+ and is not directed to children under the age of 17. We require age confirmation during account registration. We do not knowingly collect personal information from anyone under 17. If we become aware that we have collected data from a minor, we will promptly delete it and terminate the associated account.
10. International Data Transfers
Your data may be transferred to and processed in countries other than your own, including for AI processing by our LLM providers. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission where applicable.
11. Data Retention
- Account data: retained until you delete your account
- Chat history: retained until account deletion or 90 days after last activity
- Uploaded media: deleted within 30 days of processing
- Generated content (videos, audio): retained for delivery, then deleted within 30 days
- Points/transaction records: retained for the life of the account plus 2 years
- Usage logs: retained for up to 90 days
- Support correspondence: retained for up to 2 years
12. Third-Party Services
Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the app or via email at least 14 days before changes take effect. Your continued use of the Service after such changes constitutes acceptance of the updated policy.
14. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at: