Data Controller
TalkPlus is operated as a language learning platform. We are committed to protecting your personal data in accordance with GDPR and LGPD.
Data Protection Contact: privacy@talkplus.dev
Data We Collect
- Account information: email, name, avatar (from OAuth providers)
- Learning data: CEFR level, XP, streaks, vocabulary, session analytics (grammar accuracy, lexical diversity, fluency scores)
- Audio: Speech-to-text and text-to-speech are processed ephemerally and not stored
- Chat messages: Sent to AI models with PII automatically scrubbed (emails, phone numbers, card numbers, SSNs are removed before processing)
- Usage data: Daily practice minutes, language selections, feature usage
How We Use Your Data
- To provide personalized language learning (GDPR Art. 6(1)(b) — contract performance)
- To track your learning progress and adapt difficulty
- To improve our AI models and service quality (with your explicit consent)
Data Retention
- Audit logs: 2 years (partitioned, auto-deleted)
- Consent records: 5 years (legal requirement)
- IP addresses: Anonymized after 6 months
Your Rights
Under GDPR and LGPD, you have the following rights:
- Right to access your personal data
- Right to data portability (export your data)
- Right to erasure (delete your account and all data)
- Right to withdraw consent at any time
You can exercise these rights from your Account page, or by contacting us at privacy@talkplus.dev.
AI & Data Processing
Chat messages are processed by AI language models to provide language tutoring. Personal information (emails, phone numbers, payment card numbers) is automatically removed before messages reach AI models. Audio data for speech recognition and text-to-speech is processed in real-time and not stored.
Cookies
We use essential cookies for authentication (HttpOnly JWT tokens) and CSRF protection. We use an analytics cookie only with your explicit consent. No third-party tracking cookies are used.