Privacy Policy

talavo is a privacy-focused web browser for iOS. We collect the minimum data needed to run the app and your subscription. We do not sell your data and we do not build advertising profiles about you.

The data controller responsible for processing your personal data under the EU General Data Protection Regulation (GDPR) is:

Abdulbaki Celebi
Postfach 0003
8006 Graz
Austria

Email: privacy@talavo.app

Device identifier

When the app first launches it generates a per-install identifier (Apple's identifierForVendor) and a random device token stored in the iOS Keychain. We send these to our server so we can keep track of your trial state, premium entitlement and referral progress. The identifier resets if you reinstall the app or delete your data from Settings.

Subscription and purchase data

When you start a free trial or buy a subscription, RevenueCat processes the purchase on our behalf and shares the receipt data, the product you purchased and your subscription status with our server. We use this to unlock premium features and renew the entitlement. Apple processes the payment itself; we never see your payment details.

Referrals

If you share your referral code or open a referral link, our server records which device redeemed which code so we can credit the bonus days to both sides. We store the referral code, the redemption count and the timestamps; we do not record contact details.

Push notifications

If you allow push notifications, we register your Firebase Cloud Messaging token with our server so we can send you transactional notifications such as referral redemption confirmations. You can revoke this permission at any time in iOS Settings; the token is invalidated when you uninstall the app.

Stored only on your device

• Browsing history, open tabs, bookmarks and shortcuts. These never leave the device. You can clear them at any time from Settings.
• App preferences such as theme, sleep timer defaults and zen mode options.
• Cached favicons fetched from a public favicon service so site icons appear quickly without re-downloading.
• Tab screenshots used to render the tab overview. Incognito tabs are kept in memory only and never written to disk.

We rely on a small number of third parties. Their privacy policies govern what they do with the data they receive.

• RevenueCat handles in-app subscription management on iOS. RevenueCat Privacy Policy
• Firebase Cloud Messaging (Google) delivers push notifications. Firebase Analytics is disabled in this app. Firebase Privacy Policy
• Crash reporting uses the Sentry SDK pointed at our self-hosted GlitchTip instance at glitchtip.talavo.app. When the app crashes or hits an unexpected error, we receive a stack trace together with the OS version, app version, device model and the per-install device identifier so we can group reports by install. No screenshots, view hierarchies or browsing content are captured.
• Google AdMob shows occasional ads to non-premium users. AdMob may collect device identifiers and usage data for ad personalization. You can opt out of personalized ads in iOS Settings, Privacy, Tracking. Google Privacy Policy
• Google Suggestions powers the autocomplete in the address bar. The text you type while the autocomplete is open is sent to Google to fetch suggestions. We do not store these queries on our servers.
• Public favicon services from Google and DuckDuckGo are used to fetch site icons for shortcuts and tabs. The host name of the site is sent so the right icon comes back.

Our marketing website at talavo.app uses Vercel Analytics for aggregate page-view stats. Vercel Analytics does not use cookies and does not track individual visitors. The app itself does not use Vercel Analytics.

talavo follows Apple's App Tracking Transparency framework. We ask for your permission before any third-party SDK is allowed to track your activity across other apps and websites. If you grant permission, your device's Advertising Identifier (IDFA) is shared with Google AdMob so that AdMob can deliver personalized ads. If you decline, ads are still shown to non-premium users but they are not personalized and the IDFA is not shared. You can change your answer at any time in iOS Settings, Privacy, Tracking.

• Device records, subscription status and referral history are kept on our server for as long as your account is active.
• On-device data (history, tabs, shortcuts, preferences) stays until you clear it or uninstall the app.
• Push tokens are invalidated automatically when you uninstall the app.

Under the EU General Data Protection Regulation (GDPR) you have the following rights regarding your personal data:

• Right of access (Article 15 GDPR)
• Right to rectification (Article 16 GDPR)
• Right to erasure (Article 17 GDPR)
• Right to restriction of processing (Article 18 GDPR)
• Right to data portability (Article 20 GDPR)
• Right to object to processing (Article 21 GDPR)
• Right not to be subject to a decision based solely on automated processing (Article 22 GDPR)

To exercise any of these rights, contact us at privacy@talavo.app. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, dsb.gv.at) if you believe your data has been processed unlawfully.

You can delete all server-side data associated with your device from inside the app at Settings, Delete My Data. This removes your device record, subscription state, referral history and any pending notifications. To clear local data without deleting the server record, use Settings, Clear Browsing Data. You can also email us at the address below and we will process the request within 30 days.

talavo is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this policy from time to time. Changes are posted on this page with a new revision date. Continuing to use the app after a change means you accept the updated policy.

For privacy questions or data deletion requests, email privacy@talavo.app.