Privacy policy

• The native app uses your device as its working store and uploads private archive data to Talala servers. Personal Trainer in ChatGPT separately stores hub preferences, workout records, and saved coaching details on private Talala servers. Delete history removes workout evidence but keeps setup preferences and saved coaching details.
• Native-app plan and coaching requests and private archive uploads are processed as described below. ChatGPT Personal Trainer data is saved separately so it can restore the hub.
• Talala does not use collected data to train AI models. We contractually require API providers used for native-app AI and timed plugin workout narration not to train on data they receive for those services. OpenAI handles ChatGPT conversations and plugin interactions under its own terms, privacy notices, and settings.
• We do not sell your personal information, and we do not use your health data for advertising or marketing. Ever.
• The app may send us crash reports, diagnostic data, and app-usage analytics (using tools like PostHog) so we can fix bugs and improve features. This data does not include your health records.
• Personal Trainer stores workout evidence with each private hub and can remember setup across hubs in the same browser when local storage is available. Deleting history preserves setup and does not restore any of the seven coached days already used.
• Talala is for adults 18 and older.
• Questions or requests: support@talala.app.

The rest of this policy is the full detail behind that summary.

Information you provide in the app. To build your plan and coach you, Talala asks for information during onboarding and use, which may include: your preferred name, biological sex, age, height, weight, resting heart rate, maximum heart rate, training goals and motivation, training location and schedule preferences, and any health issues or movement limitations you choose to share ("Profile Information"). Talala also generates and stores data as you use it: workout logs, sets and weights, muscle measurements, strength map readings, strength age estimates, plans, and streaks ("Workout Data").

Information imported from Apple Health. With your permission, Talala connects to Apple Health (HealthKit) solely to import health and fitness information such as: heart rate, resting heart rate, workout history, movement and exercise activity, sleep, height, weight, age, and biological sex ("Health Information"). You control this connection through your device's Health permissions and can revoke it at any time in your device settings.

Information collected automatically. The app may collect technical data about your device and how the app performs and is used, including: device model, operating system version, app version, crash reports, error logs, performance diagnostics, and app-usage information such as screens viewed, features used, and general interaction patterns ("Diagnostic and Usage Data"). We use PostHog for product analytics, and may use third-party crash and diagnostic reporting tools (such as Sentry or Firebase Crashlytics); the specific tools we use may change over time. Diagnostic and Usage Data is used to fix bugs, understand how features are used, and improve the app. It does not include your Health Information or health records, and it is never used for advertising.

Payment information. Subscriptions are purchased through Apple's App Store or, where offered, through our website or other channels with payment processed by Stripe. Payment is processed entirely by Apple or Stripe. We never see or store your payment card number or billing details. Apple and Stripe provide us only with the transaction information (such as whether a subscription is active) needed to unlock your access.

This is the most important section of this policy. Your data falls into four buckets, and each is handled as described below.

Bucket 1 — Native app records: working data on your device and private archive data on Talala servers. The native app uses your device as the working store for Profile Information, Apple Health imports, and Workout Data. The app also uploads private archive data to Talala servers. Archive sections include authored, generated, imported, history, and metadata records; private archives can include profile and preference versions, workout records, and performance entries. The archive is separate from the ChatGPT Personal Trainer hub. Removing the app or resetting your device removes the local copy but does not itself delete archive data held by Talala. Contact support@talala.app to request deletion of private archive data.

Bucket 2 — Native-app generation requests. When the native Talala app generates or adjusts a plan or provides coaching, relevant profile information is transmitted to our servers and AI technology providers to produce that result. Only information needed for the request is sent. Request data may be retained for a limited period for debugging and quality assurance, then deleted. This is different from the ChatGPT Personal Trainer hub data in Bucket 4.

Bucket 3 — Diagnostic and Usage Data: sent to us so we can fix and improve things. Crash reports, error logs, performance diagnostics, and app-usage analytics may be transmitted to us and our analytics and diagnostic service providers (such as PostHog) so we can identify bugs, fix them, understand how features are used, and improve the app. Diagnostic and Usage Data is retained only as long as reasonably necessary for these purposes.

Bucket 4 — ChatGPT Personal Trainer hub data: stored privately on our servers. If you use Personal Trainer in ChatGPT, we store hub preferences, workout definitions and progress, workout history, logs, session records, and saved coaching details in private Vercel Blob storage. Saved coaching details can include your profile; confirmed intake details and transcript; an optional intake draft with its transcript, details, choices, and last turn; references to ChatGPT-managed photo files with their dates, kinds, periods, and observations or equipment you confirm; custom plan records and versions, including drafts and checked plans; daily edits; follow-ups such as weekly reviews, first-workout tuning, and monthly or next-block reviews; and native plan state. The photo content itself is managed by ChatGPT; Talala stores the file reference and the notes you confirm.

