Privacy Policy

Introduction

Tala is an AAC (Augmentative and Alternative Communication) app designed to help children communicate. It is intended for use by children under the guidance and supervision of a parent or caretaker. We take your family's privacy seriously, especially when it comes to children's data. This policy explains what information Tala collects, how it is used, and how it is protected.

Information We Collect

We collect only the minimum data needed to provide the service:

• Email address — used solely for passwordless sign-in (one-time code authentication). We do not send marketing emails.
• Child profile information — name, age, communication level, interests, and preferences. This information is entered by the parent/caretaker and stored locally on the device.
• Communication boards and settings — custom word boards, visual schedules, routines, and app preferences. Stored locally on your device.
• Usage data — word taps and board interactions are logged locally on your device for the parent/caretaker to review. This data is never transmitted to our servers or any third party.

Information We Do NOT Collect

• No location or GPS data
• No contacts, photos, or address book access
• No advertising identifiers or tracking data — Tala contains no ads
• No analytics SDKs or third-party trackers
• No data is sold to or shared with third parties for marketing purposes

How Data Is Stored

On-device storage: Your child's profile, communication boards, routines, schedules, chat history, and usage logs are stored locally on your device using an on-device database (SQLite). This data remains on your device and is under your control.

Server-side storage: Your email address and session tokens are stored securely on our server for authentication purposes only.

Optional cloud sync: If you choose to enable cloud sync, a backup of your local data (profile, boards, and settings) is encrypted in transit and stored securely on our server. You can disable sync at any time from Parent Settings, and request deletion of your synced data.

AI-Powered Features

Tala uses artificial intelligence to generate personalized communication boards and to help caretakers configure the app using natural language. Here is how your data is handled:

• Board generation: During onboarding and configuration, your child's profile information (interests, foods, activities, communication level) is sent to our AI service (Anthropic Claude) through our secure server. The AI processes this data in real-time to generate personalized boards and returns the results. No child data is stored or retained by the AI provider.
• Voice transcription: If you use voice input to talk to the AI assistant, your audio is sent to our transcription service (OpenAI) through our secure server. Audio is processed in real-time and is not stored or retained by the transcription provider.
• Server-side processing: All AI requests are routed through our server — no API keys or credentials are stored on or transmitted to your device. Your child never interacts directly with AI services.

Children's Privacy (COPPA Compliance)

Tala is designed to be used by children under the direct supervision of a parent or caretaker. We are committed to complying with the Children's Online Privacy Protection Act (COPPA) and similar international regulations:

• We do not knowingly collect personal information directly from children. All profile data and settings are entered and managed by the parent/caretaker.
• The onboarding process (where child information is provided) is a parent-facing experience protected by a PIN code.
• The child-facing interface (communication boards, schedules) does not collect, transmit, or expose personal data.
• We do not use any advertising, behavioral tracking, or third-party analytics in the app.
• We do not contact children or request information from them.

Data Sharing

We do not sell, rent, or share your personal information with third parties except as described below:

• AI service providers (Anthropic, OpenAI) — receive profile data and audio solely for real-time processing as described above. These providers process data according to their respective privacy policies and do not retain user data from API calls.
• Email delivery (Resend) — used to send one-time sign-in codes to your email address. No other emails are sent.
• Legal requirements — we may disclose information if required by law or to protect the safety of our users.

Data Security

We implement appropriate technical measures to protect your information:

• All data transmitted between your device and our server is encrypted using HTTPS/TLS.
• Authentication uses secure, short-lived one-time codes — no passwords are stored.
• Parent settings are protected by a PIN code to prevent unauthorized access by children.
• Server-side data is stored in a secure, managed database with access controls.

Data Retention and Deletion

• Local data: You can delete all local data at any time by clearing the app's data on your device or uninstalling the app.
• Server data: To delete your account and all server-side data (email, session tokens, and any synced data), use the sign-out option in Parent Settings. All associated data will be permanently deleted within 30 days of your request.
• AI processing: Data sent to AI providers for real-time processing is not retained after the response is generated.

Your Rights

You have the right to:

• Access all data stored about you (available through Parent Settings)
• Request deletion of your account and all associated data
• Opt out of cloud sync at any time
• Export your data from the app

Changes to This Policy

We may update this privacy policy from time to time. If we make material changes, we will notify you through the app. The "Effective date" at the top of this page indicates when the policy was last revised.

Contact Us

If you have questions about this privacy policy, your data, or wish to exercise your rights, please contact us at:

privacy@talaaac.com