Privacy Policy
Last updated: November 2, 2026
AITalk ("we", "us") respects your privacy. This Privacy Policy explains how we collect, use, store, and share personal information when you use the AITalk website and mobile app (the "Service"), available at https://aitalk.im, and how you can exercise your rights.
Please read this policy before using the Service. Creating an account, subscribing, or continuing to use the Service means you have read it. We may update this policy. Material changes are notified as described in section 13.
1. Data controller
The data controller is the legal entity that operates AITalk:
- Company: Sun Run LLC
- Service name: AITalk
- Website: https://aitalk.im
- Privacy and support email: support@aitalk.im
- Data protection officer: not appointed
2. Personal information we collect
We collect the information needed to provide language learning and account services.
2.1 Information you provide
- Account information: name, email address, avatar, nickname, and the account identifiers received when you sign in with email, Google, or Apple. Email passwords are stored as hashes. We do not keep plaintext passwords.
- Learning profile: native language, target language, level, goals, daily practice settings, lesson progress, learning plans, collections, and usage statistics.
- Practice content: text you type, speech and transcripts, lesson answers, AI feedback, and text-to-speech requests.
- Payment information: transaction amount, currency, payment status, and subscription identifiers. We do not store full card numbers, CVV codes, or complete payment credentials. Card data is handled by our payment processor, as described in section 5.
- Communications: emails and feedback you send to support.
2.2 Information collected automatically
- Device and network: IP address, device model, operating system, browser type, and time zone.
- Usage: pages visited, feature use, activity logs, and session length.
- Logs: request times, error logs, and performance data.
When you sign in with Google or Apple, we receive only the basic profile you authorize, such as name, email address, and avatar. We do not collect precise location.
3. How we use personal information
| Purpose | Legal basis |
|---|---|
| Provide and maintain language learning, speaking practice, and account sync | Contract |
| Billing, subscriptions, and payment processing | Contract |
| Customer support | Contract / legitimate interests |
| Service messages, including billing, security, and policy updates | Legitimate interests |
| Security, abuse prevention, and fraud prevention | Legitimate interests |
| Product improvement and usage analytics | Legitimate interests |
| Compliance with law | Legal obligation |
| Product updates or offers sent with your consent | Consent |
We may aggregate or de-identify data for statistics. Those results do not identify you. We do not use your practice input or speech to train artificial intelligence models offered to others without your explicit consent.
4. Cookies and similar technologies
| Type | Purpose | Can be disabled |
|---|---|---|
| Strictly necessary | Sign-in, sessions, and core features | No |
| Functional | Language and interface preferences | Yes |
| Analytics | Understand feature use and improve the product | Yes |
We do not use marketing cookies for targeted advertising. If website analytics are enabled, they may include Google Analytics. You can refuse non-essential cookies in your browser. Some preferences or statistics may then be unavailable.
5. Sharing and disclosure
We do not sell your personal information, including a "sale" as defined by laws such as the CCPA. We share information only:
- With service providers that host, store, authenticate, support, analyze, or process artificial intelligence features, under confidentiality and data-processing duties. Payment card data is processed solely by our PCI-DSS payment processor, Waffo Pancake, and is not stored on our servers. Purchases made through the Apple App Store are processed by Apple under Apple's rules.
- With AI and speech providers: coaching feedback uses OpenAI GPT-5.5, open conversation uses OpenAI GPT-6.1 Terra, transcription uses OpenAI GPT-4o mini Transcribe, realtime voice uses OpenAI GPT-4o mini Realtime, and text-to-speech uses Microsoft Azure AI Speech Dragon HD voices. This processing is limited to the feature you requested.
- With Google or Apple, when you choose that sign-in method.
- For legal reasons, including law, court orders, or lawful requests from authorities.
- In a business transaction, such as a merger, acquisition, or asset sale, provided the recipient continues to protect the information.
- With your consent, for any other purpose.
6. Security
- Data in transit is protected with TLS / HTTPS.
- Passwords and similar credentials are encrypted or hashed.
- Internal access follows least privilege.
- We maintain the service and address known vulnerabilities.
If a personal-data incident is likely to affect your rights, we will notify you and the relevant authority within 72 hours of becoming aware of it, where the law requires notice. Keep your account credentials private. No internet service can guarantee absolute security.
7. Retention
| Data | Retention | Then |
|---|---|---|
| Account and learning profile | While the account is active; 90 days after deletion or subscription cancellation | Delete or anonymize |
| Practice content and transcripts | While the account is active; 90 days after deletion | Delete or anonymize |
| Transaction and subscription records | As required for finance and tax, typically 7 years | Delete or archive |
| Support records | 2 years | Secure deletion |
| Security and audit logs | 12 months | Secure deletion |
We may keep information longer when the law, a dispute, or a security investigation requires it.
8. Your rights
Contact support@aitalk.im to exercise these rights. We respond within 30 calendar days.
| Right | What it means |
|---|---|
| To be informed | Know what we collect and how we use it |
| Access | Receive a copy of your personal information |
| Correction | Fix inaccurate or incomplete information |
| Deletion | Ask us to delete data where the conditions are met |
| Restriction | Pause processing in certain cases |
| Portability | Receive your data in a common electronic format |
| Objection | Object to processing based on legitimate interests or marketing |
| Withdrawal of consent | Withdraw consent where processing is based on it |
You may also complain to a data protection authority where you live.
9. Marketing and unsubscribe
We send product updates or offers only with your consent. You can use the unsubscribe link in the email, or email support@aitalk.im. Unsubscribing does not stop necessary messages about billing, security, or policy updates.
10. International transfers
Our providers may be located in the United States or other countries, including hosting, sign-in, payment, and artificial intelligence providers. For international transfers, we use data-processing agreements and the EU Standard Contractual Clauses (SCCs), or an equivalent safeguard available in the recipient's location.
11. Children
The Service is for people who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information to us, contact us and we will delete it.
12. Third-party services
The Service may link to third-party sites or connect to Google, Apple, payment, and artificial intelligence services. This policy covers information we process. Read those third parties' privacy policies separately.
13. Changes
For a material change, we will notify you at least 15 days in advance by an in-product notice or your registered email, and we will update the date at the top of this page. Continued use after the effective date means you accept the updated policy.
14. Contact
- Privacy and support: support@aitalk.im
- Website: https://aitalk.im
We handle requests on business days.