TalkStashPrivacy Policy
Who we are
TalkStash is operated by TalkStash ("we", "us"). Privacy contact: privacy@talkstash.com. Please do not send passwords, sign-in tokens, or payment details in an email to us.
Overview
TalkStash uses an account so your learning data can remain available across your signed-in devices. Sign in with Apple or Google is required. TalkStash stores your learning data in its cloud service and keeps a recoverable cache on each device. We do not sell your data.
Data we collect
On your device
- TalkStash keeps cached copies of confirmed learning data, unsent chat drafts, pending review ratings, and local interface settings.
- The cache is not the authoritative copy of confirmed learning data. After you sign in, it can be rebuilt from the cloud service.
On our servers
- Account and session data — the Apple or Google account subject used to recognize your account, an internal random account ID, optional provider-supplied email/profile data, registered devices, and revocable session records, and which version of the Terms of Use, Privacy Policy and third-party AI providers notice you agreed to on the sign-in page and when. Email is never used as the authorization key.
- Learning data — conversations, notebooks, notes, learning cards, and review history, together with language pairs, preferences, and tags. This data is stored to provide account recovery, synchronization between signed-in devices, and personalized learning.
- Mira's memory — short notes Mira keeps about you so later chats fit your situation: facts you shared about yourself, how you like answers, and your level and current goals in each language. See “Mira's memory” below.
- AI usage records — how many AI requests you have made and against which allowance. Not the content of those requests.
- Subscription status — whether a subscription is active, and when the period ends.
- Operational records — content-free error, synchronization, security, usage, export, and deletion records used to operate and protect the service.
How we use your information
- To run your account, keep your learning data in sync across your signed-in devices, and restore it if you sign in again.
- To write AI replies, personalize Mira, and handle your notes and cards.
- To manage your subscription and the usage allowance that comes with it.
- To keep the service secure, prevent abuse, and fix errors.
- To understand, without identifying you, how the app is used so we can improve it.
- To meet legal obligations and answer your requests.
We do not sell your personal information, and we do not share it for advertising.
Anonymous usage analytics
To understand how TalkStash is used and improve the product, we collect anonymous usage statistics by default. This includes events such as app opens, feature usage, and in-app purchases — never note content, AI conversation content, search queries, or any personally identifiable information.
The same setting covers crash and error reports. When the app fails, it sends the type of error, where in the app it happened, a technical stack trace, and the app version. Error messages are truncated and we do not send your notes, conversations, or any other content you wrote. Crash reports are kept for up to 30 days.
Each installation of the app is assigned a random identifier, generated on the device the first time it runs. It is not linked to your name, email, or account, and it is not shared with anyone else. Removing the app removes it. Analytics data is retained for up to 3 months and stored on Cloudflare's infrastructure.
You can turn this off at any time under Profile → General & Privacy → Anonymous Analytics. When disabled, no analytics data is sent.
AI features
When you use an AI feature, TalkStash stores the conversation as part of your cloud learning history. For each reply, our servers assemble the context used to personalize Mira: the recent messages of the current conversation, a summary of its earlier messages, your learning preferences, and, when memory is on, Mira's memory for your account and the current language pair. That context and your current request are sent to a third-party AI provider to generate the response. Your content is treated as untrusted data and cannot change TalkStash's system policy. The companies that receive this data are listed on the Third-party AI providers page, which we update when providers change.
TalkStash does not use your content to train AI models. How each AI provider handles the content it receives is set by that provider's own policy and terms; providers may keep it for a limited time for safety and abuse monitoring.
Regulated data
TalkStash is a language-learning app and is not designed for health records, payment card data or other regulated information. Please keep that kind of information out of your chats, notes and cards.
Mira's memory
While you chat, Mira may save short notes about things you state about yourself that stay true over time, such as your job, why you are learning, or that you want Japanese with furigana. Each change is shown under the reply with an Undo button. Mira does not save health, religion, political views, sexual orientation, exact addresses or contact details, or ID and account information, even if you ask.
