Privacy Policy

Effective date: 24 October 2026

This policy explains how your personal data is processed when you use the Taleloop iOS app and trytaleloop.app. Taleloop generates personalised, animated language-learning stories with AI.

1. Controller and contact

The controller is Onur Kutlutürk (an individual), operator of Taleloop. Privacy and data requests: hello@trytaleloop.app. Turkish residents: see the KVKK notice (Turkish).

2. Data we collect

• Account: Apple user ID, name and email via Sign in with Apple (may be Apple's private relay address). The birth year you enter is used only to check the 13+ age limit.
• Profile and learning: native and learning languages, level, interests, daily goal, vocabulary review and progress, stories viewed and liked.
• Content you create: story topics, generated story text, scenes, narration and translations.
• Voice input (optional): speech recognition runs through your device's speech service; recordings are not sent to our servers or stored.
• Purchases: handled by Apple and RevenueCat; we receive the transaction ID, product and period, never card details.
• Notifications: Expo push token and preferences if you allow notifications.
• Moderation: reports you submit, users you block, and content review results.
• Usage and cost metering: anonymous product events, generation attempts and technical cost per generation.

On the free plan we use the Google AdMob advertising SDK for optional rewarded ads; no ads are shown with a Plus subscription. Ads are requested as non-personalised and, where required in your region, Google’s consent (UMP) message is shown. During an ad, Google processes device and ad-interaction data (for example IP address, device and app information, ad impression and reward events). We use no third-party analytics SDKs, do not track you across apps or websites, and do not request App Tracking Transparency permission. When you share a story, only the story link and title go to the app you choose through the system share sheet; we do not access your contacts.

3. Why we use it

To provide the service and generate stories (contract); manage subscriptions, credits and prevent fraud; keep the community safe; improve the app and control cost (legitimate interests); and meet legal obligations.

4. AI and other service providers

• Anthropic (Claude): story planning, text and visual review. Your topic, level, preferences and scene context are sent.
• DeepSeek: fallback when the main provider is unavailable.
• Microsoft Azure (speech synthesis): story text and accent choice for narration.
• TypeSafe (Jev): text and summary of stories you submit to the Selection, for curation and duplicate checks.
• Supabase: authentication, database, account and learning backups.
• RevenueCat and Apple: subscription and purchase validation.
• Google AdMob: serving optional rewarded ads on the free plan (not used with Plus). Data may be transferred to countries where Google operates, including the United States.
• Expo: push notifications and app updates. Hosting: our API server and audio cache.

Your account ID is not added to AI requests automatically. Personal details you type into a topic may be passed to these providers, so please avoid sensitive information. You give consent in the app before first generation and can withdraw it in Settings → Privacy.

5. International transfers

Providers may process data in Turkey, the EU or the US, based on your consent, contract performance and data-processing agreements / standard contractual clauses.

6. Retention

• Account and content data are kept while your account is open; deleting your account removes your profile and private stories.
• Stories published in the Selection may remain, anonymised.
• Purchase records required by tax law are kept anonymised for the legal period.
• Report and moderation records are kept up to 2 years. Backups expire within 30 days of deletion.

7. Your rights

You may access, correct, delete, restrict, object, port your data and withdraw consent. To delete your account: Settings → Delete account (this also revokes the Sign in with Apple link). For a data copy or other requests, email hello@trytaleloop.app; we reply within 30 days. See Account & data deletion. You may lodge a complaint with your data protection authority.

8. Security

Data is encrypted in transit and access to our admin tools is role-based and limited to authorised staff. We will notify you and authorities of breaches as required by law.

9. Children

Taleloop is not for children under 13. If we learn a child under 13 has an account we delete it.

10. Community content

Stories you submit to the Selection may be shown to other users. You can report content and block users; reports are reviewed within 24 hours.

11. Changes

We will update the effective date and announce material changes in the app. If the AI provider list changes we will ask for consent again.

12. Region-specific information

Legal bases (EEA, UK, Switzerland). Account, profile, content generation and purchases: performance of a contract. Sending your topic and preferences to AI providers: your consent, given in the app before the first generation and withdrawable in Settings → Privacy. Usage and cost metering, security and fraud prevention, moderation: our legitimate interests. Tax and accounting records: legal obligation.

Your rights and complaints. If you live in the EEA, UK or Switzerland you have the rights in section 7 and may complain to your local data protection authority (for example CNIL in France, the state data protection authorities in Germany, AEPD in Spain, the ICO in the UK).

Age. Taleloop is for people aged 13 and over. Where the age of digital consent in your country is higher (for example 14 in Spain, 15 in France, 16 in Germany), please use the app only with your parent's or guardian's consent.

California and other US states. We do not sell or share your personal information for advertising, and we do not use it for cross-context behavioural advertising. You can request access, correction or deletion as described in section 7, and we will not discriminate against you for doing so.

Turkey. Residents of Turkey: see the KVKK notice (Turkish).