Privacy Policy

Last updated: 2 September 2026

This Privacy Policy explains, in plain English, how that works and the few limited things taluvu handles only when you choose to use them.

taluvu is operated by TALUVU LTD, a company registered in England and Wales (company number 17383663), registered office Apartment 238 N V Building, 100 The Quays, Salford, M50 3BE, United Kingdom. For the purposes of applicable data protection law, TALUVU LTD is the data controller. For privacy questions, contact support@taluvu.co.uk.

1. Your private notes stay on your device

taluvu stores your private notes locally on your device.

taluvu does not keep a central server copy of your journal, check-ins, symptom notes, mood notes, Calendar entries, doctor preparation notes or Asha conversations.

Because this information lives on your device, keeping your phone secure is the best way to keep it private.

2. Messaging Asha

When you message Asha, your message is sent securely to Anthropic, the AI company whose model generates her reply. taluvu does not keep a copy of that conversation on our servers.

So that Asha can reply like someone who knows you, relevant context from your device is sent along with your message. Depending on what you have shared with taluvu, this can include:

• your first name;
• the conditions you have added, and anything you have written in a condition profile — for example your story so far, what a hard day looks like, and what you wish people understood;
• what you told us matters most to you, and your goal;
• your energy or capacity today, and recent energy patterns;
• things Asha remembers from earlier conversations — what has helped, what has made things harder, fears you have shared, wins you have had — all of which you can review, edit or delete in Me › What Asha Knows;
• short extracts from your recent journal entries, and recent events you have logged in the app;
• the recent messages in the conversation itself.

This context is sent only to generate that reply. taluvu does not store it anywhere else, and it is not used to build a profile of you. Everything Asha remembers lives on your device with the rest of your data — so deleting your taluvu data also clears what she remembers.

If there is something you would rather Asha never see, keep it out of your chats with her and out of what you save for her — the rest of the app never sends your notes anywhere.

3. Photographing a medication

If you use the camera to add a medication, that photo is sent securely to Anthropic (the same AI company as above) to read the name and dose off the packaging. The result is shown to you to confirm or correct before anything is saved.

taluvu does not store the photo, and it is not used for anything else.

This is optional — you can always type a medication in instead.

4. The limited information taluvu handles

taluvu only handles information beyond your device when you choose to use a feature that needs it:

• Optional usage signal — off unless you turn it on. If you enable it, taluvu sends a signal about which screens are used and whether a feature worked, to help fix bugs. It never includes your notes, check-in answers, condition names or symptom names. Each device is given a random code so we can count returning visits; it is not linked to your name or email. You can turn it on or off any time in Me › Privacy & Support. That same limited list is stored on our own server for up to 90 days, and it may also be handled on our behalf by PostHog (an analytics company, servers in Frankfurt in the EU) so we can see which parts of the app people use. PostHog never receives anything beyond what is described in this bullet — not your notes, not your check-in answers, nothing you typed.
• If you contact us — we receive what you choose to send (such as your name, email and message) so we can reply.
• Optional reminders — if you turn on notifications, your device registers to receive them, and you can turn this off any time.
• Optional email updates — off unless you tick it. During sign-up you can choose to receive occasional product updates and tips by email. This is a separate, unticked box, not something implied by giving us your email. If you tick it, we share your email address and first name with Mailchimp (operated by The Rocket Science Group, LLC, a US company) so it can send that mail on our behalf — never your notes, check-ins or health information. Every email includes an unsubscribe link, and unsubscribing never affects your access to taluvu. See Mailchimp’s own privacy notice for how they handle data they process for us.

Beyond this list and what sections 2 and 3 describe for Asha and medication photos, taluvu does not send your information anywhere — and it does not build a central profile of your health from your notes. The companies named above (Anthropic, PostHog and Mailchimp) act for us, only for the purpose each bullet describes.

5. We do not sell your data

We do not sell your personal information.

We do not use your health-related information for advertising.

We do not share your private notes — they are on your device, not ours.

6. Security

We take reasonable steps to protect the limited information described above, including secure connections.

No app or online service can guarantee complete security.

Because your notes are stored on your device, you are responsible for protecting access to your device.

7. Children

taluvu is not intended for children under 16. Users must be 16 or over to use taluvu.

8. Your control — export and delete

You are always in control. You can export or delete your information anytime.

Deleting your data removes it from this device, and also asks taluvu to delete everything it holds on its server for this device: your reminder registration, your anonymous usage signal and your Asha fair-use counters. If your phone is offline at that moment, the app will tell you, and you can email support@taluvu.co.uk to have them removed for you.

If usage reporting was ever switched on, any copy of those anonymous signals held by PostHog is not removed by the in-app delete. Email support@taluvu.co.uk and we will remove that too.

The anonymous usage signal is in any case deleted automatically after around 90 days.

See Your Data, Export and Deletion for how to export a copy of your information or delete your local taluvu data.

9. Your rights

If you are in the UK or the EU, you have rights over your personal data — including the right to ask for a copy of it, to have it corrected or deleted, and to object to or restrict how it is used.

Most of your information is on your own device, so the fastest route is Me › Privacy & Support, where you can download or delete it yourself. For anything else, email support@taluvu.co.uk.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make important changes, we will take reasonable steps to let users know.

11. Contact

For privacy questions, contact support@taluvu.co.uk. For anything else, hello@taluvu.co.uk.