Privacy Policy

Last updated: May 5, 2026

Who We Are

Tota is a Chrome extension that adds text-to-speech playback, speech-to-text transcription, and personalized language learning features to claude.ai. It is currently in development mode and released only to friends and family. If you have any questions about this policy or how your data is handled, you can reach us at totalanguagelearning@gmail.com.

We built Tota with a minimal-data philosophy: your personal content stays on your device, and the only thing we store on our servers is usage counters to keep the service running fairly for everyone.

What Data We Collect and Where It Lives

1. Data stored only on your device — we never see this

When you use Tota, your learner profiles (name, target language, vocabulary lists, session history, learning notes), your voice and language preferences, and your extension settings are all stored in Chrome’s local storage on your own device. This data is never transmitted to our servers. We have no access to it, cannot read it, and cannot recover it if you uninstall the extension or clear your browser storage.

This means your learning progress, conversation history, and personal profile details remain entirely private and under your control.

2. Data stored on our servers — usage counts only

The only data we store on our servers are monthly usage counts tied to your Google account’s unique identifier (a non-human-readable ID, not your email address). One count tracks how many characters of text you have had synthesized; another tracks how many seconds of audio you have had transcribed in the current calendar month. We use these solely to enforce monthly limits so the service remains sustainable for everyone.

Usage counts are keyed by month (e.g. a record for May 2026 is separate from June 2026). When you make your first request in a new month, the previous month’s record is automatically deleted. Usage counts are pseudonymous — they are keyed by a one-way hash of your Google account identifier and contain no other personal information. Because they serve as the mechanism that prevents monthly limit circumvention, usage counts are not deleted on account deletion requests; they expire naturally at the end of each calendar month.

3. Data transmitted through our servers — never stored

When you request text-to-speech (TTS) playback or speech-to-text (STT) transcription, data passes through our servers as an encrypted relay. All transmissions between the browser extension, our server, and third party TTS and STT APIs use HTTPS/TLS encryption. We do not log, store, or retain the content of these transmissions.

Text submitted for TTS: When you click play on a Claude response, the text is sent encrypted from the extension to our server, forwarded encrypted to Google Cloud Text-to-Speech, and the audio is returned to you. The text itself is never written to disk or logged on our end.

Voice recordings for STT transcription: If you use voice input, your audio recording is sent encrypted to our server, forwarded encrypted to Groq’s transcription API, and the transcription result is returned. We do not store the audio or transcription on our servers.

Google OAuth token: When you sign in with Google, your OAuth access token is transmitted to our server so we can verify your identity and look up your usage count. The token is validated and then discarded — we do not store it.

4. Data sent to third-party APIs

Google Cloud Text-to-Speech: Text that is read aloud is forwarded to Google’s TTS API. Google processes this data under their own privacy policy. We encourage you to review Google’s Privacy Policy.

Groq: Audio you record for voice transcription is forwarded to Groq’s API. Groq processes this data under their own privacy policy. We encourage you to review Groq’s Privacy Policy.

What We Do Not Collect

To be explicit about what we do not do:

We do not store the text of your Claude conversations or any TTS requests.
We do not store voice recordings or transcription results.
We do not collect your browsing history or track which pages you visit.
We do not build profiles about you beyond the usage count described above.
We do not sell your data to any third party.
We do not use your data for advertising or marketing purposes.
We do not share your data with any third parties except Google (for TTS) and Groq (for STT), solely for the purpose of providing those features.

How We Use Your Data

To provide text-to-speech audio output — relaying your text to Google TTS and returning audio.
To provide speech-to-text voice transcription — relaying your audio to Groq’s transcription API and returning the transcript.
To enforce monthly usage limits — tracking character counts server-side so the service remains available to all users.
To verify your identity — validating your Google OAuth token on each request.

