Privacy policy (DRAFT)

DRAFT, not legal advice. Written from how the app works in code (2026-10-21). Have a person with legal knowledge review it before publishing, and fill in every TODO. The website (talklabapp.com/privacy) shows this file as it is, including the TODOs.

Last updated: [TODO: date]

Talk Lab (“the app”) is an app where you practice conversations with AI people. It is run by [TODO: owner’s legal name], [TODO: postal address] (“we”, “us”). Questions? Write to support@talklabapp.com [TODO: confirm this address works].

The short version

What we collect

Data What it is
Account Your name and email address, from Sign in with Apple, Google or an email code.
Text chats The messages you write, other versions of them and practice tries, the AI people’s replies, and the coach’s scores and notes.
Scenes and AI people you make The scenes you build, the descriptions you write, and the look you pick for an AI person.
Talk out loud (voice) A recording of your microphone during the call (not the AI person’s voice), the transcript, and numbers about how you spoke: pauses, how fast you answered, filler words, how much of the time you talked.
Type it live The lines you type and their timing, like how long you took to start typing.
Drills Your answers, the feedback, and how long you took.
Progress and settings Skill levels, practice days, and your choices (AI, language, goals).
Memory notes Short notes the AI person keeps about earlier chats and calls, so it remembers you. You can turn this off for each chat or call.
Reports When you report an AI person’s message: a copy of it, the reason and your note.
Messages left and purchases How many messages you have left, your plan, and a history of what you used and bought. We don’t see your card or bank details.
Usage records For each AI request: the time, the AI model, its size, its cost and any error.

We don’t collect your contacts, location, photos or payment card details.

Why we use it

If you live in the EU or the UK: we use your data to give you the service you asked for, and to keep it safe and working (our legitimate interest). You agree to the AI services on the welcome screen. [TODO: lawyer to check the legal bases]

Voice: how talking out loud works

When you talk out loud with an AI person:

  1. The sound from your microphone goes live over LiveKit to Google Gemini Live, which plays the AI person and answers out loud. This only happens while the call is open.
  2. We record only your microphone during the call and store the recording on Convex (our server).
  3. After the call, Soniox turns the recording into text (a transcript). We delete the transcript at Soniox as soon as we have it.
  4. The coach (an AI model through OpenRouter) reads the transcript and writes your review.
  5. We delete the recording as soon as the review is ready. If the review fails or never runs, a daily job deletes the recording after 7 days at the latest.

The transcript and the review stay until you delete the call or your account.

Who helps us

These companies handle data for us, only to run Talk Lab:

Company What it does
Convex Our database, file storage and server. It stores everything listed above.
Clerk Sign-in.
OpenRouter Sends your text chats, drill answers, typed lines and voice transcripts to the AI models that play the people and the coach. OpenRouter passes them to the company that makes the model, for example Anthropic, Google or OpenAI.
Google (Gemini Live) Plays the AI person when you talk out loud. Your voice goes to Google during the call.
LiveKit Carries the sound of the call between your phone and the AI person.
Soniox Turns your voice recording into text after the call.
Apple App Store, Google Play Take your payment when you buy a plan or more messages.
RevenueCat Checks your store purchases and tells us which plan you have. It gets a purchase record and an app user ID, not your card details.

AI training. Every request we send through OpenRouter asks for providers that don’t store or train on your text (the OpenRouter setting data_collection: deny). For Google Gemini Live and Soniox, their own terms apply. [TODO: check the Gemini Live and Soniox terms for our plan before saying more about training]

Each company has its own privacy policy: [TODO: links to the provider privacy policies].

Some of them work outside your country, for example in the United States. [TODO: lawyer to describe the transfer safeguards, for example Standard Contractual Clauses]

Purchases

Plans and extra messages are bought through the App Store or Google Play. Apple or Google take the payment and keep their own records of it. RevenueCat helps us check the purchase. We never see your card or bank details. To cancel or manage a plan, use the subscription settings of your App Store or Google Play account.

How long we keep it

Adults only

Talk Lab is for people aged 18 and over. You confirm this on the welcome screen. We don’t knowingly collect data from anyone younger. If you think someone under 18 uses Talk Lab, write to support@talklabapp.com and we will delete the account.

Safety and reports

The AI people follow rules that keep the chats within the App Store and Google Play rules. If an AI person writes something offensive, sexual or harmful, long-press the message and tap Report this message. We may read the reported message and the chat around it, to fix the problem and stop misuse.

Please share with care

The AI people are not real. Don’t write things you don’t want stored, like health details, passwords, or private details about real people.

Talk Lab is for practice and confidence. It is not therapy and not medical advice. The AI can make mistakes.

Your rights

You can ask us for a copy of your data, to correct it, or to delete it. You can also object to how we use it. Write to support@talklabapp.com. We answer within [TODO: 30] days.

You can also complain to your data protection authority: [TODO: name of the supervisory authority].

Changes

When we change this policy, we update the date at the top. For big changes, we tell you in the app first.