Privacy Policy

Effective date: 2 September 2026 · Last updated: 13 September 2026

1 · Who we are

TruTalk is operated by an individual, not a registered company.

For the purposes of the EU General Data Protection Regulation (Regulation 2016/679, "GDPR") and applicable Italian data-protection law, the data controller is:

Reehanul Karim
Milan, Italy
Via Vespri Siciliani 12, 20146 Milano, Italy
Email: hello@letstrutalk.com

2 · The TruTalk app has its own privacy policy

This policy covers letstrutalk.com, the website you are reading.

The TruTalk app at app.letstrutalk.com is a separate product with accounts, saved content and subscriptions. It collects different data and has its own, more detailed privacy policy, which you can read here: app.letstrutalk.com/app/legal.

If you have an account, that document is the one that describes your data.

3 · What we collect on this website

Things you give us directly

• Contact form. Your name, email address and the contents of your message, only when you choose to send one. The form is handled by Netlify and forwarded to a Google (Gmail) inbox.
• Email. If you write to hello@letstrutalk.com, we receive your address and your message.
• Newsletter. If you subscribe to the TruTalk Letter, we collect your email address, and your first name or nickname if you choose to give one, so that we can send you the TruTalk Letter and related updates.

Things collected automatically

• Server logs. Netlify, our host, records basic technical information on each visit: IP address, browser type, referring page and timestamp. These are kept briefly, for security and abuse prevention.
• Anti-spam. The contact form uses a hidden honeypot field to filter out automated submissions.
• Analytics, only if you accept. With your consent we use Google Analytics 4 to understand aggregate traffic. It records pages viewed, session duration, approximate location derived from your IP address, device and browser type, referring site, and a set of automatic interaction events: scrolls, clicks on links leaving the site, file downloads, on-site searches, video engagement and interactions with the contact form. We use it to see which pages people read. We do not use it for advertising, and Google Signals and ads personalisation are switched off.

We have switched off Google's automatic detection of user-provided data, so the analytics tag does not inspect this site's pages for email addresses, phone numbers or postal addresses.

What we do not collect here

Conversation content from the TruTalk app, precise location data, payment card details (Stripe handles those directly and we never see them), advertising identifiers, or biometric data.

4 · Why we collect it

• To reply to you. Your name and email from the contact form are used to answer your message and nothing else.
• To send the newsletter. Your email address, and your name if you gave one, are used to send and personalise the TruTalk Letter.
• To keep the site running. Server logs help us diagnose faults and prevent abuse.
• To understand what people read. Aggregate analytics, only with your consent.
• To meet legal obligations. For example, responding to a binding order from a competent authority.

5 · Lawful basis (GDPR Art. 6)

• Consent (Art. 6(1)(a)) — analytics cookies, and any future newsletter sign-up.
• Performance of a contract or steps before one (Art. 6(1)(b)) — when you contact us about working together.
• Legitimate interest (Art. 6(1)(f)) — security logging, abuse prevention, and replying to general enquiries. We balance this against your rights.
• Legal obligation (Art. 6(1)(c)) — where the law requires it.

6 · How long we keep it

• Contact-form messages: up to 24 months from your last message to us, then deleted, unless we are required to keep them.
• Newsletter subscribers: your email address and name are retained while you remain subscribed.
• Server logs: short-term, as retained by Netlify.
• Analytics data: 2 months, then deleted automatically by Google.

7 · Cookies and analytics

We use cookies and similar technologies only where strictly necessary, or with your prior consent.

No consent needed

• Your cookie choice. Stored in your browser's local storage, not in a cookie, so that we don't ask again on every visit.

Consent-based

• Google Analytics 4 (_ga and _ga_* cookies), provided by Google LLC. Loaded only after you select "Accept."

Withdrawing consent

Analytics cookies are processed on the basis of your consent (Art. 6(1)(a), Art. 7). You may withdraw it at any time, as easily as you gave it. Withdrawal does not affect processing that already happened lawfully.

8 · Who we share it with

We never sell or rent your personal data. We share it only with the providers who help us run this site:

• Netlify, Inc. (USA) — website hosting and contact-form handling.
• Google LLC (USA) — Google Analytics 4 as our processor, where you have consented; Gmail, which receives forwarded contact-form messages; Google Fonts, which serves the Inter typeface and receives your IP address in the process.
• Stripe, Inc. (USA / Ireland) — payment processing for TruTalk+ subscriptions, which are purchased inside the app. We never see or store full card details.

We may add or change providers over time, and will note material changes here.

9 · International transfers

Netlify, Google and Stripe are based in the United States. Where personal data is transferred outside the European Economic Area, we rely on Standard Contractual Clauses approved by the European Commission, incorporated into those providers' data processing terms, together with any additional safeguards required.

10 · Age

TruTalk is intended for adults. You must be at least 18 to use the Service, and we do not knowingly collect personal data from anyone under that age. If you believe a minor has sent us personal data, contact us and we will delete it.

11 · Changes to this policy

We may update this policy. When we make material changes we will update the "Last updated" date above and, where appropriate, give notice by email or in the product. Continuing to use the site after a change means you accept the updated policy.

12 · Your rights

You have the following rights over your personal data. To exercise any of them, email hello@letstrutalk.com; we will respond within one month.

• Access (Art. 15) — a copy of the data we hold about you.
• Rectification (Art. 16) — correction of inaccurate or incomplete data.
• Erasure (Art. 17) — deletion of your data.
• Restriction (Art. 18) — pausing processing in certain cases.
• Portability (Art. 20) — your data in a portable format.
• Objection (Art. 21) — to processing based on legitimate interests.
• Withdrawal of consent (Art. 7) — at any time, for anything based on consent.
• Complaint — to the Italian supervisory authority, the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Roma.

If you have a TruTalk account, deletion and data export are also available directly inside the app, without contacting us. See the app privacy policy.

13 · Contact

For any privacy question, including a request to exercise the rights above:

Reehanul Karim
Milan, Italy
Email: hello@letstrutalk.com

This notice has been drafted to reflect the requirements of Regulation (EU) 2016/679 and applicable Italian law. It is provided in good faith and does not constitute legal advice. It should be reviewed by qualified counsel before publication.