ChatGPT-led intake, plan, and chat authoring are model-authored within the ChatGPT interaction. ChatGPT manages voice and attachment features. The plugin does not receive Apple Health data or directly access your phone or microphone. For timed workout narration, the plugin uses Talala's existing Voice Coach V3 service. That service may send relevant confirmed profile information, session and workout details, and logged results to Talala's API provider to create the narration. OpenAI handles ChatGPT conversations and plugin interactions under its own terms, privacy notices, and settings; Talala does not set OpenAI's retention rules for that conversation data.

An opaque hub capability held in the widget authorizes access to a hub. A separate opaque setup capability can remember setup between hubs in the same browser when local storage is available; it is scoped by a non-authorizing tag derived from ChatGPT's supplied anonymous subject. That subject and tag do not authorize access to private history. The seven coached days are distinct local calendar dates shared across hubs for a stable subject. The first authorized start or resume on a date uses that date; later starts and resumes that date do not use another day, and multiple workouts may be started that date. The first valid IANA time zone is fixed; if absent or invalid, the first UTC offset is frozen for date counting. Workout planning does not use a coached day. Delete history in the widget's Settings removes workout records, definitions, and active progress while preserving setup preferences, saved coaching details, and unused coached days; it does not restore used dates.

Talala's native-app coaching and plan generation use artificial intelligence. ChatGPT-led intake, planning, and chat authoring are model-authored within the ChatGPT interaction. Timed workout narration in Personal Trainer uses Talala's existing Voice Coach V3 service, which may send relevant confirmed profile, session, workout, and logged result data to a Talala API provider. Talala stores saved coaching details as described in Bucket 4. OpenAI handles ChatGPT conversations and plugin interactions under its own terms, privacy notices, and settings.

Talala does not use collected data to train AI models. Talala does not use information it collects through the Services to train, fine-tune, or improve AI or machine-learning models. We contractually require API providers used for native-app AI and timed plugin workout narration not to use data they receive for those services to train their models. These provider commitments do not apply to OpenAI's handling of ChatGPT conversations or plugin interactions, which follows OpenAI's terms, privacy notices, and settings.

Purpose limitation. When information is sent to Talala API providers for native-app AI or timed plugin workout narration, it is sent only to provide the requested plan, coaching, or narration. Only the minimum information necessary for each request is sent. We select these API providers whose terms prohibit training on customer data. ChatGPT conversations and plugin interactions follow OpenAI's own terms, privacy notices, and settings.

AI output is an estimate, not a fact. AI-generated plans, coaching, and readings may be inaccurate or incomplete, and are provided for wellness education only — see our Terms of Service for the full disclaimer.

In addition to everything above, we make the following commitments specifically for data obtained through Apple's HealthKit framework:

• We will not use HealthKit data for advertising, marketing, or similar purposes, or for use-based data mining, other than for improving your health, fitness, and wellness experience within Talala.
• We will not sell HealthKit data to advertising platforms, data brokers, or information resellers.
• We will not disclose HealthKit data to any third party without your express permission, except to our service providers strictly for providing the Services as described in this policy.
• HealthKit data is used only to provide the health and fitness features of Talala.

We use the information described in this policy to: provide the Services (measure your body, generate and adjust your plan, coach your workouts, calculate strength map and strength age readings); fix bugs, debug generation issues, and improve app stability and features; respond when you contact us for support; and comply with legal obligations.

Restrictions. We do not use your Health Information or Profile Information for advertising or marketing purposes. We do not build advertising profiles. We do not conduct automated decision-making that produces legal or similarly significant effects about you.

We share data only in these narrow cases:

• Service providers. Cloud infrastructure providers that run our plan-generation and timed workout narration services; API providers used for native-app AI and timed plugin narration (Section 3); and analytics and diagnostic providers such as PostHog and crash reporting tools (Section 1) — each processing data solely on our behalf to provide its service or support app improvement as described in this policy. ChatGPT conversations and plugin interactions are handled by OpenAI under its own terms, privacy notices, and settings.
• Apple and Stripe. Subscriptions and payments run through Apple and Stripe under their own terms and privacy policies.
• Legal requirements. If required by law, subpoena, or court order, or where necessary to protect the rights, safety, or property of you, us, or others. Where legally permitted, we will tell you before disclosing your data in response to a legal request.
• Business transfers. If SkyPorch LLC is involved in a merger, acquisition, or sale of assets, data we hold (which, per Section 2, is limited) may transfer as part of that transaction. This policy's restrictions — including the no-AI-training and no-selling commitments — would continue to apply to that data unless you are notified and given a choice.

We do not sell your personal information, for money or anything else. We do not share it for targeted or cross-context behavioral advertising. Our analytics are used only to improve the app — we do not run third-party advertising or ad-tracking SDKs — so there is no "sale" or "sharing" of your data as those terms are defined under U.S. state privacy laws.

