Privacy
What Thalia remembers, and why
Thalia's core feature is remembering you across conversations. That only works if we store what you say. This page explains exactly what we keep, why, and how to have it removed.
What we store
- Conversation transcripts — every message you and Thalia exchange, by text or transcribed from voice.
- Memory summaries and facts — a rolling summary of who you are and what you've talked about, plus specific facts Thalia picks up in conversation (things you mention about your life, preferences, or people you know).
- Language and voice preferences — the settings you choose in the chat interface.
- Usage counters — how many messages/voice minutes you've used against your plan's quota, to enforce free and paid limits.
- Account and billing identifiers — if you sign in with Google or subscribe, we store your Google account ID, email, and a reference to your Stripe subscription. We never store payment card details ourselves — Stripe handles that.
- Safety moderation records — when content is blocked or redirected for safety, we store the moderation stage, category, provider, score data, short text samples, and cryptographic hashes of the full blocked/source text. These records are kept separate from normal conversation memory so unsafe content is not taught back to Thalia.
- Operational error logs — API route, event type, severity, timestamp, and limited debugging metadata for production monitoring. These logs do not include full conversation text or card numbers.
- A hashed IP address — when you first visit without an account, we hash (not store in plain text) the IP address that created your anonymous session, solely to detect scripted abuse of free-tier limits. It isn't linked to your conversation content and isn't used to identify you.
How your identity works
Before you sign in, Thalia recognizes you through an anonymous, randomly generated ID stored in a browser cookie — not your IP address, which would incorrectly merge different people on the same network or split one person across networks. If you sign in with Google, your conversations from that browser are carried over to your account so Thalia doesn't forget what you already told her.
How long we keep it
Right now, conversation data is retained for as long as your account (or anonymous session) exists — we don't yet have automatic expiry for inactive data. We're planning a retention policy that automatically clears out anonymous sessions after a period of inactivity; until that ships, the fastest way to have your data removed is to contact us directly (see below).
Safety moderation records, operational logs, payment records, and abuse-prevention records may be retained for longer where needed for security, compliance, accounting, dispute handling, or to show that safety controls were active.
Who else sees it
We don't sell your data. It's shared only with the vendors required to run the product: the AI providers that power speech-to-text, the language model, and text-to-speech, OpenAI for content safety moderation, and Stripe for payment processing. None of them receive more than what a single request needs to do its job.
Deleting your data
We don't have a self-serve delete button yet. Email privacy@thaliachat.com from the address (or Google account) associated with your Thalia use, and we'll remove your conversation history, memory, and account records, except for records we must keep for legal, billing, security, abuse-prevention, or dispute-resolution reasons.