Privacy Policy
Version 2026-11-13
1. Controller
Pisio Technologies SL, tax ID B93856136, calle Juan Ramón Jiménez, km 0, núm. 11, esc. 3, pta. 4, 08191 Rubí (Barcelona), Spain. Contact: privacidad@pisiotechnologies.com.
2. What data we process and why
In Taluna you talk with an AI assistant about your relationships. What you share is intimate and may reveal health data, details about your sex life or about other people. That's why we process the minimum needed and nobody else reads it.
| Data | Purpose | Legal basis |
|---|---|---|
| Account: alias, language, confirmation that you are 18 or over, and how you sign in (Apple, Google or email). We don't store your email: only an encrypted fingerprint to recognize you when you come back. | Create your account and sign you in. | Contract (GDPR art. 6.1.b) |
| Your spaces: the type of relationship, the label and the name you give the other person. | Organize your conversations by relationship. | Contract |
| Your conversations with the assistant, what it remembers from them and your notes. | Reply taking your story into account. You can see, correct and delete memories and notes. | Contract and, if what you share reveals special categories (health, sex life or others), your explicit consent (art. 9.2.a), given when you accept this policy and withdrawn by deleting the content or your account. |
| What you share in a linked space: only the exact text you authorize. | Let the other person read it and their assistant take it into account, until you withdraw it. | Your consent (art. 6.1.a and 9.2.a), withdrawn by no longer sharing. |
| Your voice, if you dictate. | Turn it into text for you to review. Audio is not stored. | Contract and your explicit consent, as for conversations. |
| A possible-risk flag on a message (threats, violence, self-harm…). | Have the assistant reply putting your safety first. Nobody else sees it and it is deleted with the message. | Vital interest and your explicit consent (art. 9.2.a and 9.2.c) |
| Subscription: store, product, dates, status and a fingerprint of the purchase identifier. We never receive your card. | Activate and maintain your subscription. | Contract |
| Technical data: sessions, sign-in attempts and a log of important actions, without text. | Security and fault detection. | Legitimate interest (art. 6.1.f) |
We do not sell your data and do not use it for advertising or to train AI models. Replies are generated by AI with no human review of your conversations: they are for guidance only, are not therapy or professional advice and have no legal effect.
3. Who sees your data inside Taluna
Only you see your conversations, memories and notes. Nobody else reads them, not even the other person in a linked space: they only get the exact text you authorize, and stop seeing it when you withdraw it. What they have already read can't be erased from their memory. If the other person shares something with you, you see it while it remains authorized.
4. Who we share it with
Only with providers acting on our behalf, under contract:
| Provider | Purpose | Where |
|---|---|---|
| Hetzner | Server, database and encrypted backups. | Germany (EU) |
| Amazon SES | Sign-in code emails. | Ireland (EU) |
| Cloudflare | Secure connection between the app and the server. | US (global network) |
| Anthropic (Claude) | Generate the assistant's replies, detect possible risk situations and suggest the sentence for your notes. | US |
| OpenAI | Transcribe your voice, search your memories and notes by meaning and, if Claude fails, reply instead. | US |
Transfers to the US rely on the EU-U.S. Data Privacy Framework or standard contractual clauses. Anthropic and OpenAI do not use your data to train their models and may keep it up to 30 days to detect abuse. Apple and Google process your purchases and, if you sign in with them, your sign-in, as independent controllers.
5. How long we keep it
| Data | Period |
|---|---|
| Voice | Not stored: deleted once transcribed. |
| Conversations, memories and notes | Until you delete them, the space or your account. |
| What you share | Until you withdraw it or delete the space or your account. |
| Sign-in codes and invitations | 24 hours after they are used or expire. |
| Account and subscription | Until you delete your account. |
| Backups | 35 days: what you delete disappears from them when they expire. If we ever restore a backup, we delete again whatever you had deleted after it. |
When you delete your account, all your content is deleted right away; the log of important actions stays without your name and without text.
6. Your rights
You can request access, rectification, erasure, restriction, portability and objection, and withdraw your consent, by emailing privacidad@pisiotechnologies.com. We reply within one month. Since we don't store your email, the quickest way is in the app, under Settings → Your data: Download my data and Delete my account. You may complain to the Spanish Data Protection Agency (aepd.es) or to your local authority. If you live outside the EU, you also have the rights your local law gives you.
7. Minors and security
Taluna is only for adults aged 18 or over; if we detect a minor's account, we delete it. Connections are encrypted (HTTPS) and so are backups.
8. Changes
If we make a significant change to this policy, the app will ask you to accept the new version.