Privacy Policy

Talia ("we", "us", "our") operates the pension planning service at withtalia.com. This policy explains what data we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We are committed to protecting your privacy and handling your data transparently. If you have questions, contact us at help@withtalia.com.

Information you provide:

• Email address (for account creation and magic link login)
• Date of birth
• Salary and pension contribution details
• Family information (parental status, number of children)
• Retirement goals and lifestyle preferences
• Feedback and support messages

Information collected automatically:

• Usage analytics (pages visited, features used, lesson progress)
• Device type and browser information
• Error reports for debugging

• Contract performance: Processing your pension data to provide the service you signed up for.
• Legitimate interest: Analytics and error monitoring to maintain and improve the service.
• Legal obligation: Retaining data as required by applicable law.

We do not sell your data. We share data only with service providers who process it on our behalf:

Where your data is stored. Your data is hosted by Supabase in the European Union (Ireland). Where a sub-processor processes data outside the UK or EEA, that transfer is covered by the UK International Data Transfer Agreement or Standard Contractual Clauses.

We retain your data for as long as your account is active. When you delete your account, all personal data is permanently removed within 30 days. Aggregated, anonymised analytics data may be retained indefinitely. Error logs are automatically deleted after 90 days.

Under the UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data (via account deletion in Settings)
• Export your data in a portable format
• Restrict or object to processing
• Withdraw consent at any time

To exercise any of these rights, email help@withtalia.com.

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), encrypted storage, access controls, and rate limiting. We do not store passwords — authentication uses secure magic links.

We use essential cookies for authentication (session management via Supabase). We do not use advertising or tracking cookies. Analytics data is collected via Amplitude using first-party data only.

Talia is not intended for users under the age of 18. We do not knowingly collect data from children.

We may update this policy from time to time. Significant changes will be communicated via email or an in-app notification. The "last updated" date at the top reflects the most recent revision.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

For any privacy-related questions, contact us at help@withtalia.com.