Table for Three, Privacy Policy
Table for Three keeps what it can on your iPhone and as little as it can anywhere else. Your progress, your calls and your debriefs live on your phone. To make a voice call possible, a few things have to leave it: your voice goes to Google for the call, the words of the call go to Anthropic for your debrief and our own server keeps a short note and your minutes, linked to your App Store subscription and never to your name or email. This page sets out exactly what, where and for how long.
Who we are
Table for Three: Speak Daily is made by Belong Europe ApS, a company registered in Copenhagen, Denmark, CVR number 46649044, the company behind the Belong apps. We are the data controller for the personal data described below. You can reach us at hello@belongeurope.com.
What stays on your iPhone
The app keeps these on your phone, in its own storage, and does not send them to us as stored data: the first name and the work you tell Oskar, your level, the language you are learning, your daily goal, your calls with their debriefs and new words, the seconds you spoke each day, your streak and your week. Deleting the app deletes them. Forget me, on the You tab, deletes them too.
Your first name, your work and your level leave the phone only inside a call, as part of the instructions the person you call follows, so they can greet you by name, talk about your work and speak at your level. Our server passes them on for that call and does not store them.
The free first call
Before you subscribe you can try one short call, up to 75 seconds, once per iPhone. To keep it to one per iPhone we use Apple’s DeviceCheck: the app asks Apple for a one-time token, our server asks Apple to mark this device as having had its call and Apple keeps that mark. Apple tells us nothing that identifies you or your device. Our server keeps a record of the call itself (a random number, the day, the language and when it started and ended) for seven days and then deletes it. The words of the call go to Anthropic for your first fix, as described below, and are not stored by us. Nothing about the free call is linked to a subscription.
Calls with the characters
The microphone. The first time you call, iOS asks whether Table for Three may use your microphone. You can refuse, and you can change it at any time in Settings; the app cannot hear you without it. The microphone is used only while a call is open. Ending the call ends it.
Before each call the app asks our server, api.tableforthree.app, for a single-use pass for that one call. With that request it sends Apple’s transaction number for your subscription, who you chose to call and in which language, your first name, your work and your level if you gave them and your phone’s time zone, so your daily minutes start again at your own midnight. Our server asks Apple whether the subscription is active, and that is all it learns from Apple. It never receives your email address or your payment details.
During the call your phone connects directly to Google’s Gemini API, which listens to what you say, writes down what you and the character say for the subtitles and speaks the character’s replies. Your voice goes from your phone to Google and does not pass through any server of ours; we never receive or store any audio. With the call go the instructions the character follows: the scene, Oskar’s short note from earlier calls, described below, and your first name, work and level if you gave them. Google provides this as a paid service. Under its Gemini API terms Google does not use what is sent to improve its products. It logs it for a limited period, only to detect and prevent misuse. It may process it in any country where Google or its agents have facilities. Google’s own privacy policy and terms govern that processing.
English subtitles. If English subtitles are on, each finished line the character says is sent through our server to Anthropic’s Claude API to be translated. Only the character’s words are sent, not yours, and our server does not store them.
After the call the app sends the written transcript of the call, the words and not the audio, with your level, to our server, which passes it to Anthropic’s Claude API to write your debrief: one fix, your new words and which goals you reached. Claude also writes the short note Oskar keeps for your next call. Our server does not store the transcript. Anthropic deletes what it receives through its API within 30 days, or keeps it for up to two years only if it is flagged for breaking Anthropic’s usage policy. Its commercial terms do not allow it to train its models on it. Anthropic is based in the United States, so this is a transfer outside the European Economic Area, made under the safeguards in Anthropic’s data processing terms. If your phone is offline when a call ends, the transcript waits on your phone until the app next reaches our server, is sent then and is deleted from the phone.
What our server keeps is linked only to Apple’s original transaction number for your subscription, never to your name or email: how many seconds you talked each day; for each call, when it started and ended, who you called, the language, the minutes counted and how much processing it used; and Oskar’s note. The note is at most 500 characters and holds the topics you talked about, how comfortable you seemed and the one or two mistakes that keep coming back. Claude is instructed to leave out names, contact details and health, religion, politics or other sensitive personal details. We cannot promise it never slips, so please do not share such details in a call.
