Privacy Policy

Talia ("we", "us", "our") provides an interactive AI-powered narrative video platform via the Talia mobile app and play.taliaapp.com. This Privacy Policy explains what data we collect, how we use it, and the choices you have.

Talia is operated by Shangyu Chen, an individual sole trader based in Victoria, Australia (ABN 78 526 386 160). Shangyu Chen is the data controller responsible for any personal data Talia processes. For data protection inquiries: [email protected].

1. Data we collect

Account data

• Email address (or Apple Relay email if you sign in with Apple)
• Username and avatar (chosen by you)
• Locale preference (your selected language)
• Account ID (internal identifier)

Content data

• Game progress and save files (story progression, choices, achievements)
• Comments and direct messages you send to other users
• Branch submissions you contribute to community games
• Reference photos you upload for the AI Replace feature — used only for the immediate generation request and not retained as part of your profile. Source images are deleted from temporary storage within 30 days of generation.
• Generated AI outputs (videos / images) tied to your account so you can re-watch them under "My AI Output"

Payment data

• We do not store credit card numbers. Stripe processes all payments. We retain a record of Tacoin top-up amount, currency, timestamp, and a Stripe transaction reference for accounting and refund purposes.
• In-app purchases on iOS are processed by Apple; we receive only the verified receipt for Tacoin crediting.

Device data

• Operating system and version
• App version
• Device language
• We do not collect IDFA, IMEI, MAC address, or any persistent advertising identifier.

Usage data

• Basic in-app interaction (which games you play, when you log in) — used to power features such as "Continue playing" and "My library".
• Crash diagnostics (if applicable) — anonymized and not linked to your account.

2. How we use your data

• To operate the service (sign-in, gameplay, save data, messaging)
• To process Tacoin purchases and AI generation requests
• To deliver community features (likes, bookmarks, comments, follows, notifications)
• To diagnose crashes and improve stability
• To comply with legal obligations (tax records, takedown requests)

We do not sell your personal information. We do not use your data for cross-app or cross-website advertising tracking.

3. Third-party processors

4. Your rights

• Access: You can view your profile data, save files, comments, and AI outputs in the app at any time.
• Correction: Edit your username, avatar, and profile settings under Profile > Edit Profile.
• Deletion: You can delete your account from within the app. Account deletion removes your profile, comments, messages, and game saves. Generated AI outputs are also deleted unless you have published them as community submissions, in which case they remain available to other players (you can request individual takedown).
• Portability: Email [email protected] to request an export of your data.
• Withdraw consent: Stop using the service and delete your account.

5. Children's privacy

Talia is intended for users 13 years of age and older. We do not knowingly collect data from children under 13. If you believe a child under 13 has registered, please contact us at [email protected] and we will remove the account.

6. Regional rights

European Economic Area (GDPR): You have the right to access, correct, delete, and port your data, and to object to processing. The legal basis for processing is contract performance (account, payments) and legitimate interest (community features, diagnostics).

California (CCPA / CPRA): You have the right to know what data we collect, to delete it, and to opt out of "sale" of personal information — we do not sell personal information.

7. Data retention

• Account and content data: retained while your account is active. Deleted within 30 days of account deletion.
• AI Replace source photos: deleted within 30 days of the generation request.
• Payment records: retained for 7 years for tax and accounting purposes (regional law applies).
• Backup snapshots: rotated within 90 days.

8. Security

We use industry-standard encryption in transit (TLS) and at rest. Authentication is handled by Supabase (PostgreSQL + RLS). Payment card data never reaches our servers — it is handled exclusively by Stripe / Apple.

9. International transfers

Data may be processed in the United States and the European Union. Where applicable, transfers rely on Standard Contractual Clauses (SCCs) for GDPR compliance.

10. Changes to this policy

We will notify you of material changes via in-app notification and update the "Last updated" date at the top of this page.

11. Contact

Questions, complaints, or data requests: [email protected]