Privacy Policy

Last updated: January 28, 2026

1. Introduction

Welcome to TalonTodo ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Email address, password (hashed), first name, last name
  • Academic Information: Classes, semesters, tasks, assignments, grades, and study materials
  • Study Data: Flashcards, study sessions, study guides, and notes
  • Productivity Data: Pomodoro sessions, habit tracking, effort logs, and streak information
  • Profile Information: Preferences, notification settings, timezone, and subscription tier
  • Payment Information: Processed securely through Stripe (we do not store credit card numbers)

2.2 Information Automatically Collected

  • Usage Data: Features you use, pages you visit, and interactions with the service
  • Device Information: Browser type, device type, operating system, and IP address
  • Analytics Data: We use Amplitude to collect and analyze usage patterns, feature adoption, and user behavior to improve our service
  • Cookies and Tracking: We use cookies and similar technologies to improve your experience

2.3 Third-Party Integrations

  • Google Calendar: If you choose to sync your calendar, we access calendar events (with your permission)
  • Google OAuth: If you sign in with Google, we receive your email and basic profile information
  • Amplitude: We use Amplitude for product analytics to understand how users interact with our service and improve the user experience

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our service
  • Process transactions and manage subscriptions
  • Send you important notifications about your account and tasks
  • Personalize your experience and provide relevant features
  • Analyze usage patterns to improve our service
  • Prevent fraud and ensure security
  • Comply with legal obligations

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

  • Service Providers: With trusted third-party services that help us operate (e.g., hosting, payment processing, email delivery, analytics services like Amplitude)
  • Legal Requirements: When required by law or to protect our rights and safety
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • With Your Consent: When you explicitly authorize us to share your information

5. Data Security

We implement industry-standard security measures to protect your information, including:

  • Encryption of data in transit (HTTPS/TLS)
  • Secure password hashing (bcrypt)
  • Regular security audits and updates
  • Access controls and authentication

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Your Rights and Choices

You have the following rights regarding your personal information:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your account and data
  • Data Portability: Export your data in a machine-readable format
  • Opt-Out: Unsubscribe from marketing emails (account-related emails will still be sent)

To exercise these rights, please contact us at [email protected].

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Remember your preferences and settings
  • Authenticate your session
  • Analyze usage patterns and improve our service (including through Amplitude analytics)
  • Provide personalized content

You can control cookies through your browser settings. However, disabling cookies may limit some functionality of our service.

8. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. By using our service, you consent to the transfer of your information to these countries. We ensure appropriate safeguards are in place to protect your data.

10. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal purposes.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our service after such changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Back to Home