Privacy policy

TalkBoard (talkboardvr.com) — Effective July 15, 2026

TalkBoard is the companion service for the TalkBoard VR language classroom app for Meta Quest. It exists so the app can use your own AI provider accounts without storing any keys on the headset. The data controller responsible for your personal data is Davis Enterprises of Steele County, LLC (United States). Questions or requests: contact us at dbdavis256@gmail.com.

What we collect and why

• Account data — your email address and a hashed password (or your Facebook or Meta account identifier if you link one). Used only to sign you in and to connect your headset to your account.
• Meta Horizon user ID — if you link your Meta account, we store the app-scoped user ID Meta provides so your headset can sign in without a pairing code. It is used for authentication only and is never shared with the AI providers below.
• Provider API keys — the keys you enter (OpenAI, DeepSeek, Anthropic, xAI, Google, Mistral, ElevenLabs) are stored encrypted (AES-GCM) and used solely to forward your app's requests to those providers. They are never shown back to a browser and never appear in logs.
• Device tokens — a revocable credential per linked headset (stored hashed), so you can cut off a lost device.
• Usage metadata — timestamps, request counts, and sizes for proxied requests (used for abuse prevention and your own usage view). We do not store the content of your conversations on our server.
• Your language configuration — the settings and flash-card decks you edit on this site.

Voice data

When you speak in the app, the microphone recording is sent through our server to ElevenLabs for speech-to-text, and the resulting transcript is sent to the AI chat provider you selected to generate the teacher's reply. Recordings and transcripts pass through our server transiently and are not stored by us. The teacher's spoken replies are generated by ElevenLabs text-to-speech.

Service providers

We use these processors to provide the service; data is processed in the countries listed:

• Amazon Web Services (United States) — cloud hosting and storage.
• ElevenLabs (United States) — speech-to-text and text-to-speech.
• OpenAI, Anthropic, xAI, Google (United States), Mistral AI (France), and DeepSeek (China) — AI language-model processing of conversation transcripts, using the provider you choose and your own API key. These providers receive transcript text only — never your Meta user ID, email, or audio.

We do not sell personal data, and we do not use it for advertising or analytics.

Requests from public authorities

If a government entity requests user data, we review the request's legal validity before responding, challenge requests we consider unlawful, disclose only the minimum information legally required, and document every request and our response.

Retention and deletion

Account data is kept while your account is active. You can delete your API keys and revoke devices yourself at any time. To delete your account and all associated data, email us and we will complete the deletion within 30 days.

Children

TalkBoard is not directed at children under 13, and we do not knowingly collect their data.

Changes

If this policy changes, we will update this page and its effective date.