Trust & transparency

Privacy policy

Effective August 3, 2026

TalkBoard (talkboardvr.com) is the companion service for the TalkBoard VR language classroom app for Meta Quest. It exists so the app can use your own AI provider accounts without storing any keys on the headset. The data controller responsible for your personal data is Davis Enterprises of Steele County, LLC (United States). Questions or requests: contact us at privacy@talkboardvr.com.

What we collect and why

  • Account data — your email address and a hashed password (or your Meta account identifier if you sign in with Meta). Used only to sign you in and to connect your headset to your account.
  • Meta Horizon user ID — if you link your Meta account, we store the app-scoped user ID Meta provides so your headset can sign in without a pairing code. It is used for authentication only and is never shared with the AI providers below.
  • Provider API keys — the keys you enter (OpenAI, DeepSeek, Anthropic, xAI, Google, Mistral, ElevenLabs) are stored encrypted (AES-GCM) and used solely to forward your app's requests to those providers. They are never shown back to a browser and never appear in logs.
  • Device tokens — a revocable credential per linked headset (stored hashed), so you can cut off a lost device from the Devices page.
  • Usage metadata — timestamps, request counts, and sizes for proxied requests (used for abuse prevention and your own usage view). We do not store the content of your conversations on our server.
  • Your language configuration — the settings and flash-card decks you edit on this site.

Voice data

When you speak in the app, the microphone recording is sent through our server to ElevenLabs for speech-to-text, and the resulting transcript is sent to the AI chat provider you selected to generate the teacher's reply. Recordings and transcripts pass through our server transiently and are not stored by us. The teacher's spoken replies are generated by ElevenLabs text-to-speech.

Analytics

This website uses Google Analytics to count visits and see which pages people read. It sets cookies in your browser and sends Google a randomly generated identifier along with the page you viewed, your approximate location derived from your IP address, and your browser and device type. We use it only to understand how the site is used — it is not linked to your account, your API keys, or anything you say in the classroom, and we do not use it for advertising.

Analytics runs on this website only. The Meta Quest app and the browser classroom send no analytics of their own; what the app records is the activity you can see on your own Activity page. You can opt out for every site using Google's browser add-on, or by blocking cookies for this site.

Service providers

We use these processors to provide the service; data is processed in the countries listed:

  • Amazon Web Services (United States) — cloud hosting and storage.
  • ElevenLabs (United States) — speech-to-text and text-to-speech.
  • OpenAI, Anthropic, xAI, Google (United States), Mistral AI (France), and DeepSeek (China) — AI language-model processing of conversation transcripts, using the provider you choose and your own API key. These providers receive transcript text only — never your Meta user ID, email, or audio.
  • Google Analytics (United States) — website traffic measurement, as described above. It sees only your browsing of this website, never your account data, keys, or conversations.

We do not sell personal data, and we do not use it for advertising. The only analytics we run is the website traffic measurement described above.

Requests from public authorities

If a government entity requests user data, we review the request's legal validity before responding, challenge requests we consider unlawful, disclose only the minimum information legally required, and document every request and our response.

Retention and deletion

Account data is kept while your account is active. You can delete your API keys and revoke devices yourself at any time on this site. To delete your account and all associated data, email us and we will complete the deletion within 30 days.

Children

TalkBoard is not directed at children under 13, and we do not knowingly collect their data.

Changes

If this policy changes, we will update this page and its effective date. Material changes will be noted on the dashboard after you sign in.