Privacy Policy

Last updated: 2 Nov 2026

Thank you for using Talanoa (“the App”). Your privacy is at the core of our product philosophy.
Talanoa is built as a local-first email client, which means your emails and access tokens stay on your device, not on our servers.

This Privacy Policy explains what information we collect, how we use it, how we store it, and the choices you have.

1. Who We Are

Talanoa is operated by E2MA LABS (“we”, “us”, “our”).
If you have any questions about this Privacy Policy, you can contact us at:
Email: [email protected] For privacy requests (access, deletion, etc.):
Email: [email protected]

2. Information We Collect

We only collect the information necessary to operate your Talanoa account and premium subscription. We do not collect or store the content of your emails, nor do we access your OAuth tokens.

2.1. Google / Outlook OAuth Information

When you connect a Google or Outlook account, Talanoa requests OAuth permission to function as an email client.

What we retrieve:

Your email address
Basic profile information
Email metadata and content, but processed and stored locally only on your device

What we store on our servers: Nothing.
Your OAuth access tokens are encrypted and stored only on your desktop.
We never receive or store your tokens, emails, or email metadata.

2.2. Supabase Account Data (Cloud Storage)

We use a small Supabase database to maintain your Talanoa account and subscription status.

We store only the following information:

First name
Last name
Email address
Operating system (e.g. macOS, Windows, Linux)
Stripe customer ID (to link your subscription with Stripe)

Why:

To allow login and user identification
To manage your premium plan
To provide support if needed

Apart from the usage data described in 2.3, no other personal data is stored on our servers.

2.3. Usage Data and Crash Reports

To understand which features help, where new users get stuck and which errors they meet, the App sends usage data about how it is used. It is on by default and you can turn it off at any time in Settings › Security (desktop) or Settings (mobile).

What it contains:

The steps reached and the actions taken in the App (for example: an account connected, the first email archived, a feature used, a setting changed), with when they happened since installation
The errors met, described by their type and a technical fingerprint only, never by their message
Your device’s platform and version (e.g. macOS 15, Android 16), the App’s version and language, and how many accounts are connected
A random identifier created when the App is installed

What it never contains: the content of your emails, any email address, subject, text, attachment, contact, folder or label name, or what you search for. Your IP address is not stored.

This data is pseudonymous: it is linked to your Talanoa account, so that we can understand a user’s journey and help you when you contact us. It is never used for advertising and never sold.

Crash reports (Sentry) contain technical information about an error (the device, the App’s version, the trace of the error), the type of email account it happened in (for example Gmail or IMAP) and the random identifier of the installation, so that we can find a crash you tell us about. They never contain your email address, your name or the content of your emails.

2.4. Cookies & Local Storage

Talanoa is an Electron desktop app and does not use cookies in the traditional web sense.
Local storage may be used only to store app preferences and encrypted OAuth tokens.

3. How We Use Your Information

We use the information we collect to:

Provide and maintain the App’s core email functionality
Manage your subscription and billing
Improve performance, stability, and user experience, from the usage data and crash reports (section 2.3)
Communicate important updates (when permitted)

We never use your information for advertising or data resale.

4. Email and Token Storage

This is central to Talanoa’s privacy model:

Your emails:

Stored locally on your device
Never uploaded to our servers
Never accessible by E2MA LABS

Your OAuth tokens:

Encrypted and stored locally on your desktop
Used only by your device to fetch email
Never transmitted to us or shared with any third party

We literally cannot access your emails or tokens.

⸻

We do not sell or rent your personal information.

We may share minimal account data only in these situations:

Service Providers: For example, Stripe (billing), Supabase (account and usage data storage), Sentry (crash reports). These providers are bound by strict confidentiality and security obligations.
Legal Requirements: If required by law or to respond to valid legal requests.
Business Transfers: If Talanoa is involved in a merger or acquisition, we may transfer only the minimal account data described above.

We do not transfer or sell any email-related data because we do not collect it.

6. Data Retention & Security

6.1 Retention

We retain your Supabase account data (name, email, OS, Stripe ID) as long as your Talanoa account is active or as required by law.

Usage data is kept for 13 months, then deleted. Statistics computed from it may be kept longer, without anything that identifies you.

Local data on your device remains entirely under your control.

6.2 Security

We use technical and organizational measures to safeguard your personal data. However, no system can guarantee 100% security.

7. Managing Your Information

You can stop sending usage data at any time: Settings › Security › Share usage data (desktop), or Settings › Share usage data (mobile). The App then sends one last event saying so, and nothing more.

You may request to access, modify, or delete your Supabase account data and your usage data at any time by contacting:

[email protected]

To revoke Talanoa’s access to your Google or Outlook account: You can remove permissions directly from your Google or Microsoft account settings.

Deleting the app from your device also deletes all locally stored emails and tokens.

8. Third-Party Links and Services

Talanoa may contain links to external websites.
We are not responsible for the privacy practices of these third parties.

9. Children’s Privacy

Talanoa is not intended for children under 13 (or the age required by local law).
We do not knowingly collect personal information from children.

10. Changes to This Privacy Policy

We may update this Policy from time to time.
If the changes are material, we will notify you by email or through the App.

Your continued use of Talanoa constitutes acceptance of the updated policy.

11. Contact Us

For any questions regarding this Privacy Policy:

E2MA LABS
Email: [email protected]

Thank you for using Talanoa (“the App”). We value your trust and are committed to protecting your privacy.
This Privacy Policy describes how we collect, use, store, and share your personal information when you use our App and related services.