Privacy Policy

Last updated: 21 October 2026

Thallo is built to know as little about you as a service of this kind can. This policy says exactly what we keep and what we never touch.

1. What we store

Your account: the email address and name from the Google account you sign in with, your plan, your answer counts, and your paid period. Payments themselves are handled by our payment processors; we never see or store card details.
Your devices: a one-way hashed fingerprint of each machine that uses your licence. It identifies the device, not you, and we cannot reverse it. Seats are counted over a rolling 30-day window.
Service logs: request timing, error codes, and outcome types needed to keep the service running.

2. What we do not keep

Questions, screen content, images, and answers are not stored after a request completes. Nothing about what you look at is written to logs, databases, or backups at any layer. We do not run analytics, trackers, pixels, or ad scripts on this site or in the app, and we do not sell or share any data with anyone.

3. Where it lives

Accounts are held in Postgres (Supabase); licences, quotas, and usage counters are held on our own server. Both are in the EU. Requests to the AI service are made by our server, which does not forward your identity to model providers.

4. Children

Thallo is not directed at children under 16, and we do not knowingly sell to them.

5. Your rights

You can export or delete everything we hold about you at any time by writing to [email protected]. Deletion removes your account, licence, and usage history; payment records are kept only as long as tax law requires, by the processor.

6. Changes

If this policy changes materially, we update the date above and email subscribers once.