Privacy
What we hold, and who it belongs to
Last updated August 26, 2026
The short version
- This website sets no cookies and runs no analytics. We do not know you were here.
- We never sell your data, and we do not use it to train AI models.
- The app works with no account at all. Used that way, nothing leaves your device.
- Your training records belong to your employer, not to us. We hold them on their behalf.
- You can delete your account from inside the app, in two taps.
Tallen is made by Upstate Lake Communications LLC (“we”, “us”), a company registered in the United States. This policy covers both this website and the Tallen app.
1. This website
No cookies. No analytics. No advertising or tracking pixels. We do not count visitors, and we cannot tell who has read this page.
One thing on the site is loaded from another company’s server, and that company will see your IP address as a result — that is how the web works, and we would rather say so than let you assume otherwise:
- Google Fonts (
fonts.googleapis.com,fonts.gstatic.com) serves the typefaces.
The sample on our home page stays in your browser. Tapping through it sends nothing to us and stores nothing on your device. There is no upload, and no record that you tried it.
The contact form
If you write to us, we receive your name, company, email address, what you said you were interested in, and your message. It is emailed to us and is not stored on the website. We keep those emails for up to 12 months.
2. The app
Tallen has two modes, and they are genuinely different in what we receive.
Without an account
Everything — the procedures you write, your practice scores, your progress — stays on your device. There is no sync, no network, and we receive nothing at all. This is a real mode, not a trial: the whole app works this way.
In a workspace
Once you create or join a workspace, that workspace’s data is stored on our servers so a team can share it. That is:
- Owners and managers — your email address, and a password. The password is hashed by our authentication provider; we never see it and cannot recover it.
- Employees — no email address and no password. Joining with a code creates an anonymous account identified by a random number, plus the display name you type in. That is all we know about you.
- The workspace — its name, its join code, and its settings.
- Content — the procedures, write-ups and questions your workspace has written or imported.
- Practice — your scores, how many questions you answered, and when.
- Sign-offs — which procedure you confirmed you had read, when, and which version of it.
Sign-offs are permanent, and that is the point of them. They are your employer’s proof that their team was trained, so they can never be edited or removed through the app — not by you, not by your manager, and not by us. Do not confirm you have read something unless you have.
3. Your employer decides, not us
If you use Tallen through a workspace, your employer controls that data and we hold it on their behalf. They decide what goes in, who can see it, and how long it stays.
So if you want a training record corrected or removed, ask them first — we act on their instruction, not against it. If you cannot reach them, write to us and we will help you work out who to ask.
4. Who else touches it
We use a small number of other companies to run the service. They process data on our instructions and for no purpose of their own:
- Supabase — stores the workspace database and handles sign-in.
- Bluehost — hosts this website and delivers the contact form email.
- Google Fonts — as described above; it serves files, and receives only the IP address that any web request carries.
We do not sell data, share it with advertisers, or use it to train AI models.
5. How long we keep it
- Your login — destroyed immediately when you delete your account.
- Training records — kept for as long as your employer keeps their workspace. That is their decision, and some trades are legally required to hold training records for years.
- A workspace after a customer leaves us — deleted within 30 days.
- Contact form emails — up to 12 months.
About backups. Deleted data survives in our provider’s encrypted backups for a short period before those backups are overwritten in the normal course. We cannot surgically remove one record from a backup, and neither can anyone else — but backups are never used to bring deleted accounts back.
6. Deleting your account
Open the app, go to the Workspace tab, and choose Delete my account. It asks you to confirm once, and then it is done.
Your sign-in is destroyed and you will not be able to get back in with it. The procedures you already signed off stay on your team’s record, with your name on them, because that record belongs to your workplace — an acknowledgement nobody can trace back to a person is worth nothing to the employer who has to rely on it.
If you cannot get into the app, request deletion here instead.
7. Keeping it safe
- Everything travels over an encrypted connection (HTTPS).
- The database enforces separation between workspaces at the row level, so one company’s data cannot be read by another’s account even if the app asked it to.
- Passwords are hashed by our authentication provider and are never visible to us.
- Access by our own team is limited to what a job needs — and when we load content into a customer’s workspace for them, we appear in their member list. We are never invisible inside your workspace.
No system is perfectly secure, and we would rather say that plainly than imply otherwise.
8. Children
Tallen is a tool for workplaces. It is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has given us information, write to us and we will remove it.
9. Changes to this policy
If we change this policy we will update the date at the top. If a change materially affects what we do with your data, we will say so in the app rather than expecting you to re-read this page.
10. Contact us
Write to mike@upstatelakecomms.com with any question about this policy or about your data. A person reads it — there is no ticketing system and no bot.