On this page
Bank connections are read-only: we cannot move your money. We can see transactions in order to detect billing errors; we cannot initiate a payment, transfer, or withdrawal under any circumstance.
Account information: email address, name, and authentication details when you sign up or join the waitlist.
Financial data: if you connect a bank account, Talby receives read-only transaction data through our banking partners, Plaid (US and Canada) and TrueLayer (UK and EU). We never receive or store your online banking login credentials; those are handled entirely by Plaid or TrueLayer under their own security standards.
Statements and documents you provide: if you paste text, upload a photo of a statement, or upload a tax document, that content is processed to detect billing issues or support your tax filing, and is retained only as long as needed to deliver that result or as you choose to keep it in the app.
Transaction content sent for AI analysis: merchant names, amounts, and descriptions are sent to our AI provider to detect issues and draft recovery emails. This content is not used to train any model.
Usage data: basic app analytics such as feature usage and crash reports, used only to improve the product.
Passwords are stored as a bcrypt hash with per-record salts; stored hashes cannot be reversed, and we never have access to your plain-text password.
Talby relies on a small number of trusted service providers to operate. Each handles data under its own privacy policy in addition to this one, and each user's data is isolated so that other users can never access it.
Financial data and session tokens are encrypted using the iOS Keychain (AES-256-GCM). Row-level security ensures each user can only access their own data; cross-user data access is architecturally impossible. Bank credentials are never stored by Talby; all credential handling is delegated to Plaid or TrueLayer.
Regardless of where you live, you can request a copy of your data, ask us to correct it, or ask us to delete it, by contacting the email below.
You have the right to access, rectify, erase, restrict, or port your data, and to object to certain processing. Talby does not make decisions with legal or similarly significant effects based solely on automated processing (Art. 22); we do not make such decisions about you.
You have the right to know what personal information we collect, to delete it, to correct it, and to opt out of its sale, though we do not sell personal information.
You have the right to access and correct your personal information, and to withdraw consent for its collection or use.
You have the right to access, correct, and object to the processing of your personal information under the Protection of Personal Information Act.
You have rights under the Lei Geral de Proteção de Dados (LGPD, Law 13,709/2018), including access, correction, anonymization, and deletion.
You have the right to access and correct your personal data under the Personal Data Protection Act.
You have the right to access and correct your personal data under the Personal Data (Privacy) Ordinance.
You have the right to request disclosure, correction, or deletion of your personal information under the Act on the Protection of Personal Information.
You have the right to access, correct, and delete your personal information under the Personal Information Protection Act.
You have the right to access and correct your personal information under the Privacy Act (Australia) and Privacy Act 2020 (New Zealand).
You can delete your account and all associated data at any time from within the app, or by emailing privacy@gettalbyapp.store. We delete your data within 30 days of a verified request, except where we're required to retain records by law. For material changes to this policy, those that significantly affect your rights or how we use your data, we will provide notice before they take effect.
Talby is not directed at children under 13, and we do not knowingly collect data from anyone under that age.
We may update this policy as Talby develops. Material changes will be communicated by email or an in-app notice before they take effect.
Questions about this policy or your data: privacy@gettalbyapp.store (response within 5 business days; rights requests within 30 days).