1. Who we are
Talo is a household life-admin service operated from the United Kingdom. In this notice, “Talo”, “we” and “us” mean the operator of the Talo app and taalo.io.
Questions or privacy requests can be sent to support@taalo.io.
2. What we collect
Depending on the features you use, Talo may handle:
- account details such as your name, email address and sign-in identifiers;
- content you add, including household records, product information, documents, routines, dates and preferences;
- technical and security information such as device, browser, diagnostic and audit data;
- information from services you choose to connect, as described below.
- optional community Deal data, including a separate public username, exact Product and shop branch, Prices, Deal type, observation time, notes, comments, confirmations, follows, reports and camera photos.
We only ask for information needed to provide, protect and improve the features you use.
3. Connected email accounts
If you choose to connect Gmail, Google asks you to approve the restricted
gmail.readonly permission, shown as “View your email messages and
settings”. Talo uses it to read a bounded set of recent Inbox messages and identify
household details that may be useful to you.
If you choose to connect Outlook or Microsoft 365, Microsoft asks for
User.Read and Mail.Read. These let Talo identify the
connected account and read messages for the same bounded household-information flow.
Talo does not request permission to send, edit or delete Microsoft mail.
Google data Talo accesses
For messages within the connection settings you choose, Talo may access message and thread identifiers, sender and recipient addresses, subject lines, dates, labels, body text, attachment names and supported attachment files. Talo also receives the Google account identifier and email address needed to keep the correct mailbox connected. It does not request permission to compose, send, edit or delete mail.
How Talo uses Google data
Talo uses this information only to provide and protect the Gmail-connected features you request: checking the selected Inbox window, detecting useful household information, showing it to you for review, processing supported attachments, preventing duplicate work, maintaining the connection and diagnosing failures. Security scanning and configured AI-assisted extraction may be used only to deliver these features. Talo does not use Google user data for advertising, sell it, build advertising profiles from it, or use it to train general-purpose AI models.
Storage, sharing and protection
Connected-email access and refresh tokens are encrypted server-side using authenticated AES-256-GCM encryption. They are not placed in the mobile app or public website. Raw email text and attachment files are stored only for the retention period you select, from 6 hours to 30 days, unless you explicitly confirm an attachment for longer-term storage in Talo. Provider message identifiers, sync cursors, security records and useful household details you choose to keep may remain so Talo can operate reliably and show your saved records.
Google data is shared only with Talo’s contracted cloud hosting, database, malware-scanning and configured processing providers when necessary to deliver the Gmail-connected feature. Those providers process it for Talo under appropriate confidentiality and security controls. We may also disclose information when legally required or when necessary to protect users and the service. We do not allow providers to use Google data for their own advertising or general-purpose model training.
Deletion and revoking access
Disconnecting Gmail in Talo stops future mailbox checks and deletes Talo’s encrypted Google credentials and sync cursors. Temporary raw email text and attachments are automatically scrubbed or deleted when the selected retention period expires. Saved household details and any attachment you explicitly confirmed for longer-term storage remain until you delete that record or ask us to close your account. You can also revoke Talo directly from your Google Account’s third-party connections. For deletion help, email support@taalo.io.
Talo’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
4. Community Deals and moderation
Community Deal responses use an opaque public profile identifier and public username. Your private account name, email address, sign-in provider identity and profile image are not public Deal fields. Exact shop and observation time are used to keep a Deal traceable and locatable.
As Deal Hunter rolls out, Talo privately prepares a provisional public username for an account, even if its owner never posts. This may happen for a new account or when an existing account is prepared for the feature. Talo may request a Xiaomi MiMo suggestion to refine that username before you accept Deal posting terms. For this separate suggestion, MiMo receives only an opaque public profile identifier, the provisional username and the fixed locale; it does not receive your private name, email, provider identity, profile image or location. Talo checks the suggestion before using it. Your profile and content do not become public without the separate posting consent and community release gate.
New or edited Deal notes, comments and public profile text stay non-public while Talo checks them for spam, scams, harassment, sexual content, threats, illegal facilitation and personal information. Talo may use Xiaomi MiMo as a bounded moderation processor. The request contains the submitted text, content kind, locale and an opaque content identifier—not your name, email, household data, Product, shop, Price, username or profile image. Uncertain or conflicting results remain held.
Original Deal photos stay private. Only a separate sanitised derivative may become public after applicable privacy and image-safety checks. Private storage paths and image metadata are never returned in a public Deal. Reports, blocks and moderation receipts are retained only as needed to operate and protect the community.
5. How we use information
We use information to provide and personalise Talo, maintain connections you request, protect accounts, diagnose faults, respond to support requests, meet legal obligations and improve reliability. Where UK data-protection law applies, our bases include performing our contract with you, your consent for optional connections, legitimate interests in secure and dependable operation, and compliance with law.
7. How long we keep information
We keep account and household information while your account is active and as needed for the purposes described above. Specific records may have their own controls.
For raw message content temporarily retrieved from a connected Gmail or Outlook mailbox, you can choose a retention window from 6 hours to 30 days. Your current selection is shown in Talo. Derived household details you choose to keep can remain until you delete them or your account, subject to necessary security and legal records.
Backups and audit records may persist for a limited period before secure expiry.
8. Your choices and rights
You can review or correct profile information, control connected accounts, pause email checking, delete supported content, or ask us to close your account. Depending on where you live, you may also have rights to access, correct, erase, restrict, object to or receive a copy of personal data, and to complain to your data-protection authority.
You can use the in-app account-deletion control or our public account-deletion page. Account deletion covers your public Deal Hunter profile, Deals, comments and media as well as associated private account data, subject to any retention we must explain for security or law.
Disconnecting email
Disconnecting an email account in Talo stops future mailbox checking and removes Talo’s encrypted local credentials and sync cursors. It does not necessarily revoke the provider’s overall permission grant. Remove Talo from your Google or Microsoft account settings if you also want to revoke that grant. See the Gmail connection guide for Google-specific steps.
9. Security
We use technical and organisational safeguards designed to protect information, including encrypted connections, restricted access, encrypted credentials and operational monitoring. No internet service can promise absolute security; please protect your device and sign-in details.
10. Children
Talo accounts are for people who are at least 18, or old enough to enter the service agreement where they live. Household information about others should only be added when you have a lawful and appropriate reason.
11. Changes to this notice
We may update this notice as Talo changes. We will publish the new effective date here and provide additional notice when a change is significant.
12. Contact
Email support@taalo.io for privacy questions or requests. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.