Privacy Policy

1. Data Controller

Nordlate Oy
Helmipöllönkuja 15 A 5
90540 Oulu, Finland
Business ID: 3598078-2
Email: [email protected]

Nordlate Oy is the controller for personal data it processes in connection with Taltio. Apple may separately process data as an independent controller under its own privacy policy when you use the Mac App Store or other Apple services. The operator of any external generation server you connect to Taltio is responsible for that server's processing, and hosts that serve model files you choose to download process request data under their own policies, as described in section 4.

2. Data We Process

• Media and associated metadata: Information Taltio reads from the folders you open, such as file names, thumbnails, and metadata inside your files (for example prompts), together with the tags, ratings, and edits you add. These may include personal data depending on what you and your tools have written.
• Generation inputs and outputs: The prompts, settings, and history you create, the images generated, and the address of any external generation server you configure.
• Settings and local app data: Preferences and records the app needs to operate. These are stored on your Mac and are not used for advertising or cross-app tracking.
• Service and download requests: If you download models, the hosts involved see your IP address and ordinary request information, as described in section 4. These requests contain no prompts, images, or app user identity.
• Diagnostics and App Store analytics: Apple may provide Nordlate with aggregated analytics, crash reports, and diagnostic information in accordance with your device and App Store analytics settings. Taltio itself contains no analytics or tracking library.
• Website analytics: Cloudflare Web Analytics provides aggregate cookieless statistics. If you consent, Google Analytics 4 also processes page URLs and titles, referrers, approximate location, and browser and device information together with a pseudonymous browser identifier. We do not send names, email addresses, media library content, or other information intended to identify you directly.
• Support and feedback: If you contact us, we process your email address, message, and any information you choose to provide, such as a screenshot or sample file.

3. Local Storage

Taltio keeps its library data, settings, downloaded models, and generation history on your Mac. Your image and video files stay in the folders where you keep them. Taltio does not require an account and does not send your media library content, prompts, or generated images to servers operated by Nordlate.

Removing Taltio does not delete your own files, and it may leave Taltio's local data, including large model files, on your Mac until you remove it.

4. Image Generation and Model Downloads

With local generation, your prompts and images stay on your Mac and are not sent to Nordlate or to a model host.

External generation is optional and off until you configure a server address. Taltio then sends the relevant inputs, such as your prompts and settings, to that server and saves the results. It does not upload your existing image or video files. Nordlate does not operate that server and does not receive this data; its operator is responsible for how it is handled. If the connection is not encrypted, others on the network may be able to read it.

Local generation needs model files, which Taltio downloads at your request. Taltio may first fetch download information from a Nordlate-hosted service, which Cloudflare delivers on our behalf. Model files come from independent hosts such as Hugging Face, which process your IP address and ordinary request information under their own policies. Either may log that information; see the Hugging Face privacy policy and the Cloudflare privacy policy. Once models are on your Mac, local generation does not need a network connection.

Generated files can contain prompts and other metadata that anyone you share them with may be able to read, so review them before sharing. Information that marks an image as AI-generated can be lost if the file is later edited or re-encoded.

5. Purposes and Legal Bases

We process personal data only as needed to:

• Provide Taltio and its features, based on performance of our contract with you.
• Respond to support and feedback, diagnose problems, secure the app, and improve its reliability, based on our legitimate interests in operating and improving Taltio.
• Comply with legal obligations, including accounting, consumer-protection, and regulatory requirements.
• Measure use of taltio.app after you consent to Google Analytics.

Where processing requires consent, you may withdraw that consent at any time. Withdrawal does not affect processing that occurred before withdrawal.

6. Sharing and Service Providers

We do not sell your personal data or use it for targeted advertising.

Data may be processed or disclosed:

• By Apple when providing the Mac App Store, diagnostics, and related platform services.
• By the operator of an external generation server you configure, to the extent you send data to it, as described in section 4.
• By Hugging Face or other model hosts when you download model files, and by Cloudflare, on our behalf, for Nordlate-hosted download information, as described in section 4.
• By service providers used to host our website or email, only as needed to provide those services and subject to appropriate safeguards.
• By Cloudflare for website delivery and aggregate cookieless analytics, and, if you consent, by Google Ireland Limited for Google Analytics. These providers may process data outside the EEA using approved transfer safeguards.
• When required by law, a court order, or a competent authority, or to establish or defend legal claims.
• In connection with a merger, acquisition, or transfer of Taltio, subject to applicable data-protection law.

7. Retention

• Media library content, generation data, and app settings remain on your Mac until you delete them or remove the app's local data.
• Support and feedback correspondence is normally kept for up to 24 months after the matter is resolved, unless a longer period is required to meet a legal obligation or establish or defend a legal claim.
• Diagnostic information made available by Apple is retained according to Apple's applicable retention practices and Nordlate's legal obligations.
• Google Analytics cookies and the stored consent choice expire after no more than 12 months under our website configuration. Analytics event data is retained according to the retention settings of our Google Analytics property.

8. Website Analytics and Cookies

Google Analytics remains disabled unless you choose “Allow all” in the cookie banner. If accepted, it sets the first-party cookie _ga to distinguish browsers and a _ga_<measurement-id> cookie to maintain session state. We configure both cookies to expire 12 months after they are first set and do not enable Google Signals or advertising personalization.

Your consent choice is stored in this browser's localStorage for up to 12 months so the site can remember it. This is necessary to apply your choice and is not used for tracking. You can accept, reject, or withdraw analytics consent at any time through “Cookie settings” in the footer. Withdrawing consent stops further Analytics collection and removes accessible Google Analytics cookies from this site. Cloudflare Web Analytics remains cookieless.

Our legal basis for Google Analytics is your consent.

9. International Transfers

Apple and other service providers may process data outside Finland or the European Economic Area. Where Nordlate is responsible for such a transfer, we use a lawful transfer mechanism and appropriate safeguards as required by applicable data-protection law. Apple's transfers are described in its own privacy documentation. Hugging Face and other model hosts may process request data in the United States or other countries, as described in their own policies. Where an external generation server you configure is located is your choice and outside Nordlate's control.

10. Your Rights

Subject to applicable law, you may have the right to access, correct, or erase your personal data; restrict or object to processing; receive data you provided in a portable format; and withdraw consent. You may also lodge a complaint with the Finnish Data Protection Ombudsman or your local supervisory authority.

Because Taltio stores your media library and generation data on your Mac rather than with Nordlate, you can review, correct, export, or delete them directly in the app and in the Finder. For data you sent to an external generation server, contact that server's operator. To exercise rights concerning data controlled by Nordlate, such as support correspondence, contact [email protected]. We may need to verify your identity before completing a request. Requests concerning data controlled by Apple should be directed to Apple.

11. Children

Taltio is not directed to children under 13. If you are under the age of legal majority where you live, you may use Taltio only with the permission and supervision of a parent or legal guardian. If your media library or prompts contain information about another person, you are responsible for having the authority to hold that information and for using it appropriately.

12. Security

We use reasonable technical and organizational measures to protect personal data. No electronic storage or transmission method is completely secure. You are responsible for protecting access to your Mac and Apple Account, for the security of any external generation server you connect to, and for keeping backups of your files and library data.

13. Changes to This Policy

We may update this policy when Taltio, our data practices, or legal requirements change. We will post the updated policy on this page and revise the date below. Where required, we will provide additional notice.