Privacy Notice

Abdulrahman Zubida provides TALU and acts as the data controller for the personal data described here. This notice explains what we collect, why, who we share it with, and how long we keep it.

What we collect and why

• Account data (name, email, sign-in identifiers, language preference) — to create and secure your account, on the basis of performing our contract with you.
• Kitchen data (food items, quantities, expiry dates, cooking and consumption history, household membership) — to provide the service you signed up for.
• Capture input (barcodes, receipt or food photos, voice recordings) — to identify food you are adding. Processed only to return a suggestion for your review.
• Usage and device data (feature events, IP address, device identifiers, error logs) — for security, fraud prevention and improving the product, on the basis of our legitimate interests.
• Support messages — to answer your questions.
• Notification preferences and timezone — to send only the messages you asked for, at a time you chose.

Who we share it with

• Hosting, database and infrastructure providers that run the service on our behalf.
• AI and food-data providers that process capture input to identify products, limited to what is needed for that task.
• Paddle.com, our Merchant of Record, for the sale of memberships, subscription management, payments, tax compliance and invoicing.
• Professional advisers, and authorities where required by law.

We do not sell personal data and we do not run advertising.

International transfers

Some providers process data outside your country. Where that happens we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision.

Retention

We keep your account and kitchen data while your membership is active. If a membership lapses, data is preserved for a limited retention window so you can reactivate or export it, after which it is deleted or anonymised. Deleting your account removes your personal data, subject to records we must keep for legal or accounting reasons.

How to delete your account explains the steps, what is removed, what we must retain, and how to request deletion if you cannot sign in.

Your rights

Depending on where you live you may request access, correction, deletion, restriction, portability, or object to processing, and you may withdraw consent at any time. You can also complain to your local supervisory authority. We respond within one month.

Security

We use appropriate technical and organisational measures, including encryption in transit, row-level access controls so household data is only readable by its members, and server-side verification of every entitlement.

Cookies and local storage

We use essential storage only: your session, language choice and small interface preferences. We do not use advertising cookies.

Contact

Privacy questions or requests: support@taluai.com.