TalkPilot Privacy Policy
Last updated: June 8, 2026
This Privacy Policy explains what data TalkPilot ("we," "us") collects, why we collect it, and your rights. TalkPilot is operated by Allign Inc. We try to keep this short and honest.
1. The short version
- We collect your account info, your conversation audio and transcripts, basic device info, and your subscription status.
- We use that data to run the app, improve it, prevent bugs, and (in a limited way) measure which ads brought you to TalkPilot.
- We never sell your data. We never share your audio, transcripts, or client information with advertisers.
- You can delete your account or export your data anytime by emailing alexis@talkpilot.co.
2. Data we collect and why
| Data | Where it comes from | Why we collect it |
|---|---|---|
| Name, email address | You, at signup | Account, support, billing |
| Password (hashed) | You, at signup | Account security |
| Audio from your sessions | Your device microphone, when you activate a session | Real-time transcription and coaching |
| Transcripts and session notes | Generated from your audio | Show you the session, save it for later |
| Client information (names, notes) | You, when you add a client (if using TalkPilot for client-facing work) | Organize your sessions per client |
| Subscription and purchase history | Apple's App Store | Manage your subscription, unlock paid features |
| Per-vendor device identifier (IDFV) | iOS, automatically | App functionality, advertising attribution (see Section 5) |
| App and device info (iOS version, app version, device model, language) | iOS, automatically | Bug investigation, advertising attribution |
| Crash logs and performance data | Automatically when something breaks | Find and fix bugs |
| Usage patterns (which features you tap, in aggregate) | Automatically | Improve the app, prioritize features |
| IP address | Automatically with any request to our servers | Security, rate limiting, regional content |
We do not collect: contacts, photos, location (beyond what's inherent in your IP), browsing history, or anything else not in the table above.
3. How we use your data
- Run the app: transcription, AI coaching, session storage, syncing across your devices.
- Send you support: respond when you email us.
- Improve the app: see which features are useful, fix bugs, A/B test small UX changes.
- Handle billing: deliver subscriptions through Apple, unlock features.
- Measure advertising: see Section 5.
- Comply with law: when required to.
We never use your audio, transcripts, or client information to train AI models, build advertising profiles, or sell to anyone.
4. Third-party services
We use trusted third parties to operate parts of TalkPilot. Each only gets what they need:
| Service | What they get | What they do |
|---|---|---|
| Apple (App Store, StoreKit, Push Notifications) | Your Apple ID-linked subscription state, your device push token | Subscriptions, payments, notifications |
| Supabase | Account info, transcripts, session notes, client information | Authentication, encrypted database storage, server functions |
| Google (Calendar API) | Your calendar event titles, times, and descriptions (when you connect your Google account) | Display upcoming events in TalkPilot for pre-session preparation; read-only access |
| OpenAI | Conversation transcripts | Generate AI coaching suggestions; OpenAI is contractually prohibited from using your data to train its models (zero-retention API) |
| Anthropic | Conversation transcripts | Generate AI coaching suggestions; same zero-retention guarantee |
| Sentry | Anonymous crash stack traces, app version, device model | Bug tracking |
| PostHog | Anonymized usage events (e.g., "user opened settings") | Aggregate product analytics; no audio or content shared |
| Meta Platforms (Facebook) | Hashed email, per-vendor device ID, your iOS version, and the names of three events (registration completed, free trial started, subscription purchased) | Advertising attribution (see Section 6) |
| Deepgram, Inc. | Audio streams during active sessions | Real-time speech-to-text transcription. Audio is processed in transit; Deepgram does not retain audio after transcription. https://deepgram.com/privacy |
We have signed Data Processing Agreements with all services that handle personal data. None of them are permitted to use your data for their own commercial purposes beyond what's described here.
5. Google API compliance (Limited Use)
TalkPilot uses Google Workspace APIs (specifically the Google Calendar API) to read your calendar events and display them within the app. This helps you prepare for upcoming sessions by showing you relevant event details.
Limited Use compliance statement: The use and transfer of raw or derived user data received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- We only access Google Calendar data for the purpose of displaying your upcoming events in TalkPilot and enabling pre-session preparation workflows.
- We do not use Google Calendar data for advertising purposes.
- We do not sell, share, or transfer your Google Calendar data to any third party except as necessary to provide the TalkPilot service.
- We do not use your Google Calendar data to build advertising profiles or for any purpose unrelated to the core functionality of TalkPilot.
- You can disconnect your Google Calendar integration at any time in the app settings.
