Privacy Policy

Last updated: April 13, 2026

Moose Pack Inc ("MPI", "we", "us", or "our"), through its wholly-owned subsidiary Moose Pack Ventures LLC ("MPV"), operates Tactical Talk AI (the "Service"). This Privacy Policy describes how we collect, use, and protect your information when you use our Service.

1. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Password (stored securely via hashed encryption)
• Display name
• Optional demographic information (age range, profession, location, gender) if you choose to provide it

Conversation Data

When you use our real-time coaching service, we process:

• Audio captured through your device microphone (processed in real-time, not permanently stored as audio)
• Text transcripts of conversations
• AI-generated advice and coaching content
• Session metadata (duration, mode, timestamps)

Anonymized AI Improvement Data (Opt-In Only)

If you choose to enable the "Help Improve AI Coaching" setting in your account, we may use fully anonymized session data to improve the quality of our AI coaching models. This is entirely optional and disabled by default. Here is exactly what this means:

• Fully anonymized: Before any data is used, all personally identifiable information is automatically and permanently removed. Names, email addresses, phone numbers, physical addresses, and any other identifying details are replaced with random placeholder tokens (e.g., random alphanumeric strings like "a7f2c9e1"). The original information is never stored or recoverable.
• Encrypted at every stage: All data is encrypted in transit (TLS/SSL) and at rest (AES-256 encryption). At no point does unencrypted identifiable data leave your session.
• Nothing identifiable is retained: The anonymized data consists only of general conversation patterns, coaching advice effectiveness, and conversation mode statistics. It contains no names, no voices, no personal details — only randomized, non-identifiable text fragments that cannot be traced back to any individual.
• No audio is ever stored: Audio is processed in real-time and immediately discarded. Only anonymized text patterns are used.
• You can opt out at any time: Simply toggle the setting off in your account preferences. When you opt out, no further data is collected, and any previously collected anonymized data associated with your randomized session identifiers can be deleted upon request.
• Never sold or shared: Anonymized improvement data is used solely to make Tactical Talk's coaching better for all users. It is never sold, shared with third parties, or used for advertising.

Payment Information

Payment processing is handled by Stripe. We do not store your credit card number, CVV, or other sensitive payment details. We store your Stripe customer ID for subscription management.

Usage Data

• Session frequency and duration
• Conversation modes used
• Subscription tier and billing information
• Device type and browser information

2. How We Use Your Information

• To provide and improve our real-time AI coaching service
• To personalize your experience based on your conversation mode and preferences
• To process payments and manage subscriptions
• To send transactional emails (welcome, subscription confirmations)
• To respond to support requests and contact form submissions
• To analyze usage patterns and improve our service
• To enforce our Terms of Service and protect against misuse
• If you have opted in: to use fully anonymized, non-identifiable conversation patterns to improve AI coaching quality (see "Anonymized AI Improvement Data" above)

3. Third-Party Services

We use the following third-party services to operate Tactical Talk AI:

• Supabase - Authentication and database hosting (your account data and conversation records)
• Stripe - Payment processing (subscription billing)
• Deepgram - Speech-to-text transcription (real-time audio processing)
• ElevenLabs - Text-to-speech synthesis (AI voice delivery)
• OpenRouter - AI language model gateway (generating coaching advice)
• Vercel - Web application hosting
• Render - Backend server hosting
• Resend - Transactional email delivery

Each of these services has their own privacy policies. We encourage you to review them.

4. Cookies and Local Storage

We use browser localStorage (not traditional cookies) to:

• Maintain your authentication session (access and refresh tokens)
• Remember your cookie consent preference
• Store UI preferences (dismissed banners)

We do not use third-party tracking cookies or advertising trackers.

5. Data Retention

• Account data: Retained while your account is active. Deleted upon account deletion request.
• Conversation transcripts: Retained for the duration specified by your subscription tier (7 days for Free, unlimited for Pro/Elite). You can delete individual conversations at any time.
• Audio data: Processed in real-time and not permanently stored as audio files. Only text transcripts are retained.
• Payment records: Retained as required by applicable tax and financial regulations.
• Anonymized AI improvement data: If you have opted in, anonymized data is retained only as long as it is useful for improving our AI models. Because the data is fully anonymized (containing only randomized tokens and general patterns, with no personally identifiable information), it cannot be linked back to any individual. You may request deletion of data associated with your randomized session identifiers at any time by contacting us.

6. Data Security

We take the security of your data seriously and implement industry-standard and above security measures including:

• Encrypted data transmission (TLS 1.3 / SSL) for all communications
• AES-256 encryption for data at rest
• Secure password hashing (bcrypt)
• JWT-based authentication tokens with expiration
• Row-level security on database records (each user can only access their own data)
• API keys stored as environment variables, never exposed to clients
• Automated PII stripping on any data used for AI improvement — personal details are permanently replaced with random alphanumeric tokens before the data ever leaves your session context
• Regular security reviews and monitoring

7. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate personal data
• Deletion: Request deletion of your account and associated data
• Portability: Request your data in a machine-readable format
• Opt-out: Opt out of non-essential communications

To exercise these rights, contact us at the email below.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the CCPA including the right to know what personal information we collect, the right to delete, and the right to opt-out of the sale of personal information. We do not sell your personal information.

9. Children's Privacy

Tactical Talk AI is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending you an email. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us:

• Email: support@tacticaltalkai.com
• Contact Form: tacticaltalkai.com (Contact Us)
• Company: Moose Pack Inc