If you cannot trustus with it, youwill not share it.

We collect only what we need to run the service. That means your account details (name, email, and a profile photo if you add one), anything you choose to record in the platform (mood check-ins, journal entries, messages to the AI companion), booking and payment records, and basic technical information such as the device and browser you use.

We use this to provide the service, to connect you with providers, to process payments, and to keep the platform safe. We do not use it for anything else.

We do not sell your information. We do not share it with advertisers. Sensitive details you share with the AI companion or with a provider are never repurposed for marketing.

Your journal entries and mood check-ins are visible only to you. Providers cannot read them. Administrators cannot read them. They are stored under your account and the access rules enforce that at the database level, not merely in the interface.

A provider sees what you share during a session, plus any note you attach to a booking. Clinical notes a provider writes about a session are visible to that provider only.

Where your account is part of an institutional package, your organisation never sees who booked a session, when, or with whom. Reporting to organisations is aggregate and is suppressed entirely for small groups so that individuals cannot be identified.

Your data is encrypted in transit and at rest. Access to sensitive records is restricted on a need-to-know basis and protected by secure authentication.

To be precise about what this does not mean: your data is not end-to-end encrypted. Our infrastructure provider holds the encryption keys, which means that — in principle — data could be accessed by us or by them under legal compulsion. We would rather state that plainly than imply a stronger guarantee than we can deliver.

Conversations with the AI companion are processed by a third-party AI provider in order to generate a response. Those conversations are stored in your account so you can revisit them, and you can delete them.

The AI companion is always labelled as AI. It does not diagnose, prescribe or claim to be human.

Where a conversation suggests possible immediate risk, the platform surfaces crisis resources and may create an internal record so that a human can follow up. That record notes the category of concern, not the content of what you disclosed.

Payments are processed by Modem Pay, a payment provider licensed by the Central Bank of The Gambia. We do not receive or store your full card details.

We keep a record of what you paid for and when, because we are obliged to and because you need to be able to see your own history.

You can see what we hold about you, correct it, export it, or delete it. Account deletion and data export are available from your settings — you do not need to ask us.

Where a feature relies on optional processing, such as personal wellbeing insights, participation is separately consented to and you can withdraw that consent without losing the rest of the service.

Where we are legally required to retain certain records — payment records, for example — those are kept for the required period and then deleted.

We keep your account data for as long as your account is open. When you delete your account, your profile, journal entries, mood history and companion conversations are deleted.

Records we are obliged to retain, such as transaction records, are kept for the statutory period. Anonymised, aggregated statistics that cannot be linked back to you may be retained.

We use a small number of providers to deliver the service: cloud infrastructure and database hosting, an AI provider for the companion, and a payment processor. Each is bound by an agreement that limits how they may use, store or share your data.

We do not permit any of them to use your information for their own purposes.

We maintain an incident response plan. If we suspect a data breach, we investigate promptly, contain it, and notify affected users and — where required — regulators, in a timely and transparent way.

Talk is designed to comply with The Gambia's Data Protection and Privacy Act, drawing on internationally recognised data protection standards where local guidance is still developing.

If you have a concern about how your data is handled, contact us and we will respond.