You told us things. Here’s exactly what we do with them.

• Account information: your email address, and your first and last name.
• Session text: what you say or type to the coach during a session, saved as text. Tayo never keeps voice recordings.
• What you write: your corrections and replies to your recaps and dashboards, your answers to quick questions, your focus, and your marks on recommendations.
• Reminder setting: whether you get the reminder email (sent once it's been a week since your last session), and which version you agreed to (turn it off with the link in any of those emails).
• Starting ratings: how you rate seven areas of your life from 1 to 10 before your first session, if you answer. They shape your portrait and what your coach knows about you. An organization never sees them; it sees only group totals. They're deleted with your account.
• Ratings before each session: Before each session, we ask you to rate how each part of your life is going, including your physical and mental health. We save these ratings and use them to guide your coach and your suggestions.
• Getting-to-know-you answers: your answers to the optional questions before your first session. Your coach reads them to get to know you. They're kept like any text you share, and you can edit or delete them on Your Tayo.
• Voice choice: the coach voice you pick (Gentle, Warm, Steady or Direct), used to speak your coach's replies and your recap. It also tells your coach how much you'd like to be challenged.
• Coaching notes: after each session, Tayo writes short private notes for your coach on how you like to be coached: the kinds of replies that help you open up, words that matter to you, and your pace. They're used only to guide your coach and aren't shown anywhere else. If you delete a session, they're deleted too and start again after your next session. They're deleted with your account.
• Suggestions: a few small next steps Tayo writes from each session. They're deleted with that session, and with your account.
• Opening Where to next: the first time you open Where to next after each session, and when. We use it only to count how many people look at their suggestions. It's deleted with that session and with your account.
• What you share: text you paste, or the text of a file or photo you upload. If you share a file, Tayo reads it, keeps only the text, and deletes the file. It's gone from Tayo right away, and from our backups within 7 days. You can edit or delete that text any time. If an upload doesn't finish, its pieces are deleted within a day.
• Organization: if you joined through an invite link, which organization.
• Site visits: which pages are visited and when, through Vercel Analytics. Tayo also keeps its own daily count of visits to its public pages, with the campaign tag from the link that brought you there (like ?src=), if there was one. These counts never say who you are. Never what you said.
• Sign-in safety: a scrambled form of your network address, to stop too many sign-in tries. It's deleted within two days.

1. We use your data to run sessions, write recaps, build your dashboards and create recommendations.
2. Tayo's team doesn't look at your sessions, except to fix a problem you report or when the law requires it.
3. One exception: if you say you or someone else is in immediate danger, Tayo shows you crisis resources, and within a day the Tayo team gets an email that it happened. The email shows your account and the time, never what you said. Tayo also stops coaching on that topic. Someone on the Tayo team may email you once to check in and share support resources. If you delete the session first, no email is sent.

If you joined through an organization, it sees only group totals, for groups of 10 or more. Never your sessions or your name.

To see what’s working, we use counts, never content.

These services run Tayo. Each gets only what it needs:

• Anthropic: runs your coaching sessions, writes recaps, builds your dashboards and creates recommendations. It also runs a safety check on each message and reads the text in a PDF or photo you share.
• OpenAI: turns your voice into text. If Google can't speak a reply or your recap, OpenAI speaks it instead.
• Google: speaks your coach’s replies, and your recap when you tap Listen. It gets only those words and the voice to use, never your recordings.
• Supabase: stores your account and session data and Tayo’s visit counts, and handles sign-in.
• Vercel: hosts Tayo, and counts page visits (Vercel Analytics), never what you said.
• Resend: sends your sign-in codes, and the Tayo team’s daily safety email: an account ID and a time, never what you said. If your reminders are on, Resend sends a reminder email to your address once it's been a week since your last session, with your first name if you gave one, when your next session opens and the next steps you set (in your words). Nothing else from your sessions.
• Apple, YouTube and Google Books get short, general search phrases from us, so we can find podcasts, videos and books for you. We also look up episode titles on Spotify to link to them. We never send your name or personal details to any of them.

Your data is encrypted. Only the systems that run Tayo and the small Tayo team can access it. Tayo's team doesn't look at your sessions, except to fix a problem you report or when the law requires it.

You can delete a session, something you shared, or your whole account yourself, in the app. It's gone from Tayo right away, and from our backups within 7 days. For a copy of your data, email privacy@mytayo.ai. We give everyone the rights California’s CCPA and the EU and UK GDPR give: to know, see, correct and delete your data, and to object to some uses.

We keep your sessions and what you share until you delete them. Then they’re gone from Tayo right away, and from our backups within 7 days.

Anthropic and OpenAI hold what you share for up to 30 days as a safety check, then delete it. If their systems flag misuse, they can keep it longer to look into it. Deleting in Tayo doesn’t shorten that. When Google speaks your coach's replies with its Gemini voice, it can keep a reply its systems flag as possible misuse for up to 90 days, only to look into it.

Questions, requests, or concerns about this policy or your data: email privacy@mytayo.ai.