6. Advertising and attribution (Meta / Facebook)
We run advertisements on Meta-owned platforms (Facebook, Instagram) to help people discover TalkPilot. To measure whether those ads work, we share a limited set of information with Meta when you reach certain milestones:
- When you complete onboarding
- When you start a free trial
- When you become a paying subscriber
What we send:
- Your email address, SHA-256 hashed before it leaves your device, so Meta cannot read it
- Your iOS per-vendor device identifier (IDFV), this is not the cross-app advertising identifier (IDFA); it can only identify the device within TalkPilot
- The name of the event ("Subscribe", "StartTrial", or "CompleteRegistration")
- A unique event ID and timestamp
- Generic device/app info (iOS version, app version, device model)
What we do NOT send:
- Your audio
- Your transcripts
- Your session notes
- Your client information
- Your name (only the hashed email)
- The IDFA
You can opt out at any time:
- iOS Settings → Privacy & Security → Tracking → toggle "Allow Apps to Request to Track" off
- iOS Settings → Privacy & Security → Apple Advertising → turn off "Personalized Ads"
- Email alexis@talkpilot.co to ask us to stop sending your events
This processing is required for our advertising to work efficiently. Without it, the cost of finding new users on Meta is significantly higher, which would force us to raise prices.
Apple Search Ads attribution:
We use Apple's AdServices framework (AAAttribution) to measure the effectiveness of our Apple Search Ads campaigns. This collects an anonymous attribution token resolved by Apple to identify which campaign/keyword drove your install. It does not use IDFA, does not track you across other apps, and does not require App Tracking Transparency.
Note about Meta SDK:
We bundle the Facebook iOS SDK solely to support our use of Meta Conversions API. Automatic event logging and IDFA collection are disabled in our app configuration.
7. AI processing of your audio and transcripts
TalkPilot uses large language models from OpenAI and Anthropic to provide live coaching, transcript summaries, and other AI features. Here's what you should know:
- We don't record or store audio. Transcripts stay in your account until you delete them.
- Transcripts and notes are sent to OpenAI and/or Anthropic for AI processing.
- Both providers operate under zero data retention API terms, they delete your content after the request completes (typically within seconds) and do not use it to train models.
- The AI may make mistakes. Suggestions are generated by language models and may contain errors, omissions, or inappropriate content. Always use your own judgment.
8. How long we keep your data
- Account data: until you delete your account
- Session transcripts and notes: until you delete them in the app, or until you delete your account
- Audio: not retained beyond transcription
- Crash logs: 90 days
- Aggregated analytics: indefinitely, but cannot be linked back to you
- Meta advertising events: Meta's standard retention period (we don't control this, see Meta's privacy policy)
- Billing records: 7 years as required by tax law
When you delete your account, we remove your data from our active systems within 30 days. Backups are purged within 90 days.
9. Your rights
You can:
- Access your data: email alexis@talkpilot.co and we'll send it
- Delete your account: email alexis@talkpilot.co and we'll process the deletion (in-app deletion is not currently available)
- Export your data: email alexis@talkpilot.co
- Correct inaccurate data: edit it in the app or email us
- Opt out of advertising attribution: see Section 6
- Object to specific processing: email us
If you're in the EU/UK, the EEA, the UK, or California, you have additional rights under GDPR, UK GDPR, and CCPA respectively (right to data portability, right to object, right to non-discrimination for exercising rights, etc.). Email alexis@talkpilot.co to exercise them. We respond within 30 days.
10. International data transfers
Our servers are operated by Supabase, with data stored in West US (Oregon, USA). If you're outside the US, your data is transferred to and processed in the US. We rely on Standard Contractual Clauses (SCCs) for EU/UK data transfers.
11. Security
- All data is encrypted in transit (TLS 1.2+).
- All data is encrypted at rest by Supabase using AES-256.
- Passwords are hashed using bcrypt.
- Access to user data is limited to staff who need it and is logged.
- We follow OWASP best practices.
No system is perfectly secure. If you discover a security issue, please email alexis@talkpilot.co.
12. Children
TalkPilot is not intended for users under 18. We do not knowingly collect data from anyone under 18. If you believe we've collected data from a minor, email alexis@talkpilot.co and we will delete it.
13. Changes to this policy
We may update this policy from time to time. If we make material changes (e.g., adding a new third-party service, changing how we use your data), we will notify you in the app and via email at least 30 days before the change takes effect. The "Last updated" date at the top reflects the most recent change.
14. Contact
- General questions: alexis@talkpilot.co
- Privacy questions / data requests: alexis@talkpilot.co
- Security disclosures: alexis@talkpilot.co
- Mailing address: Allign Inc, 131 Continental Dr, Suite 305, Newark, New Castle County, Delaware 19713, USA (Registered Agent: Legalinc Corporate Services Inc.)
- Related: see our Terms of Service
We aim to respond within 5 business days. For formal data requests (GDPR/CCPA), we respond within 30 days as required by law.