Data Retention

Data	Where stored	How long
Learner profiles, settings, preferences	Your device only	Until you uninstall or clear Chrome storage
Monthly TTS character count	Our servers (pseudonymous)	Current month only; previous month deleted automatically on next use
Monthly transcription second count	Our servers (pseudonymous)	Current month only; previous month deleted automatically on next use
TTS text	Not stored by us	Not retained on our servers after processing
Voice recordings and transcripts	Not stored by us	Not retained on our servers after processing
OAuth tokens	Not stored by us	Not retained on our servers after validation

Your Rights

All users

You may uninstall the extension at any time. Doing so removes all locally stored data (profiles, settings, preferences) from your device. The only data we hold server-side are your monthly usage counts, which are pseudonymous, contain no personal information beyond a usage tally, and expire automatically at the end of each calendar month. Because usage counts are the mechanism that prevents monthly limit circumvention, they are retained through their natural expiry and are not deleted on request.

If you are located in the European Union, you have the right to:

Access — request confirmation of what data we hold about you. Server-side, we hold only pseudonymous monthly usage counts.
Erasure — you have the right to request erasure of your data. We retain usage counts under legitimate interests (fraud and abuse prevention). Upon a valid erasure request, usage counts associated with your account will be deleted within 31 days of the end of the calendar month in which the request is received.
Portability — your personal data (profiles, settings) lives entirely on your own device and can be exported via Chrome’s storage tools.

To exercise any of these rights, contact us at totalanguagelearning@gmail.com with your Google account email address. We will respond within 30 days.

California users (CCPA)

If you are a California resident, you have the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. All personal content (profiles, settings, preferences) is stored on your device only and is under your direct control. Server-side, we retain only pseudonymous monthly usage counts that auto-expire; these are retained for abuse prevention and are not subject to deletion requests. To make a request or ask questions, contact us at totalanguagelearning@gmail.com.

Server Logs

Our server generates operational logs for reliability and abuse prevention. These logs may contain:

A pseudonymous request identifier — a random ID assigned to each request, used to correlate log entries. It is not linked to your identity.
A hashed user identifier — for successful TTS and transcription requests, your Google account’s unique identifier (sub) is hashed with SHA-256 before being written to any log. The raw identifier is never logged. The hash cannot be reversed to identify you, but could in theory be matched if the original sub were known.

IP addresses are not logged.

These logs are retained for 30 days and are not used for profiling, advertising, or any purpose other than operating and securing the service.

Chrome Extension Permissions

Tota requests the following browser permissions:

Permission	Why
`storage`	Save learner profiles, voice preferences, and extension settings on your device
`identity`	Sign you in with Google so we can verify your identity for API access
`offscreen`	Play TTS audio (Chrome requires an offscreen document for audio playback in service workers)
`notifications`	Notify you of errors or usage limit warnings
`alarms`	Schedule background tasks such as resetting session state
`tabs`	Detect navigation on claude.ai to reset playback state between conversations
`https://claude.ai/*`	Inject the Tota UI (play buttons, voice input) into claude.ai pages

No permission is used for tracking, advertising, or any purpose beyond the feature it enables.

Data Security

All data transmitted between the Tota extension, our Cloudflare-hosted server, and Google’s APIs is encrypted in transit using HTTPS/TLS. Locally stored data on your device is subject to Chrome’s storage security model.

We use Cloudflare Workers infrastructure, which provides DDoS protection and does not persist request content beyond the lifetime of each request.

Children’s Privacy

Tota requires a claude.ai account to function. Claude.ai enforces its own minimum age requirements (currently 18 years old). By using Tota, you confirm that you meet claude.ai’s age requirements for your jurisdiction. Tota inherits and relies on these restrictions rather than independently collecting age information.

We do not knowingly collect personal information from children who do not meet these requirements. If you believe a child has used the extension without appropriate consent, please contact us at totalanguagelearning@gmail.com and we will take steps to delete the account.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. For material changes, we will notify users via a notice in the Chrome Web Store listing or within the extension itself. We encourage you to review this policy periodically. Continued use of Tota after any changes constitutes your acceptance of the updated policy.

Contact

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact: totalanguagelearning@gmail.com