• On-device data (Bucket 1): the app's working records are kept on your device until you delete them or remove the app. The app also uploads private archive data to Talala servers, as described in Bucket 1. Previous revision sections are removed when a later archive revision is committed. Workout checkpoints older than 90 days are removed during an archive commit; that cleanup does not apply to durable profile, metadata, and performance entries. Removing the app or resetting the device does not itself delete server archive data. Contact support@talala.app to request deletion.
• Plan-generation data (Bucket 2): retained for a limited period for debugging and quality assurance, then deleted.
• ChatGPT Personal Trainer hub data (Bucket 4): setup preferences are remembered privately across hubs when you use the same browser and local storage is available. Saved workout records, definitions, active progress, and history remain with each hub until you use Delete history. Saved coaching details, including intake details and transcripts, photo references and confirmed notes, plans and drafts, edits, and follow-ups, are preserved by Delete history. Contact support@talala.app to request deletion of those records or other hub data. OpenAI's retention of ChatGPT conversation and plugin data is governed by its own terms, privacy notices, and settings; Talala does not set its retention period.
• Native transfer links: expire after 24 hours and are single-use. When Talala receives an import acknowledgment, it immediately replaces the transfer payload with a minimal retry marker. An expired link stops working at its expiry; a scheduled cleanup removes its stored marker and any unacknowledged payload at the next successful daily cleanup. A link is not an account login; anyone who has an active link can use it to import the included workout data.
• Diagnostic and Usage Data (Bucket 3): retained only as long as reasonably necessary for debugging and improvement.
• Support emails: retained as long as needed to resolve your issue and for a reasonable period afterward.

To remove native app records from your device, delete them in the app or remove the app. This does not itself delete private archive data uploaded to Talala servers; email support@talala.app to request deletion of that archive. To delete ChatGPT Personal Trainer workout records, use Settings → Delete history in the hub; setup preferences, saved coaching details, and unused coached days are preserved, and dates already used are not restored. To request deletion of a remembered setup profile or saved coaching details, email support@talala.app; removing the browser's scoped local-storage capability also disconnects that browser from the setup profile. To request deletion of hub records and their setup, email support@talala.app. New transfer payloads linked to that hub are invalidated. Older links without a hub link can remain usable until their original 24-hour expiry. Acknowledged transfer payloads are replaced immediately with a minimal retry marker; expired transfer records are removed at the next successful scheduled daily cleanup. Deleting the native app does not delete ChatGPT Personal Trainer data or cancel an active subscription — manage subscriptions in your Apple ID settings (or contact support@talala.app for purchases made through Stripe).

We use commercially reasonable technical and organizational measures to protect data in transit and data held in private server storage, including private archive data uploaded by the native app and ChatGPT Personal Trainer hub records. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. The native app uses your device as its working store; private archive data is stored separately on our servers as described above. If we learn of a security incident affecting your personal information, we will notify you as required by applicable law, including Florida's Information Protection Act.

Depending on where you live (including U.S. states such as California, Colorado, Connecticut, Texas, Virginia, and others, and the EEA/UK), you may have rights to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to appeal a decision we make about a request.

For native app records, you can view, correct, and delete data on your device. The native app also uploads private archive data to Talala servers; email support@talala.app to request access to or deletion of that archive. For ChatGPT Personal Trainer hub data, use Delete history in the widget; for other requests email support@talala.app. We will verify requests and respond within the time required by applicable law (generally 45 days in the U.S.), and will never discriminate against you for exercising your rights. Authorized agents may submit requests with proof of written permission.

EEA/UK users: our legal bases for processing are performance of our contract with you (providing the Services), legitimate interests (debugging and improving the app), and consent (Apple Health access, which you may withdraw at any time in device settings). You may lodge a complaint with your local supervisory authority, though we'd appreciate the chance to resolve concerns first. Data is processed in the United States; where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses.

Do Not Track / Global Privacy Control: the Services do not track you across third-party apps or websites, so there is nothing for these signals to opt out of.

Talala is for adults 18 and older. The Services are not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If we learn that a person under 18 has provided personal information through the Services, we will delete it promptly.

SkyPorch LLC is not a "covered entity" or "business associate" as defined under the Health Insurance Portability and Accountability Act of 1996 (HIPAA). Health Information you provide through the Services is not protected health information subject to HIPAA and is governed solely by this Privacy Policy. You should not use the Services to store or transmit information that you believe requires HIPAA-level protection.

We reserve the right to change this Privacy Policy at any time. When we do, we will update the date at the top, and the current version will always be available at talala.app/privacy. Continued use of the Services after a change takes effect means you accept the updated policy.

SkyPorch LLC, Florida, USA

support@talala.app

We read everything sent to this address.