Your work stays yours.

Information you provide

Your account may include an email address, display name, role, store setup, workspace preferences, development goals, schedules, tasks, notes, alerts, team-directory entries, sales totals, walk and audit results, team workflow entries, comments, and photos you choose to attach. Contacts and photos are accessed only after you choose the related import or capture action.

How information is used

We use this information to sync your workspace, schedule reminders, generate reports, support collaboration you initiate, protect account access, and maintain the service. Taldi does not sell personal information or use it for third-party advertising.

App Store subscriptions

Apple handles payment for Taldi Pro subscriptions. Taldi does not receive your payment-card details. To activate and restore Pro, prevent purchase misuse, and process renewals, expirations, and refunds, Taldi verifies Apple's signed purchase records. We store the product, transaction and original transaction identifiers, verification and expiration dates, subscription status, and the Taldi account identifier associated with the purchase. These records are linked to your account and are not used for advertising.

You can manage or cancel an App Store subscription through Apple's subscription settings, including the Manage Subscription link in Taldi Pro. Deleting your Taldi account does not cancel your Apple subscription; cancel it separately with Apple. Taldi's active account-linked purchase records are removed with account deletion. Apple maintains its own purchase records under its privacy policy.

Taldi AI

AI features are off by default. When you enable one, Taldi explains what will be sent and asks for consent. Approved content may be sent through Taldi's authenticated AI gateway to its model provider solely to return the requested result. Usage, consent, and safety metadata may be retained for security and cost controls; raw private content is not written to gateway logs.

Taldi may use the tasks, routines, walk results, handoffs, schedules, sales summaries, and editable memories relevant to a request. The store name and ID saved in your account are not attached to AI model requests by default. Typed sales questions use a limited context without earlier chat history or unrelated workspace records. What you type, say, or upload, and records needed for a specific request, may still contain names or other identifying details. Answers identify their supporting workspace sources when possible. Suggested tasks, assignments, reminders, and status changes are previews: Taldi does not apply them until you review and confirm.

When live Taldi AI voice is available and you tap to begin, the app opens a live WebRTC audio connection to OpenAI while the voice sheet remains open. OpenAI processes the live audio, conversation context, and tool results needed to respond. Taldi’s authenticated gateway creates a short-lived credential, monitors usage, and privately handles Taldi tools; the permanent OpenAI key is never placed in the app. If you explicitly enable Recorded voice fallback in Taldi AI settings, a bounded recording may instead use the authenticated OpenRouter voice pipeline when a live conversation cannot connect. Taldi does not retain voice recordings or write conversation text to gateway logs. A bounded recent text excerpt, unfinished proposal and verified action results are retained for up to seven days to resume a conversation. You can clear the current conversation memory in Taldi AI options. Task Undo retains before-and-after task snapshots for up to eight days; Undo is available for 24 hours when the task has not changed. Photos you choose for task drafting are resized and processed by the backend vision model, with embedded metadata removed; this feature does not retain the photo. Quick tasks is optional and saves clear task creation requests immediately after validating them. Other changes and photo-derived drafts require review.

Approved memories remain in Taldi and are fetched for an AI conversation when the request needs them. OpenRouter receives content only when a specific Taldi reasoning feature is invoked. Schedule, task, Notes, and memory changes remain visible previews until you confirm them.

Report photos and PDFs selected for Explain Report, and files selected for contact extraction, are sent only for that request and are not saved by the Taldi intelligence hub. The generated explanation or imported contacts may be saved only when you choose to keep or apply them. A Taldi memory is synced to your account only after you approve it and can be deleted later.

Notifications and device access

Notifications, microphone, contacts, camera, and photo-library access are optional. You can decline these permissions and continue using the rest of the app. The microphone begins only after you tap the Taldi AI voice control. During a live conversation it remains active until you mute it, close the voice sheet, the app moves to the background, or the bounded session ends. Notification payloads are designed to avoid private task text.

Storage, sharing, and retention

Synced data is stored with Taldi's service providers and protected by account- and workspace-scoped access controls. Entries, comments, and attachments submitted to a team workflow—such as Credits—are visible to teammates who have access to that workflow. Data is otherwise shared only with service providers needed to operate Taldi, when you deliberately share or assign an item, when required by law, or to protect the service. Local drafts, including an offline workflow photo waiting to sync, may remain on your device until they sync, you remove the app, or you clear its data.

Connections and provider storage are encrypted. Synced sales values are also encrypted in Taldi's gateway before they are saved in the database, with the key kept outside that database. Taldi's service and trusted operators with access to the key can still decrypt them. Older backups may contain previous readable copies until they expire, and sales drafts may remain readable in local device storage. For the current scope and limits, read Sales data explained. A location nickname reduces identifying detail but does not make an account anonymous. See the plain-language trust overview.

Your choices

You can turn off AI and notifications, edit workspace information, log out, or permanently delete your account from Settings → Account. Account deletion removes the account and active synced data associated with it and cannot be undone. Older provider backups may retain copies until their retention period ends.

Contact

Questions or privacy requests: hello@zenivadigital.com.