Privacy Policy
Last updated: 4 October 2026
Who We Are
TalQR is operated by NINE BY SIXTEEN LTD, a company registered in England and Wales, company number 16391278. Our registered office is Suite Ra01, 195-197 Woodhouse Road, London, England, N12 9AY. We are the controller of your personal data under UK GDPR. For privacy and other questions, contact support@talqr.app.
Overview
TalQR ("we", "us", "our") is a mobile application that helps content creators discover trending topics and generate short-form video scripts. This Privacy Policy explains what data we collect, how we use it, and your rights.
Data We Collect
Account Data
When you create an account, we store your email address and an account identifier. You can sign in using a link sent to your email. If you use a password, Supabase stores a password hash, not the readable password. If you sign in with Google or Apple, we receive the account details you authorise them to share, such as your name and email address. Apple may provide a private relay email address. We do not receive your Google or Apple password.
Creator Profile
You provide a niche statement, country, content style, and language preference. This data is used to personalise topic discovery and script generation.
Profile Photo
If you add a profile photo, it is uploaded to our storage and given a public web address. Anyone who has that address can view the photo, even without a TalQR account. We remove your old photo when you replace it, and delete it entirely if you delete your account.
Voice Sample
During onboarding you can record a short voice clip, type a description instead, or skip this step entirely. If you record one, the audio is sent to Google Gemini, which transcribes it and analyses how you speak: your catchphrases, vocabulary and tone. We store the transcript and this style analysis in your profile so your scripts sound like you. TalQR does not retain the original audio recording on its servers after processing. Google may retain submitted data for abuse monitoring under its Gemini API usage policies.
Usage Data
We track events such as scripts generated, topics viewed, and badges earned, tagged with your account ID. This is pseudonymous, not anonymous: your account ID identifies your account internally even though the event itself does not carry your name or email. This helps us improve the app experience. We do not sell this data to third parties.
Crash Reports and App Usage
We use PostHog for crash reports and app usage events, such as screens opened and buttons tapped. Session replay, which would record interactions with the interface, is disabled in the current app. The app does not send camera or microphone recordings to PostHog. You can turn off PostHog analytics in Settings.
PostHog processes this in the European Union. You can ask us to delete it at any time using the contact details below.
Camera, Microphone and Photo Library
TalQR requests access to your camera and microphone to record video content within the app, and to your photo library to save exported videos. Video you record and export stays on your device. We do not upload it to our servers unless you choose to share it yourself.
Third-Party Services
We use the following third-party services:
- Supabase: authentication, database, and serverless functions
- Resend: delivers account emails, including sign-in links, on our behalf
- Google Gemini: script generation and voice sample analysis
- Moonshot (Kimi): script generation
- Perplexity AI: topic discovery and script generation
- Google Sign-In and Sign in with Apple: optional account sign-in
- RevenueCat: manages your subscription. It receives your account ID to check what you are entitled to. Apple and Google handle your payment directly; RevenueCat and TalQR never see your card details
- PostHog: crash reports and pseudonymous usage analytics, processed in the EU
- Expo (EAS Updates): delivers app updates to your device and collects basic delivery telemetry, such as device type and update version, so we know an update reached you
When you generate a script, we send the topic, your creator profile, and your full story text (if you are generating from a personal story) to these AI providers to produce the script. When you record an onboarding voice sample, the audio is sent to Google Gemini for transcription and style analysis, as described above.
These providers may process your data outside the UK and European Economic Area. Processing locations, retention and transfer safeguards depend on the provider and service. Contact support@talqr.app for information about the safeguards that apply to your data. Each service has its own privacy policy.
We do not serve advertising, and we do not use advertising identifiers or track you across other apps or websites.
Data Storage and Security
Your data is stored securely on Supabase infrastructure with row-level security policies. Local data (preferences, cached topics) is stored on your device using encrypted storage where available.
Data Retention
We retain your account, profile, scripts, streak and saved topics for as long as your account is active. You can delete your account at any time from Settings, using the Delete Account button. After deletion succeeds, your scripts, streak, saved topics, profile and avatar photo are removed from our active systems. This does not immediately erase copies in provider backups or security logs. Feedback you have sent us is kept but is unlinked from your account, so what remains carries no identifier.
This does not reach everything. PostHog keeps crash reports and app usage events under its own retention settings; deleting your account resets your device's local analytics but does not delete your PostHog history. Contact support@talqr.app if you want that removed too.
Our Legal Basis for Using Your Data
We rely on different legal grounds depending on what we are doing with your data:
- Running your account, generating scripts, and delivering the app's core features: this is necessary to provide the service you signed up for (contract)
- Product analytics and crash reporting, including PostHog: we have a legitimate interest in understanding how the app is used and fixing what is broken
- Your onboarding voice sample: you give consent by choosing to record or type one, and you can skip this step entirely
Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Export your data
- Withdraw consent at any time, without affecting processing that was lawful before withdrawal
- Ask us to restrict how we use your data, where the law gives you this right
- Complain to the Information Commissioner's Office (ico.org.uk), the UK's data protection regulator
To exercise any of these rights, contact us at support@talqr.app.
Your right to object: You can object to processing based on our legitimate interests. Contact support@talqr.app and tell us what you object to. You can also turn off PostHog analytics in the app’s Settings.
Age Requirements
TalQR is for people aged 18 or older, including guests. The app asks you to confirm that you are 18 or older before you use its features. This is a self declaration, not verified proof of age.
If you believe someone under 18 has created an account or given us personal data, contact support@talqr.app so we can investigate and remove the account where appropriate.
Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes through the app. Where a change requires your consent, we will ask for it.
Contact
For privacy-related questions, contact us at support@talqr.app.