Your table of three
Tables are optional. If you join one, you give us what a table needs: the first name the others will see, your level, the time you want, your confirmation that you are 18 or over and, if you choose to, your first language, which we use only to seat you with people who speak other ones. Our server keeps these with your seat, linked to your App Store subscription.
What the others see: your first name and, for each of the last seven days, whether you came, said in advance that you could not make it or missed the call. Nothing else: no surname, no photo, no email and no phone number.
The live call is voice only, with no camera. It runs on Cloudflare Realtime: your voice goes from your phone through Cloudflare’s servers to the other two people, as it happens, and back. We do not record the call and we do not receive the audio. The others hear you live and could in principle record you with another device, which our terms forbid. The app counts your own speaking time for your daily number with a level meter on your phone; it stores no sound and sends none.
Reports and blocks. If you report someone, we keep who reported whom, at which table, when and the reason you wrote, so we can review it. If two different people report the same person, that person’s tables are paused until we have looked. If you block someone, we keep that you blocked them, so you are not seated together again. The person you report or block is not told.
How long. We delete a table, its seats and its attendance a year after the table ends, your table profile (first name and first language) a year after your last table, reports a year after they are made and a block a year after you last used tables. Leaving a table, or Forget me, ends your seat at once.
Reminders
If you have a table, the app can remind you ten minutes before it opens. The reminder is a notification your iPhone schedules for itself: no push service is involved and no device token reaches us. iOS asks your permission first, and you can turn it off on the You tab or in Settings.
Sharing your week
Share my week draws a picture of your week on your phone and opens the iPhone’s own share sheet. Nothing is uploaded unless you choose where to send it, and then it goes only there.
Subscriptions and payments
Table for Three is an auto-renewable monthly subscription with a free trial for new subscribers. Purchases are handled by Apple through your Apple Account and we never see your payment details. To check that a subscription is active, our server asks Apple about the transaction the app sends; Apple’s answer contains no payment details.
Offers for Belong app subscribers. A Belong app can give its subscribers a one-time code for Table for Three. When you ask for one, that app sends our server its own proof of your Belong subscription. We check it with Apple and keep only a one-way fingerprint of it, so the same subscription always gets the same code and a code is not given twice. You redeem the code in Apple’s own sheet, inside Apple’s systems.
Service providers
- Cloudflare runs our server, keeps its database in the European Union, carries the live audio of your table and serves this page and tableforthree.app. It records anonymous page-load statistics for our public pages without cookies.
- Google, through the Gemini API, for the voice of each call, as described above.
- Anthropic, through the Claude API, for debriefs, Oskar’s note and English subtitles, as described above.
- Apple, for purchases, offer codes and DeviceCheck, under Apple’s own privacy policy.
The app contains no analytics, advertising or tracking code of any kind, and we do not sell or share your data for advertising.
Where your data is stored, and for how long
Our server and its database run on Cloudflare in the European Union. Call records and daily counts are deleted a year after the call, and everything we hold about a subscription, Oskar’s note included, once a year has passed without a call. The free first call record is deleted after seven days. Table data follows the periods under Your table of three. What Google and Anthropic keep, and for how long, is set out under Calls with the characters.
Diagnostics
If you have turned on Apple’s optional analytics sharing in iOS Settings, Apple may send us crash and performance reports in a form that does not identify you. We use them only to find and fix problems. You can turn this off at any time in Settings → Privacy & Security → Analytics & Improvements. We add no crash reporting of our own.
Your data and your rights
You have the rights the GDPR gives you: access, rectification, erasure, restriction, objection and a copy in a portable form. Because we do not know your name, the quickest way to use them is in the app:
- Clear Oskar’s notes, on the You tab, deletes Oskar’s note and your call records on our server. Your table stays.
- Forget me, on the You tab, deletes everything on your phone, Oskar’s note and your call records on our server and your table profile and seat. Blocks and reports you made stay for their year, because they protect the people at your table. The daily counts stay until they are a year old, because they hold only a day and a number of seconds and keep the daily allowance fair.
For anything else, write to us at hello@belongeurope.com and we will respond. You also have the right to complain to your local data protection authority or, since we are established in Denmark, to the Danish Datatilsynet at datatilsynet.dk.
Children
Table for Three is for adults. You must be 18 or older to use it, and we do not knowingly collect anything from children.
Changes to this policy
If we change how the app handles data, we will update this page and its effective date, and we will say so in the app when the change is material.
Contact
Questions about this policy: hello@belongeurope.com.