TinyTalk
This Privacy Policy explains how TinyTalk Study ("we," "us") collects, uses, discloses, and protects personal information when you use the TinyTalk mobile app and tinytalkstudy.com (the "Service").
This policy is designed to meet requirements for Google Play, the Apple App Store, and applicable privacy laws including GDPR, CCPA/CPRA, and the Korean Personal Information Protection Act (PIPA).
1. Data controller
TinyTalk Study
Website: https://tinytalkstudy.com
Privacy inquiries: privacy@tinytalkstudy.com
General support: support@tinytalkstudy.com
2. Information we collect
| Category | Examples | Required? |
|---|---|---|
| Account | Email, display name, nickname, hashed PIN/credentials, user ID | Yes (for account) |
| Profile (optional) | Profile photo, bio, language preference | No |
| Voice & audio | Microphone recordings you submit, derived transcripts | Yes (for voice feature) |
| Conversation | Chat messages (user & AI), session metadata, persona settings | Yes (for core service) |
| Device/technical | IP address, app version, OS, crash logs, API timestamps | Automatic |
We do not collect precise location, contacts, or SMS. We do not use the microphone in the background without your active recording action.
3. Microphone, voice recording & permissions
Microphone (RECORD_AUDIO / NSMicrophoneUsageDescription): Used only when you press and hold the push-to-talk control to record speech for language practice and AI feedback. We do not continuously listen or record in the background.
What happens to your voice
- Audio is captured on your device when you initiate recording;
- With your action to send, audio may be uploaded to our server (
tinytalkstudy.com) for speech-to-text (STT); - Transcribed text may be sent to AI providers to generate responses;
- Optional AI voice playback may be generated via text-to-speech (TTS) providers;
- Uploaded audio files may be deleted automatically after a limited retention period (see Section 7).
Photo library (optional): If you set a profile picture, the app may access photos you select. We do not access your entire library without your selection.
4. How we use your information
- Provide, maintain, and improve the Service;
- Authenticate users and secure accounts;
- Transcribe speech and generate AI tutoring responses;
- Store chat history you choose to keep in your account;
- Prevent fraud, abuse, and security incidents;
- Comply with legal obligations;
- Communicate service updates (with your consent where required).
We do not use your voice recordings to train our own commercial AI models unless we obtain separate explicit consent.
5. Legal bases (EEA/UK users)
- Contract: Processing necessary to provide the Service you request;
- Consent: Microphone, optional profile photo, marketing communications where applicable;
- Legitimate interests: Security, analytics, service improvement (balanced against your rights);
- Legal obligation: Compliance with law enforcement requests where valid.
You may withdraw consent for optional processing in device settings or by contacting us. Withdrawal does not affect lawfulness of prior processing.
6. Third-party service providers
We share data with trusted processors only as needed to operate the Service:
- Hosting / infrastructure — web servers and databases (e.g., cloud hosting at tinytalkstudy.com);
- OpenAI (or equivalent) — text generation from your messages (subject to OpenAI's policies);
- ElevenLabs (or equivalent) — text-to-speech audio generation (subject to ElevenLabs' policies);
- Speech-to-text — conversion of uploaded audio to text;
- Google Play / Apple — if you purchase subscriptions, payment is processed by the store; we receive transaction identifiers, not full card numbers.
Processors are required to protect data under contractual safeguards. Links to third-party policies:
7. Data retention
- Account data: Until you delete your account or request deletion, then removed within a reasonable period unless law requires retention;
- Chat messages: Stored while your account is active to provide history features; deletable on request;
- Voice upload files: Temporary server storage; automatically deleted per our upload retention policy (typically within 24–72 hours after processing unless longer retention is required for debugging with safeguards);
- Logs: Retained for a limited period for security and troubleshooting.
8. Security
We use HTTPS encryption in transit, access controls, and industry-standard practices. No method of transmission or storage is 100% secure. Please use a strong PIN/password and keep your device updated.
9. Sale or sharing of personal information
We do not sell your personal information. We do not share personal information for cross-context behavioral advertising. We disclose data only to processors listed above and as required by law.
10. Your privacy rights
Depending on your location, you may have the right to:
- Access and receive a copy of your personal data;
- Correct inaccurate data;
- Delete your data ("right to be forgotten");
- Restrict or object to certain processing;
- Data portability;
- Withdraw consent;
- Lodge a complaint with a supervisory authority (EEA/UK).
Submit requests to privacy@tinytalkstudy.com. We will verify your identity before responding (typically within 30 days).
11. California residents (CCPA/CPRA)
California users have rights to know, delete, correct, and opt out of sale/sharing. As stated, we do not sell or share personal information for cross-context behavioral advertising. To exercise rights, email privacy@tinytalkstudy.com with "California Privacy Request" in the subject.
12. Korea (PIPA) notice
For users in the Republic of Korea:
- Purpose of collection: As described in Sections 2–4;
- Items collected: As listed in Section 2;
- Retention period: As listed in Section 7;
- Right to refuse consent: Optional items may be refused; required items are necessary for service;
- Overseas transfer: Data may be processed in the United States or other countries where our providers operate (Section 14).
13. Children's privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 provided data, contact us and we will delete it promptly.
Users aged 13–17 should use the Service with parental guidance.
14. International data transfers
Your data may be processed in countries other than your own, including the United States and the Republic of Korea. Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms.
15. Google Play & Apple App Store privacy labels
Google Play Data safety (summary):
- Data collected: Email, name, user IDs, audio (user-provided), photos (optional), app interactions, crash logs;
- Data shared: With AI and hosting processors for app functionality;
- Encryption in transit: Yes;
- Deletion available: Yes — request via privacy email or in-app account deletion when available.
Apple Privacy Nutrition Labels (summary): Data linked to you may include contact info, user content (audio, text, photos), identifiers, and usage data for app functionality, not for tracking across other companies' apps without consent.
16. Changes & contact
We may update this policy. The "Last updated" date will change and material updates may be notified in-app or by email where appropriate.
Privacy: privacy@tinytalkstudy.com
Support: support@tinytalkstudy.com