Last Updated: January 2026
1. Introduction
Talbot ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Talbot iOS mobile application and associated web services (the "Service").
Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Service.
2. Information We Collect
2.1 Information You Provide Directly
Account & Profile Information
- Name and age
- Email address (for account recovery and security)
- Profile photo
- Personal interests and preferences
- Face ID or passcode for app security
Communications & Content
- Chat messages and conversations with Talbot
- Journal entries and personal writing
- Letters and diary notes
- Voice messages (recorded and sent for text-to-speech processing)
- Any other content you create within the app
Account Security
- Recovery email addresses
- Passcode recovery verification codes
- Authentication method preferences
2.2 Information Collected Automatically
Usage Data
- Messages sent and received
- Journal entry metadata (dates, word counts)
- Conversation statistics and engagement metrics
- Feature usage patterns
- App crash logs and error reports
Device & Connection Data
- Device type and operating system version
- App version
- Unique device identifier
- IP address
- Internet connection type
- Timestamps of activity
3. How We Use Your Information
We use collected information for:
- Core Service Delivery: Processing your messages, generating responses, storing journal entries, and managing your conversations
- Personalization: Remembering your name, preferences, and conversation history to provide a more personal experience
- Voice Processing: Converting your text to speech through third-party services (see Section 5)
- Account Security: Enabling Face ID authentication, passcode management, and account recovery via email
- Conversation Memory: Maintaining context from past conversations to improve response quality
- Analytics & Improvement: Understanding how you use Talbot to fix bugs and develop new features
- Data Backups: Creating encrypted backups of your data for recovery purposes
- Legal Compliance: Fulfilling legal obligations and protecting against fraud or misuse
4. Data Storage & Security
4.1 Where Your Data Is Stored
Your data is stored on secure servers operated by Talbot. Some information may be processed or temporarily stored by third-party services (see Section 5).
4.2 Security Measures
We implement:
- End-to-end encryption for sensitive communications
- Face ID and passcode-protected access
- Secure backup systems with encryption
- HTTPS for all data transmission
- Regular security audits and updates
- Limited employee access to personal data (restricted by role and need)
Important Note: While we employ industry-standard security practices, no system is 100% secure. We cannot guarantee absolute security of your data.
4.3 Data Retention
- Conversation & Journal Data: Stored for as long as your account remains active. You can delete individual entries or request complete data deletion.
- Backup Data: Retained for recovery purposes; deleted upon account deletion.
- Usage Analytics: Retained in aggregated form indefinitely; personal identifiers removed.
- Account Recovery Codes: Deleted after use or upon account deletion.
5. Third-Party Services
5.1 ElevenLabs (Text-to-Speech)
When you use Talbot's voice feature, your text messages are sent to ElevenLabs' servers to generate audio responses.
Data Shared: Message text content onlyElevenLabs Privacy Policy: https://elevenlabs.io/privacyYour Rights: You can disable voice features to avoid this data sharing.
5.2 Other Third Parties
We do not sell, trade, or rent your personal information to marketing companies or other third parties. We may share data with:
- Service Providers: Companies that assist with hosting, analytics, or security (under strict data processing agreements)
- Legal Requirements: When required by law, court order, or to protect safety
- Business Transfers: If we merge with or sell assets to another company (you'll be notified)
6. Your Rights & Choices
6.1 Access & Portability
You can:
- View your profile, conversations, and journal entries within the app
- Export all your personal data (messages, journal, profile, statistics) as a JSON file
- Request a copy of your data at any time
6.2 Deletion & Account Closure
You can:
- Delete individual journal entries, messages, or conversation history
- Clear your profile information
- Request complete account deletion, which will permanently remove all personal data within 30 days
- Download a backup before deletion
6.3 Communication Preferences
You can:
- Disable push notifications for check-in reminders
- Disable voice/audio features to avoid ElevenLabs data sharing
- Opt out of usage analytics (note: basic app functionality logs may still occur)
7. Children's Privacy
Talbot is not intended for children under 13 years old (or the minimum age required by local law). We do not knowingly collect personal information from children under 13.
If we learn we have collected personal information from a child under 13, we will delete such information promptly and terminate the child's account. If you have concerns, please contact us immediately.
For users aged 13-18, we maintain enhanced privacy protections and recommend parental awareness of the Service.
8. International Privacy
8.1 GDPR (EU/UK Users)
If you are in the EU/EEA, you have additional rights:
- Right to access, correct, or delete your data
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to lodge a complaint with your local data protection authority
To exercise these rights, contact us at the address below.
8.2 California Privacy Rights (CCPA)
California residents have the right to:
- Know what personal data we collect
- Know whether it's shared
- Delete personal data
- Opt-out of future data sharing
Requests can be submitted via email to the address below.
9. Data Breach Notification
If we discover a security breach affecting your personal information, we will:
- Notify you within 30 days via email and/or push notification
- Provide information about the breach, affected data, and steps we're taking
- Offer free credit monitoring or similar services if appropriate
10. Changes to This Privacy Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via:
- In-app notification
- Email to your registered address
- Updated "Last Updated" date at the top of this policy
Your continued use of Talbot after updates means you accept the revised Privacy Policy.
11. Contact Us
If you have questions about this Privacy Policy or our privacy practices:
Email: amy@siedegroup.com.au
Data Protection Officer (if applicable): admin@suedegroup.com.au
We aim to respond to all inquiries within 30 days.
12. Additional Disclosures
12.1 App Store & Platform Requirements
- Apple App Store: This app complies with Apple's privacy guidelines. Your data is not used for app analytics by Apple (beyond standard metrics).
- Face ID: Managed entirely on your device; Talbot does not receive Face ID data directly.
- Push Notifications: Controlled by your device settings. You can disable in Settings > Notifications.
12.2 Data We Don't Collect
- Location data (unless you voluntarily provide it)
- Health data through Apple HealthKit
- Financial information or payment data (if applicable)
- Contacts or calendar information
- Contact list or social network data
Version 1.0 | January 2026
This Privacy Policy is provided in English. If you access Talbot in another language, the English version controls in case of conflicts.