Privacy Policy

Last updated: 30 April 2026

This Privacy Policy explains what personal information TalkType (“TalkType”, “we”, “us”) collects, why we collect it, and how we handle it when you use our iOS keyboard, Android app, and website (talktype.online) — together, the “Service”.

1. Who is the data controller?

The data controller for the personal information described in this Policy is the operator of TalkType. For privacy questions or requests, contact us at contact@arenorg.com.

2. What we collect

2.1 Account information

• Email address (when you sign up with email, Apple, or Google).
• Display name, if you provide one (e.g. via Sign in with Apple).
• An opaque user identifier issued by our authentication provider.

2.2 Voice and text content you submit

• Audio recordings you create with the dictation feature, sent to our backend for transcription.
• Text you submit to the “transform” feature (e.g. tone change, translation, reading-level rewrite).

We do not retain your audio after a transcription has been returned to your device. Transcribed text is sent back to your device only — we do not log it for product analytics.

2.3 Device and usage data

• An anonymous device identifier we generate.
• Device type / platform (iOS, Android, web), keyboard extension vs host app.
• Daily voice minutes used and monthly characters processed (to enforce plan limits).
• Crash and error logs needed to keep the Service running reliably.

2.4 Subscription / billing data

• On iOS: subscription status, original transaction id, and product id from Apple in-app purchase. We do not receive your card or Apple ID password.
• On the website: payments are processed by Stripe. We receive only what Stripe sends us (subscription status, plan, expiry); your card details stay with Stripe.

3. How we use your information

• To provide the Service — transcription, transformation, sync between devices.
• To enforce plan limits and prevent abuse (rate limiting).
• To process subscription purchases and renewals.
• To respond to support requests and account-deletion requests.
• To improve performance and reliability (aggregate, non-identifying analytics).
• To comply with legal obligations.

We do not sell or rent your personal information, and we do not use your voice or text content to train AI models.

4. Service providers (sub-processors)

To run TalkType we share strictly necessary data with the following providers:

• Supabase — authentication, database, edge functions (EU/Germany region).
• OpenAI — speech-to-text (Whisper) and text transformation. OpenAI does not retain content sent through the API for training, per their API data-usage policy.
• Apple — Sign in with Apple, iOS in-app purchases.
• Google — Sign in with Google (when used).
• Stripe — website payments.
• Vercel — website hosting.

These providers may process your data outside your country, including in the United States. Where personal data is transferred from the EEA / UK, we rely on the providers’ Standard Contractual Clauses or equivalent safeguards.

5. Retention

• Audio recordings: deleted immediately after transcription.
• Account data: kept for as long as your account exists.
• Usage counters: retained for the current billing month, then aggregated.
• Account-deletion log: retained 12 months for auditability and fraud prevention.

6. Your rights (GDPR / CCPA)

If you are in the EEA, UK, Norway, Switzerland, or California, you have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and associated data — see Account Deletion.
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email contact@arenorg.com. We respond within 30 days. You also have the right to lodge a complaint with your local data-protection authority (in Norway: Datatilsynet).

7. Security

All traffic between the apps and our backend is encrypted with TLS. Data at rest is encrypted by our cloud providers. Access to production data is limited to the smallest number of people necessary to operate the Service.

8. Children

TalkType is not directed at children under 13 (or 16 in the EEA). We do not knowingly collect data from children. If you believe a child has provided us with personal information, contact us and we will delete it.

9. Changes to this Policy

We may update this Policy from time to time. Material changes will be announced in the app and/or by email. Continued use of the Service after changes take effect means you accept the updated Policy.

10. Contact

Privacy questions, support, and any other inquiries: contact@arenorg.com