Privacy

Last updated 10 September 2026

This explains what we collect, why, and how to get rid of it. We have tried to write it in plain language rather than legal boilerplate.

What we collect

Account data: your email address, and a display or preferred name if you give one. Your password is handled by our authentication provider and we never see it.

Conversation data: the messages you send and the replies you receive. These are stored so your conversation continues where you left off.

Memory data: short notes derived from your conversations — things like your name, your work, or plans you mention. You can view and delete every one of these in your settings.

Usage data: message counts, token counts and timing, used to run the service and control costs. Also your timezone and locale, so the conversation makes sense at your time of day.

Technical data: your IP address is used for abuse prevention. It is hashed before storage; we do not keep raw IP addresses.

What we do not collect

We do not ask for your real name, address, phone number, date of birth or identity documents.

We do not use third-party advertising or analytics trackers, and we do not sell or share your data with advertisers.

Memory extraction is instructed to skip sensitive categories — health, sexuality, religion, politics and financial details. If something sensitive is stored anyway, delete it in settings and it is gone.

Who can see your conversations

You can. Your data is isolated at the database level: another user cannot read your conversations even if they know your account identifier.

A small number of staff can access conversation data when investigating abuse, safety reports or technical faults. Every such access is written to an audit log.

Your messages are sent to Z.ai, our AI provider, to generate replies. They process this on our behalf under their terms and do not use it to train their models.

Legal basis and retention

We process your data to provide a service you asked for, and to keep it secure and available. Marketing email is sent only with your explicit opt-in, which you can withdraw at any time.

Conversations and memories are kept until you delete them or your account. Aggregate usage figures with no personal content are kept for cost accounting. Audit records of administrative actions are kept for security purposes and are de-identified when an account is deleted.

Your rights

Export: download everything we hold about you as a single JSON file, from your settings page.

Deletion: delete your account from settings. This removes your profile, conversations, messages, memories, relationship state and notifications. It cannot be undone.

Correction: change your name, timezone and notification preferences at any time; delete individual memories one by one.

If you are in the UK or EU you also have the right to object to processing and to complain to your data protection authority.

Cookies

We use one essential cookie to keep you signed in. There are no advertising or analytics cookies, which is why you are not being asked to accept a banner.

Campaign parameters from links you follow are held in your browser session only, and are discarded when you close the tab unless you create an account.

Contact

Questions or requests: hello@valeriavolkova.blog.

Privacy · Valeria Volkova