Privacy Policy

Draft — not yet legally reviewed. Written to describe the product's actual behaviour. Needs review by a lawyer in the operating jurisdiction, and alignment with GDPR/local requirements, before launch.

What we collect

Your email address, used only to sign you in and to send you service notifications.
A handle you choose, plus optional languages and country/city.
What you write during intake, and the structured tags you confirm.
Messages you send inside a conversation.
An identity document, if you offer to help someone. It is stored privately, visible only to the reviewer who checks it, and deleted as soon as they decide. After that we keep only the outcome and, on a rejection, the reason — never the document, never the document number.

What we never collect

No medical records, no insurance documentation, no diagnostic uploads. Please don't send them.

What other members can see

Your handle, your confirmed tags, your verification status, and your aggregate trust score. Never your name, email, phone number or exact address. Your raw intake text is never shown to another member — only a short structured summary and, with matching, one generated line drawn from your own words.

Nothing is public

There are no public profiles and no browsable content. Nothing you write is indexable by search engines or visible outside an active match.

Automated screening

Intake and conversation messages are processed by an AI model to screen for crisis language and abusive patterns, and to extract topic tags. Flagged content may be reviewed by our staff. Content is not used to train third-party models.

Who we share with

Only the infrastructure providers needed to run the service — hosting and database, the AI provider used for screening and extraction, and email delivery. Identity documents are reviewed by our own team, not sent to a third party. Never sold, never used for advertising.

Retention and deletion

Delete your account at any time. We mark it deleted and anonymise your sent messages rather than erasing them from the other person's conversation history. Content tied to an open flag or report is retained for a defined review period. Aggregate feedback counts persist without identity.

Your rights

Depending on where you live, you may request access to, correction of, export of, or deletion of your personal data. Contact us and we'll respond within the period your local law requires.