Privacy

Your words.
Clear expectations.

Last updated October 17, 2026. This policy covers free conversations, accounts, paid sessions, and membership.

Conversation text

Messages are held in the memory of your open chat page and sent over HTTPS to our server and an AI provider for replies. Recent conversation history is included in later requests. Long conversations may exceed the context available to the guide.

Our application does not save transcripts in its database or intentionally log message content. It does not put chat text in local storage or session storage. Closing or reloading the page clears that transcript. Ending a conversation clears the page and attempts to invalidate the session. We cannot retrieve earlier messages for you.

AI and infrastructure providers

The conversation introduction identifies the configured AI service. Cloudflare hosts this site. Replies may use Cloudflare Workers AI or OpenRouter, which passes messages to the selected model provider. OpenRouter requests exclude providers that permit training-data collection under that routing setting. This is not a promise that no third party processes or retains information.

Provider processing and retention follow their policies. Read Cloudflare’s Workers AI data policy, Cloudflare’s privacy policy, and OpenRouter’s provider privacy information.

Accounts and email

Free introductory conversations do not require an account. For paid booking, we store your email, account identifier, booking times and time zones, chosen guides, and membership and payment references. Resend delivers sign-in links, confirmations, and reminders. These emails contain account or booking information, not transcripts or saved notes. See Resend’s privacy policy.

Sign-in links expire after 15 minutes and can be confirmed once. We store a hash of each token. A secure, HTTP-only account cookie keeps you signed in for up to 30 days. Signing out invalidates that account session.

Optional notes

You may write a short note for each guide in your account. We store it and send it to the AI provider during booked sessions with that guide. Notes are never generated or saved automatically from a conversation. You can edit a note or erase it by saving an empty field. Avoid identifying or especially sensitive details.

Payments and abuse prevention

Stripe handles card details, authentication, receipts, and billing management. Our application does not store card numbers or security codes. It stores customer, checkout, payment, invoice, and subscription identifiers, amounts, and status records. See Stripe’s privacy policy.

We keep checkout and payment-failure counters, temporary account holds, and a salted hash of Stripe’s card fingerprint to detect duplicate payments. We do not retain the raw fingerprint. The hash is eligible for deletion after seven days. Stripe processes payment-risk information under its own policies.

Session and technical records

A separate secure, HTTP-only cookie identifies your current conversation for up to 15 minutes or the remaining time in a booked hour. We store its hash, guide, timestamps, message count, and booking reference if applicable. These records enforce access limits and contain no transcript.

Rate limits use salted hashes of network addresses or email addresses, alongside counters and expiry times. Our application database does not store raw network addresses. Providers may separately process network addresses, browser information, timestamps, and security records.

Conversation metadata is eligible for cleanup one day after expiry. Rate-limit records normally expire within two days. Expired sign-in tokens and account sessions are removed by maintenance. Delivery-queue metadata is eligible for deletion after 30 days. Cleanup runs on scheduled maintenance and some service requests; inactivity or outages can delay deletion.

Retention and your choices

Account details, saved notes, bookings, and billing records remain until removed through an account request or retention process. Records needed for disputes, fraud prevention, accounting, or legal obligations may need to be retained. Provider records and backups follow their own retention schedules.

You can browse without an account, stop a conversation, erase notes, sign out, and clear cookies. Contact us to request access to or deletion of account information. Cancel membership through billing management to stop renewals; clearing cookies does not cancel a subscription.

For account, booking, refund, or privacy requests, use the support contact in your account. Contact details will appear here when the service opens.

Optional website analytics

If you choose “Allow analytics,” Google Analytics 4 measures visits and engagement on our public pages. It may process a browser identifier, device and browser information, approximate location, public page names, and the referring website’s origin. We remove URL query strings and fragments from the page address we send, and remove paths and query strings from referrers.

Google Analytics does not load before you consent or on chat, booking, sign-in, account, or error pages. We do not send conversation text, saved notes, email addresses, booking identifiers, or account identifiers to Google Analytics. Automatic form, search, outbound-link, download, and video tracking are disabled, as are Google Signals and advertising personalization. See Google’s privacy policy.

We remember your analytics choice in your browser for up to 180 days. Analytics cookies are configured to expire after 30 days without extending their lifetime on each visit. Event-level and user-level retention is set to two months without resetting on activity; aggregate reports may remain available longer. You can decline or withdraw through Analytics preferences below or in the footer. Withdrawing removes this site’s analytics cookies and reloads the page. We also respect supported browser Global Privacy Control and Do Not Track signals.

Scope

This service is for adults 18+. It does not provide clinical confidentiality, clinician–patient privilege, or a medical-record service. Do not upload medical records, financial credentials, or another person’s private information. No advertising pixels are included. Fonts and images are served by this site.

We will update this policy when our practices change. Review it before a new conversation.