Privacy Policy

Last updated: September 3, 2026

Object Talk is an AI-powered application that lets you photograph everyday physical objects and receive AI-generated text and speech responses. Object Talk operates using an anonymous app account and does not require an email address, phone number, password, or social sign-in.

Information we process

• Camera images that you capture on-demand for an Object Talk scan or debate. These images are transmitted securely to our backend and to our AI service provider solely to generate the requested response, and are processed ephemerally.

• A device-derived cryptographic identifier (salted SHA-256 hash or secure install UUID) used to authenticate your anonymous Object Talk account, maintain economy state, and protect against fraud or rate-limit abuse.

• Account and economy information, including coin balance, lifetime progression, referral state, and subscription or purchase entitlement records.

• Purchase and transaction tokens needed to validate store purchases, synchronize Pro entitlements, process refunds, and prevent duplicate starter bonuses.

• Crash and diagnostic information, where enabled, including stack traces, operating system version, device model, and app release version to diagnose instability and errors.

Camera and images

Object Talk requests camera access solely when you actively capture an object for a scan or debate.

We do not monitor your camera in the background. Images are processed in real time and are discarded immediately from server memory upon completion of response generation. We do not maintain a cloud photo gallery of your scans.

Data stored on your device

If you save a scan to your Library, the image, transcript, and pinned status are stored locally on your device in an on-device SQLite database and file cache.

Your saved memories remain on your device and are never uploaded to our servers as a cloud photo library.

You can delete individual memories at any time, or clear all locally stored data through the in-app "Delete my data" feature.

Third-party service providers & sub-processors

We share data only with essential technical service providers necessary to operate the app:

• OpenAI (AI Vision, Text & Speech Generation): Processes camera images, text prompts, selected character personas, and language preferences in real time to generate text and synthesized audio. OpenAI API inputs and outputs are not used to train AI models.

• RevenueCat (In-App Purchases & Entitlements): Processes anonymous app user IDs and app store purchase receipts from Google Play or Apple App Store to synchronize Pro subscriptions, manage consumable coins, and verify entitlement status.

• Sentry / Functional Software (Crash Diagnostics): Processes technical error logs, stack traces, device model, and OS version when an unexpected error occurs. Sentry is configured with privacy safeguards (no personal data transmitted).

• Render & Supabase (Backend & Database Infrastructure): Provides encrypted cloud server hosting and database storage for anonymous coin balances, cryptographic device session tokens, and purchase grant ledgers.

Audio and speech generation

Object Talk does not require microphone access and does not record your voice or background audio. Microphone permissions are hard-blocked on Android. Spoken audio is synthesized server-side via text-to-speech AI and streamed to your device for playback. Temporary local audio cache is automatically cleared when expired or deleted.

Purchases and subscriptions

Object Talk offers optional subscriptions (Pro 1-Month, 3-Month, 6-Month) and consumable purchases (Instant 120 Coins) processed through Google Play or Apple App Store.

Subscriptions automatically renew unless canceled at least 24 hours before the end of the current billing period. Subscriptions can be managed or canceled directly in your Google Play or App Store account settings.

Deleting your Object Talk account does not automatically cancel an active app store subscription or issue a refund; subscription management must be performed through the applicable app store.

What we do not do

Object Talk:

• does not require an email address, phone number, password, or social sign-in;

• does not sell or share personal data with third-party data brokers;

• does not use microphone recording permissions;

• does not use advertising identifiers (AAID/IDFA) for cross-app advertising tracking;

• does not store your camera scans in a cloud photo library.

Data retention

We retain data only as long as necessary for legitimate technical, operational, and legal purposes:

• Camera Captures: Discarded from server memory immediately upon completion of the inference stream (ephemeral real-time processing).

• Local Library Memories: Preserved on your device until you delete them or clear local data.

• Active Account & Economy Records: Retained in our database while your anonymous account is active to maintain coin balances and Pro status.

• Crash & Diagnostic Logs: Retained in Sentry for standard operational diagnostic cycles (up to 90 days).

• Post-Deletion Fraud Prevention: When an account is deleted, active account records are permanently removed or anonymized. A one-way cryptographic SHA-256 hash digest is retained in our deleted device register solely to prevent fraudulent repeat claims of one-time starter bonuses, and purchase transaction records are preserved for refund clawback verification.

Delete your data

You can delete your Object Talk account and user data directly from within the app:

1. Open Object Talk > Wallet (tap coin balance).

2. Tap "Delete my data" and confirm.

This immediately invalidates your session, anonymizes your database user row, resets coin balances, and wipes all on-device Library history and cached media.

You may also submit an external deletion request by emailing privacy@objecttalk.xyz or visiting our public deletion page at https://www.objecttalk.xyz/privacy/terms/delete.

Children

Object Talk is not directed to children under 13 years of age (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children.

Security

We implement industry-standard technical and organizational security measures, including TLS/HTTPS encryption in transit, secure server-side API key isolation, and hardware-backed credential storage (iOS Keychain / Android EncryptedSharedPreferences via Expo SecureStore).

Your Privacy Rights (GDPR, CCPA & DPDP Act)

Depending on your location, you may have specific statutory rights:

• Right to Access / Transparency: You can verify what data is processed under your anonymous identifier.

• Right to Erasure / Deletion: You can delete your account and associated data directly in the app via Wallet > Delete my data.

• Do Not Sell My Personal Information (CCPA): Object Talk does not sell or share personal information for cross-context behavioral advertising.

• India DPDP Act Rights: Users in India may exercise their rights to access, correction, and erasure of personal data by contacting our privacy officer.

Changes to this policy

We may update this Privacy Policy when our services, data practices, or legal requirements change. The updated version will be made available through the app and at our canonical privacy-policy URL.

Contact

For privacy questions or data-deletion requests, contact:

support@objecttalk.xyz 

Canonical Privacy Policy:

https://www.objecttalk.xyz/privacy