You can see everything Mira remembers under Profile → Mira's memory, delete any entry, ask Mira to rewrite a page, clear all memory, or turn memory off. While it is off, Mira neither reads nor writes memory. Memory is kept until you delete it, delete its language pair, or delete your account; deleting a conversation does not delete what was remembered from it. A record of each memory change is kept for 30 days so it can be undone.
Phase 1 Mira is passive: it responds when you use the app. TalkStash does not currently run a background coaching workflow or send Agent reminders.
Third-party services
We share personal information with the service providers below so they can do their part of the service, and when the law requires it.
- Cloudflare — infrastructure and edge hosting. Cloudflare Privacy Policy
- AI providers — process the current request and the context assembled for it, including Mira's memory when memory is on. See the list.
- RevenueCat — subscription management. Receives your TalkStash account identifier and purchase events from Apple or Google. RevenueCat Privacy Policy
- Apple / Google sign-in — authenticate you and provide the stable provider subject used to resolve your TalkStash account.
- Apple / Google — process the purchase itself. We never see your payment details.
Retention and export
Soft-deleted learning content is retained for up to 30 days before hard deletion so offline devices can receive deletion markers. Account export files are available for up to 7 days. Records that contain no learning content and that we need for security, billing and abuse prevention, such as export and deletion records, may be kept for up to 180 days, including after you delete your account. Anonymous usage analytics are retained for up to 3 months.
You can request an account-scoped export from TalkStash. The export contains your retained learning content and never includes another account's data, session secrets, or device credentials.
Data deletion
On your device: the deletion screen can also clear the local cache, pending operations, drafts, and interface state. Deleting only the device cache does not delete confirmed cloud content.
On our servers: open Profile → Account → Delete Account & Data. This revokes active sessions and starts an idempotent deletion of your account identity, device links, conversations, notebooks, notes, learning cards, review history, preferences, Mira's memory, AI usage/allowance records, and subscription snapshots. The operation cannot be undone. Some records with no learning content, kept for security, billing and abuse prevention, may remain for up to 180 days; see “Retention and export”.
What deletion does not do. Two things survive it, and we would rather say so than let you find out later:
- Your subscription keeps billing. Deleting your account does not cancel an App Store or Google Play subscription — only the store can do that. Cancel it separately, before or after deleting.
- Your purchase history stays with our subscription provider. RevenueCat and the app store retain their record of your purchases, which is what lets you restore a subscription later and what lets us answer a billing dispute. If a subscription is still active when you delete your account, its next renewal will create a new, minimal billing record on our servers, because we have to record that the payment happened.
You can ask us to remove the subscription-provider record as well by emailing privacy@talkstash.com. Doing so may make it impossible to restore past purchases.
Your rights
Where the law of your country or region gives you these rights, you can ask us to give you access to or a copy of your personal information, correct or complete it, delete it, or explain how we process it, and you can withdraw consent you gave. Much of this you can do yourself in the app: view and edit your content, export it, and delete your account. For anything else, email privacy@talkstash.com. We may need to verify that the request comes from your account first, and we will never ask for your password or sign-in token to do so. We reply within 30 calendar days after verifying your identity, or sooner if the law requires. If you are not satisfied with our answer, you can complain to the data protection authority where you live. Residents of California and other U.S. states may have further rights to know, delete, correct and limit the use of their information; the same email address takes those requests. We do not sell personal information or share it for cross-context advertising.
Where your data is processed
Our service providers, including Cloudflare, RevenueCat, Apple, Google and the AI providers listed on the Third-party AI providers page, may be located in different countries or regions, so your data can be processed outside the country where you live.
Security
We protect your data with access controls, encryption in transit, and session credentials that you can revoke. If a security incident affects your personal information, we will act quickly to contain it, investigate, limit the harm, report it to authorities where the law requires, and tell affected users by email, an in-app notice, or another suitable channel. To report a security problem, email privacy@talkstash.com.
Children's privacy
TalkStash is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child under 13 has an account, contact us at privacy@talkstash.com and we will delete it.
Changes to this policy
When our features or the way we process data change, we update this page and its date. If we change why or how we use your data, or which kinds of data we collect, in a way that matters, we will tell you in the app and ask for your consent again where the law requires it.
Contact
Questions about this policy: privacy@talkstash.com