1. Who we are

talo (“we”, “us”, “our”) is operated by talo Technologies Pvt. Ltd., headquartered in Gurgaon, Haryana, India. We provide a mobile and web app that helps flatmates track and settle shared expenses.

2. What we collect

We only collect what we need to run the app.

Account data — name, email address, phone number, the flats you belong to.
Flat data — expenses, splits, balances, settlements, and receipts that you and your flatmates enter into the app. This data is end-to-end encrypted between members of your flat.
Device data — operating system, app version, language, crash logs (no personally identifying information).
Optional data — your UPI VPA, if you choose to save it for faster settlements. We never store your bank statements, account numbers, or balance.

3. What we don't collect

Your bank login, balance, or transactions outside talo.
Your contacts, SMS, call logs, photos (beyond receipts you upload).
Location, unless you explicitly tag an expense with one.
Browser fingerprints, ad IDs, or cross-app tracking.

4. How we use it

We use your data to run talo — store your expenses, sync them between flatmates, generate balances, open the right UPI deep-link, and reply when you email us. We don't use it for anything else.

5. How it's secured

Flat data is end-to-end encrypted; we cannot decrypt it.
Transport: TLS 1.3 everywhere.
Auth: short-lived OAuth tokens, device-bound.
Servers: hosted in India (AWS Mumbai region).
Background checks for staff with production access. Access is audited monthly.

6. Who we share data with

We share data only with the providers we need to run the service — and only the minimum required.

AWS — encrypted storage and compute.
Postmark — transactional email.
Sentry — crash reporting (no PII).
NPCI-licensed UPI partner — deep-link generation only.

We never sell, rent, or trade your data. We don't share it with advertisers. If we're ever legally required to disclose data, we will tell you first if the law allows.

7. Your rights

Under India's Digital Personal Data Protection Act (and the GDPR if you're in the EU) you can:

Ask what data we hold about you.
Ask us to correct it.
Ask us to delete it.
Withdraw consent at any time.
File a complaint with a data protection authority.

Email hello@talo.club with the subject “privacy request” and we'll respond within seven days.

8. Children

talo is for adults sharing flats. We don't knowingly collect data from anyone under 18. If you're a parent who believes a child has used talo, email us and we'll delete the account.

9. Changes to this policy

When we change this policy, we'll update the date at the top and email everyone with an account. The current version is always here.

10. Contact

talo Technologies Pvt. Ltd.
DLF Phase 3, Gurgaon 122002
Haryana, India
hello@talo.club

Privacy Policy