edge talk Privacy Policy
Effective Date: January 20, 2025
Introduction
edge talk ("we," "our," or "the app") is committed to protecting your privacy. This policy explains our practices regarding data collection, use, and protection in our AI chat application.
1. Core Privacy Principles
1.1 Privacy-First Architecture
- All primary data processing occurs locally on your device
- Your conversations remain under your exclusive control
- Zero-knowledge architecture ensures your privacy
- No corporate access to your personal data or conversations
1.2 Data Collection and Storage
We operate on a strict local-first principle:
- All conversations and personal data stored locally on your device
- End-to-end encryption for all sensitive information
- Zero server-side storage of conversation data
- Local processing of AI models and embeddings
2. API Integration and Security
2.1 User-Provided API Keys
- API keys are encrypted and stored exclusively on your device
- We never transmit or store your API keys on our servers
- Direct model access ensures privacy of your AI interactions
- You maintain full control over your API credentials
2.2 Optional Proxy Service
For subscribers, we offer an optional proxy service with:
- Temporary request routing only
- No content storage or analysis
- Minimal logging limited to:
- Timestamps
- Request sizes
- Anonymous session identifiers
- Basic usage metrics
- All logs automatically purged after 24 hours
- Strict abuse prevention protocols
3. User Rights and Controls
3.1 Data Sovereignty
You maintain complete control over your data:
- Full data export capability at any time
- One-click complete data deletion
- Granular privacy settings
- Optional sync features with ability to opt-out
3.2 Data Access and Sharing
- No third-party data sharing
- No analytics collection
- No tracking mechanisms
- No advertising systems or user profiling
- No behavioral analysis or monitoring
4. Compliance and Legal Framework
4.1 Age Restrictions and Requirements
- Service restricted to users 13 years and older
- No intentional collection of children's data
- Adult-oriented service with appropriate content controls
- Age verification requirements where mandated by law
4.2 International Compliance
European Union (GDPR)
- Right to access, rectification, and erasure
- Data portability guarantees
- Lawful basis for processing: User consent and contract performance
- No automated decision-making affecting user rights
California (CCPA/CPRA)
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of data sharing
- Annual privacy policy update notifications
5. Security Measures
5.1 Technical Safeguards
- Industry-standard encryption protocols
- Regular security audits and penetration testing
- Secure communication protocols using TLS 1.3
- Implementation of Apple's latest security frameworks
5.2 Incident Response
- 72-hour breach notification commitment
- Detailed incident response procedures
- Regular security training and updates
- Transparent communication protocols
6. Service Changes and Updates
6.1 Policy Updates
- Clear notification of any privacy policy changes
- Minimum 30-day advance notice for material changes
- User consent required for significant changes
- Detailed change documentation maintained
- Historical policy versions accessible
6.2 Service Evolution
- Transparent communication about feature changes
- Advance notice of any architectural modifications
- User control over new feature adoption
- Clear opt-in/opt-out procedures
7. Contact and Support
7.1 Privacy Inquiries
Users may contact us regarding privacy concerns:
- Email: [email protected]
- Response within 48 business hours
- Clear escalation procedures
7.2 Legal Requests
- Warrant canary maintained
- Limited ability to access user data due to zero-knowledge architecture
- Legal requests handled in accordance with applicable laws