Privacy Policy
Last updated: 2025-07-01 | Version: 1.0
1. Information We Collect
Information You Provide
- Account Information: Email address, username, password (encrypted)
- Profile Information: Name, profile picture (optional)
- Journal Entries: Text content, mood data, timestamps
- Payment Information: Processed securely through Stripe (we don't store card details)
- Support Communications: Messages sent to our support team
Information We Collect Automatically
- Usage Data: Features used, frequency of use, interaction patterns
- Device Information: Browser type, operating system, IP address
- Log Data: Access times, pages viewed, app crashes
- Cookies: See our Cookie Policy
2. How We Use Your Information
We use your information to:
- Provide and maintain our journaling service
- Process AI-powered insights and memory extraction
- Send service-related communications (account updates, security alerts)
- Process payments and prevent fraud
- Improve our services based on usage patterns
- Comply with legal obligations
- With your consent, send marketing communications
3. Data Sharing and Disclosure
We do not sell your personal data. We share information only in these circumstances:
Service Providers
- Stripe: Payment processing
- SendGrid: Email delivery
- OpenAI: AI processing (with strict data handling agreements)
- Render: Cloud hosting
Other Circumstances
- Legal Requirements: When required by law, subpoena, or court order
- Business Transfers: In case of merger, acquisition, or sale of assets
- Your Consent: With your explicit permission
- Aggregated Data: Non-identifiable statistics for analytics
4. Data Security
We implement industry-standard security measures:
- Encryption in transit (HTTPS/TLS) and at rest
- Regular security audits and vulnerability testing
- Access controls and authentication
- Regular backups with encryption
- Employee training on data protection
- Incident response procedures
While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
5. Your Rights
Under GDPR and CCPA, you have the right to:
- Access: Request a copy of your data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data
- Portability: Export your data in a portable format
- Object: Opt-out of certain processing
- Restrict: Limit how we use your data
- Withdraw Consent: For consent-based processing
- Non-discrimination: Exercise rights without penalty
Exercise Your Rights
7. Children's Privacy
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe we have collected information from your child, please contact us immediately at support@talkingpaper.app.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Sending an email to registered users
- Displaying a prominent notice on our service
- Updating the "Last updated" date at the top of this policy
Continued use of our service after changes constitutes acceptance of the updated policy.
9. Contact Us
For privacy-related questions or to exercise your rights:
Privacy Contact Information
Email: support@talkingpaper.app
Data Protection Officer: dpo@talkingpaper.ai
Address:
Talking Paper, Inc.
[Address Line 1]
[City, State ZIP]
United States