Trust at Talo

Privacy, explained plainly.

This notice describes what Talo handles, why we handle it and the choices you have—including for Connected Gmail accounts.

Effective: 6 September 2026 · Build: 2026-09-06T11:40:39.892Z

1. Who we are

Talo is a household life-admin service operated from the United Kingdom. In this notice, “Talo”, “we” and “us” mean the operator of the Talo app and ask-talo.com.

Questions or privacy requests can be sent to support@ask-talo.com.

2. What we collect

Depending on the features you use, Talo may handle:

  • account details such as your name, email address and sign-in identifiers;
  • content you add, including household records, product information, documents, routines, dates and preferences;
  • technical and security information such as device, browser, diagnostic and audit data;
  • information from services you choose to connect, as described below.

We only ask for information needed to provide, protect and improve the features you use.

3. Connected Gmail accounts

If you choose to connect Gmail, Google asks you to approve the restricted gmail.readonly permission, shown as “View your email messages and settings”. Talo uses it to read a bounded set of recent Inbox messages and identify household details that may be useful to you.

Read only means read only.Talo cannot send, edit or delete your Gmail messages.

Google data Talo accesses

For messages within the connection settings you choose, Talo may access message and thread identifiers, sender and recipient addresses, subject lines, dates, labels, body text, attachment names and supported attachment files. Talo also receives the Google account identifier and email address needed to keep the correct mailbox connected. It does not request permission to compose, send, edit or delete mail.

How Talo uses Google data

Talo uses this information only to provide and protect the Gmail-connected features you request: checking the selected Inbox window, detecting useful household information, showing it to you for review, processing supported attachments, preventing duplicate work, maintaining the connection and diagnosing failures. Security scanning and configured AI-assisted extraction may be used only to deliver these features. Talo does not use Google user data for advertising, sell it, build advertising profiles from it, or use it to train general-purpose AI models.

Storage, sharing and protection

Google access and refresh tokens are encrypted server-side using authenticated AES-256-GCM encryption. They are not placed in the mobile app or public website. Raw email text and attachment files are stored only for the 6, 24 or 72-hour retention period you select, unless you explicitly confirm an attachment for longer-term storage in Talo. Provider message identifiers, sync cursors, security records and useful household details you choose to keep may remain so Talo can operate reliably and show your saved records.

Google data is shared only with Talo’s contracted cloud hosting, database, malware-scanning and configured processing providers when necessary to deliver the Gmail-connected feature. Those providers process it for Talo under appropriate confidentiality and security controls. We may also disclose information when legally required or when necessary to protect users and the service. We do not allow providers to use Google data for their own advertising or general-purpose model training.

Deletion and revoking access

Disconnecting Gmail in Talo stops future mailbox checks and deletes Talo’s encrypted Google credentials and sync cursors. Temporary raw email text and attachments are automatically scrubbed or deleted when the selected retention period expires. Saved household details and any attachment you explicitly confirmed for longer-term storage remain until you delete that record or ask us to close your account. You can also revoke Talo directly from your Google Account’s third-party connections. For deletion help, email support@ask-talo.com.

Talo’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

4. How we use information

We use information to provide and personalise Talo, maintain connections you request, protect accounts, diagnose faults, respond to support requests, meet legal obligations and improve reliability. Where UK data-protection law applies, our bases include performing our contract with you, your consent for optional connections, legitimate interests in secure and dependable operation, and compliance with law.

5. Service providers and sharing

We do not sell personal information. We use carefully selected providers to run Talo—for example cloud database and authentication, hosting, transactional email, connected-account platforms, security scanning and configured processing services. These providers may process information only for the services we ask them to perform.

Relevant providers can include Supabase, Vercel, Resend, Google and Microsoft. We may also disclose information where required by law, to protect people or the service, or as part of a business transfer with appropriate safeguards.

Some providers operate outside the UK. Where required, we rely on recognised safeguards for international transfers.

6. How long we keep information

We keep account and household information while your account is active and as needed for the purposes described above. Specific records may have their own controls.

For raw Gmail message content temporarily retrieved for processing, you can choose a retention window of 6, 24 or 72 hours; the default is 24 hours. Derived household details you choose to keep can remain in Talo until you delete them or your account, subject to necessary security and legal records.

Backups and audit records may persist for a limited period before secure expiry.

7. Your choices and rights

You can review or correct profile information, control connected accounts, pause email checking, delete supported content, or ask us to close your account. Depending on where you live, you may also have rights to access, correct, erase, restrict, object to or receive a copy of personal data, and to complain to your data-protection authority.

Disconnecting Gmail

Disconnecting Gmail in Talo stops future mailbox checking and removes Talo’s encrypted local credentials and sync cursors. It does not necessarily revoke the overall Google permission grant. To revoke that too, open your Google Account’s third-party connections and remove Talo. See the Gmail connection guide.

8. Security

We use technical and organisational safeguards designed to protect information, including encrypted connections, restricted access, encrypted credentials and operational monitoring. No internet service can promise absolute security; please protect your device and sign-in details.

9. Children

Talo is not directed to children under 13 and we do not knowingly create accounts for them. Household information about others should only be added when you have a lawful and appropriate reason.

10. Changes to this notice

We may update this notice as Talo changes. We will publish the new effective date here and provide additional notice when a change is significant.

11. Contact

Email support@ask-talo.com for privacy questions or requests. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.