Privacy policy

This draft covers the Angelchat website and app. Their data practices may differ; the app’s actual data flows, settings and suppliers must be verified separately before this policy is finalised.

The controller’s legal name and address have not yet been confirmed and must be provided here before publication. For questions, Angelchat can be contacted at hello@angelchat.io.

Depending on the features you use and what you choose to provide, this may include:

• profile or contact details, if you provide them;
• messages and conversation content, which may include sensitive health information;
• technical information about use and your device;
• an email address if you voluntarily choose to share it.

These categories describe information that may be involved; they do not confirm that every item is collected.

Information may be needed to provide the conversations and features you use, keep the service working and secure, and respond to enquiries. The applicable purposes and legal grounds must be confirmed against the actual processing.

Conversations may contain health information, a special category of personal data under the GDPR. Angelchat must identify both an Article 6 legal basis and an applicable Article 9 condition. This draft does not assume that consent alone is sufficient.

In conversations between people, what you write is visible to the people participating in that conversation. Angelchat’s description as anonymous does not mean every part of the service or every situation guarantees anonymity.

AI angels are clearly labelled fictional AI features—not people, therapists or healthcare professionals. AI can be wrong and is not emergency support. When you use an AI angel, conversation context is sent to an external AI supplier. The supplier’s identity, retention, any model training and transfers have not been verified and must be disclosed before this policy is approved.

Where possible, avoid sharing names, contact details or other identifying information unless it is needed for your conversation.

Conversation content is shared with the people you talk to and, when an AI angel is used, with the external AI supplier described above. Angelchat may also need service providers to operate the website or app. Which providers actually process information, and what they may do with it, must be checked and described.

If personal data is transferred outside the EU/EEA, Angelchat must confirm where it goes, which recipients are involved and what transfer mechanism or other safeguard is used. It has not yet been verified whether such transfers take place.

Information should not be kept longer than needed for relevant purposes and legal requirements. Specific retention periods, what deletion of an account or conversation removes, and whether backups persist all need confirmation. This draft makes no promise of a particular time limit.

Depending on the circumstances and applicable law, you may have the right to request access to, rectification or erasure of your information, restriction of processing, data portability, or to object to processing. You may also withdraw consent where processing relies on consent; this does not affect the lawfulness of processing before withdrawal.

The process for verifying and handling a request still needs to be established. Contact hello@angelchat.io. If you are in Sweden, you may also complain to the Swedish Authority for Privacy Protection (IMY): imy.se.

The website uses a language-preference cookie with a confirmed duration of one year. This draft makes no broader claim about which other cookies the website uses.

Analytics may include custom click events with coarse page types. Custom event payloads should not contain topics, conversation content or passwords. Automatic pageviews may, however, include visited URLs; what is collected depends on the published analytics settings. App cookies and analytics have not yet been verified.

Angelchat needs appropriate measures to protect information and limit access. The specific security measures must be reviewed; this draft makes no unverified claims about encryption.

The service’s minimum age and any special safeguards for minors need confirmation before publication. This policy should be updated when the service’s practices change; the final version should state when it was last revised.

This document remains a draft until the following items have been checked and approved:

• the controller’s legal identity and address;
• the AI supplier’s identity, terms, retention, any model training and transfers;
• purposes and legal bases, including Article 9 for health information;
• actual retention periods, providers, international transfers and safeguards;
• minimum age and practical procedures for rights requests.