You told us things. Here’s exactly what we do with them.

Tayo exists to help you understand who you are and live into what you value. That only works if you trust us with the honest, sometimes vulnerable things you share. We built this policy to be plain-language and to say, clearly, what we do and don’t do with your information.

We collect only what’s needed to run the coaching experience:

• Account information: your name and email address.
• Conversation voice and transcripts: recordings and text from your intake and coaching sessions.
• Reflections and uploads: anything you choose to write, save, or upload as part of your plan.
• Usage data: basic product analytics, like which features you use, so we can improve the experience.

• We never sell your data.
• We never share your reflections or conversations with advertisers.
• We never train third-party models on your personal conversations.

Your information is used to run and personalize your coaching experience, powering the intake conversation, your dashboard, coaching sessions, and strategic plan. We also use aggregated, de-identified usage data to understand how people use Tayo and where to improve it.

We rely on a small number of trusted providers to run Tayo. They process data on our behalf and are bound by their own privacy and security commitments:

• Anthropic Claude: powers coaching and conversation intelligence.
• OpenAI Whisper: transcribes voice sessions into text.
• ElevenLabs: provides voice synthesis for spoken responses.
• Vercel: hosts the application.

Data is encrypted in transit and at rest. Access to personal information is restricted to the people who need it to operate and support the product. We practice data minimization: we don’t collect more than we need. We’re also intentionally keeping sensitive health data out of scope for this early-access product.

You can request a copy of your data or ask us to delete it at any time by emailing us. If you’re in California, the CCPA gives you the right to know what personal information we collect and to request its deletion. If you’re in the EU/UK, the GDPR gives you rights to access, correct, and erase your data, and to object to certain processing. We honor these rights for all users, regardless of location.

We keep your information for as long as your account is active, or as long as needed to provide the service. If you delete your account or request removal, we delete your personal data within a reasonable period, except where we’re required to retain it for legal reasons.

Questions, requests, or concerns about this policy or your data: email privacy@mytayo.ai.