Privacy Policy

Effective August 2026

What TlaGo stores

TlaGo stores the account details you provide, your journeys, routines, daily entries, reflections, favourites, reflection photos, reminder preferences, notification subscription details, and support correspondence you choose to send.

How your data is used

Your data is used to run the app, sync your experience across devices, send reminders you enable, improve reliability, and respond to support requests.

Local and cloud storage

TlaGo keeps a local browser backup for supported offline use. Signed-in data is synced to Supabase so it can be restored across devices. Private reflection photos are stored in Supabase Storage. Authentication may be provided by Supabase and, when you choose it, Google.

Microphone and photos

The optional dictation control uses your device's browser or operating-system speech-recognition capability to turn speech into reflection text. The TlaGo application does not store an audio recording; your browser or operating-system provider may process audio to provide recognition. The optional photo picker lets you choose an image to attach to a reflection; TlaGo stores only the image you select.

Notifications

Notifications are optional and requested only after you choose to enable them. If enabled, TlaGo stores a push subscription or device token, device/browser details, timezone, reminder preferences, and delivery records so reminders can be delivered. Delivery uses the applicable browser push provider or Google Firebase Cloud Messaging.

TG routine support

If TG is enabled for your account and you open a TG invitation, TlaGo sends OpenAI only a minimal routine context packet and the option you explicitly select during that interaction. The packet may include the routine title, journey day, active duration, counts and dates derived from eligible actual check-ins, a server safety classification, and the current attempt number. Daily Reflections, reflection photos, your name, email, unrelated routines, and the full 90-day history are not sent to TG or OpenAI by default.

TG uses the OpenAI Responses API without persistent TG memory. TlaGo does not store full TG transcripts by default. It stores limited product signals such as invitation and interaction state, up to two attempt events, technical success or failure, and whether the routine is later recorded complete; later completion is not treated as proof that TG caused it.

What TlaGo does not do

TlaGo does not sell personal data, does not include advertising, and does not currently process subscriptions or payments. No third-party analytics or advertising SDK is present in the current application.

Deleting your account

You can delete your account from Settings inside TlaGo or use the public account-deletion resource. Deletion removes the account and associated TlaGo app data, including TG intervention and event records, from the active production database and private reflection-photo storage.

Read the account-deletion instructions.

Retention after deletion

Supabase Pro daily database backups may retain residual copies of deleted database records for up to 7 days through normal backup rotation, and relevant operational logs may be retained for up to 7 days. Supabase Storage objects, including reflection photos, are not included in database backups. Vercel is not TlaGo's primary store for journal or account content, but it and other infrastructure providers may retain request, deployment, platform, or queued-delivery metadata under their applicable retention and delivery policies.

Routine correspondence sent to TlaGo support or privacy channels is retained for up to 12 months, unless longer retention is reasonably necessary for legal, security, fraud prevention, dispute resolution, or compliance. Deletion is subject to the email provider's normal backup and purge processes.

Contact

Privacy and data questions can be sent to privacy@tlago.app. Product support is available at support@tlago.app.