Talent Alchemy — Web, iOS, and Android applications
Effective Date: May 8, 2026
Talent Alchemy, LLC ("Talent Alchemy," "we," "our," or "us") respects your privacy and is committed to
protecting it. This Privacy Policy describes how we collect, use, disclose, and safeguard your
information when you use our web application, iOS app, Android app, and related services
(collectively, the "Service").
By using the Service, you agree to the collection and use of information in accordance with this
policy. If you do not agree with this policy, please do not use the Service.
1. Information We Collect
We collect information that you provide directly, information about how you use the Service, and limited information from your device.
Account and Profile Information
When your administrator or coach creates your account, or when you complete your profile, we collect:
Name (first name, last name, optional preferred name and pronouns)
Email address
Role within your organization (member, team leader, coach, or super admin)
Organization and team affiliations
Optional profile information you choose to provide: title, photo, "what I bring" and "what I need" statements, scheduling URL, "About me" text
CliftonStrengths assessment results, when uploaded by you or your administrator
Application Activity
As you use the Service, we collect data you generate, including:
Celebrations sent to and received from teammates, including strengths and messages
Helps & Hinders entries (which factors energize or drain you)
Microlearning ("Experiment") completion progress and discussion comments
Direct and team chat messages, including any files or images you attach
Goals you set, including titles, descriptions, target dates, and progress
Bookmarks and notification preferences
Privacy of Reflect free-text: The free-text portion of your weekly Reflect entry is
private to you and is never shown to coaches, team leaders, or other team members. Only aggregate
KPI scores and multi-select responses are surfaced in team or individual pulse views.
Automatically Collected Information
Device data: device type, operating system version, app version, language, and time zone
Authentication tokens: session credentials issued by Firebase Authentication
Push notification tokens: when you grant permission, we store a device token to deliver push notifications
Usage data: timestamps of habit completions, last login time, and similar activity logs used to compute engagement and streaks
Audit logs: records of administrator actions for security and compliance
2. How We Use Your Information
We use the information we collect to:
Provide, operate, and maintain the Service
Authenticate you and protect your account
Surface team-level insights and individual pulse data to coaches and team leaders, scoped to organizations and teams they are responsible for
Send transactional and reminder emails (e.g., weekly Ignite and Reflect prompts, celebration notifications, password reset links, welcome emails)
Deliver push notifications you have opted into
Improve the Service, diagnose problems, and prevent abuse
Comply with legal obligations and enforce our agreements
We do not sell your personal information. We do not use your personal information for cross-context
behavioral advertising.
3. How We Share Your Information
Your information is shared only as described below:
Within your organization: Coaches and team leaders can see member-level data
(habit completion, KPI scores, Helps & Hinders) for the members and teams they are assigned
to. They cannot see members in organizations they are not assigned to. Members can see one
another's strengths, celebrations, and team-pulse aggregates within the same team.
Service providers: We share information with vendors who help us operate the
Service, listed in Section 4. These providers are contractually
obligated to use information only as necessary to provide their services to us.
Legal compliance: We may disclose information if required by law, subpoena, or
other legal process, or to protect the rights, property, or safety of Talent Alchemy, our users,
or others.
Business transfers: If Talent Alchemy is involved in a merger, acquisition, or
asset sale, your information may be transferred as part of that transaction. We will notify you
of any change in ownership or use of your personal information.
We do not share your personal information with any party for advertising or marketing purposes.
4. Third-Party Services
The Service relies on the following third-party providers, each of which may process your information:
Google Firebase Authentication — account authentication, password reset emails (privacy)
Google Cloud Platform — application hosting, database, file storage
Apple App Store / Google Play — app distribution (governed by Apple's and Google's respective privacy policies)
5. Data Storage and Security
We store data in PostgreSQL databases hosted on Google Cloud Platform in the United States. File
uploads are stored in Google Cloud Storage. Authentication is handled by Firebase Authentication.
We implement industry-standard administrative, technical, and physical safeguards, including:
TLS encryption for data in transit between your device and our servers
Encryption at rest for data stored in our databases and file storage
Role-based access controls so users only see data they are authorized to access
Server-side audit logs for sensitive administrative actions
Regular review of access permissions for our personnel
No method of electronic transmission or storage is 100% secure. While we strive to protect your
information, we cannot guarantee absolute security.
6. Data Retention
We retain your information for as long as your account is active or as needed to provide you the
Service. When you or your administrator deletes your account, we soft-delete your record
immediately and permanently delete it after a retention window (typically 30 to 180 days),
except where retention is required by law or for legitimate business purposes such as fraud
prevention or dispute resolution.
Anonymous, aggregated data that cannot reasonably be used to identify you may be retained
indefinitely.
7. Your Rights and Choices
You have the following rights regarding your personal information:
Access and update: You can review and update most profile information from the in-app Profile and Settings screens.
Notification preferences: You can disable email and push notifications by category from the Settings screen.
Deletion: You can request deletion of your account and personal data by contacting us at the address in Section 12 or by asking your organization administrator. Some data (e.g., audit logs, anonymized aggregates) may be retained as described in Section 6.
Data export: You can request a copy of your personal data in a portable format by contacting us.
Withdraw consent: You can stop using the Service at any time.
8. Children's Privacy
The Service is intended for use by adults in a workplace or coaching context. It is not directed to
children under 13, and we do not knowingly collect personal information from children under 13. If
you believe a child under 13 has provided us with personal information, please contact us at the
address in Section 12 and we will promptly delete it.
9. California Privacy Rights (CCPA / CPRA)
If you are a California resident, you have the right to:
Know what personal information we collect, use, disclose, and sell about you (we do not sell)
Request access to and a copy of your personal information
Request deletion of your personal information, subject to certain exceptions
Request correction of inaccurate personal information
Opt out of the sale or sharing of personal information for cross-context behavioral advertising (we do not sell or share for advertising purposes)
Be free from retaliation for exercising any of these rights
To exercise these rights, contact us using the details in Section 12. We may need to verify your identity before fulfilling your request.
10. International Users (GDPR / EEA / UK)
If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with
similar data protection laws, you have additional rights under applicable law, including the right
to access, correct, delete, restrict, port, or object to processing of your personal information.
Our legal bases for processing include: performance of a contract (providing the Service to you),
legitimate interests (improving the Service, preventing abuse), consent (for optional features such
as push notifications), and compliance with legal obligations.
Your information may be transferred to and processed in the United States. We rely on appropriate
safeguards such as Standard Contractual Clauses where required.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the Effective Date
at the top of this page and, where appropriate, notify you in-app or by email. Your continued use of
the Service after the updated policy takes effect constitutes acceptance of the changes.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us: