Privacy Policy

In short: conversations about relationships are private. Your situations are private by default and stored encrypted. We never publish them, sell them, or use them to train AI models. You can delete them whenever you like.

1. Data controller

[COMPANY NAME], [LEGAL ADDRESS]. Contact for privacy questions: [EMAIL].

2. What data we process

• Account data: email address, display name (optional), avatar (optional), time zone, language, and preferred form of address.
• Situation content: the situation description, conversation messages you enter, answers to follow-up questions, screenshots you upload, AI analyses, message suggestions, outcomes, and reflections. This content is stored in the database encrypted (AES-256-GCM).
• Payment data (only if you order Premium): full name or company name, address, Tax ID (PIB) and company registration number (for companies), and email — to issue the proforma invoice and record the payment. We do not process card details.
• Progress: points, level, skills, and achievements — calculated from the decisions you log, without AI.
• Technical data: session cookie, security token, a hash of your IP address (we don't store your IP in its original form), and browser type — for security and abuse prevention.
• Analytics (only with your consent): anonymous usage events (e.g. "analysis completed") without any conversation content, tied to an irreversible anonymous ID.

3. Why, and on what legal basis

• Providing the service (performance of a contract): account, login, analysis, history, progress.
• AI analysis (explicit consent): before your first analysis, we ask for your consent to send the situation text to an AI provider. You can withdraw it in settings.
• Security and abuse prevention (legitimate interest): rate limiting and error logs without conversation content.
• Analytics and marketing emails (consent): only if you turn them on.

4. AI processing

For analysis we use the AI provider Anthropic PBC (USA). Before sending, we automatically remove obvious personal data (email addresses, phone numbers, links, usernames). We send only what is needed to analyze your situation. The provider processes the data as a processor, under its terms for API customers, which do not provide for training models on API data. Please don't enter passwords, card numbers, or any other data not needed for the analysis.

5. Who has access

Only you can see the content of your situations. System administrators cannot see situation content; they only see technical data (e.g. number of situations, status). The one exception: if you send us a report (e.g. "inaccurate analysis") and explicitly allow access to that situation — access is then limited to that situation, and every access is recorded in an audit log.

6. How long we keep data

• Situations, analyses, and screenshots — until you delete them or delete your account.
• Used and expired login links — briefly, for security.
• Proforma invoices and payment records — for as long as accounting regulations require, even after account deletion (without any link to situation content).
• Anonymized analytics (without a user ID) may remain after account deletion because it cannot be linked to you.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, portability, and withdrawal of consent. In the app, you can yourself:

• export all your data (JSON) — Account → Export my data;
• delete an individual situation, a screenshot, or your entire history;
• permanently delete your account;
• manage your consents — Privacy.

You also have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection (Republic of Serbia) or with the competent supervisory authority in your country.

8. Security

HTTPS, encryption of content in the database, passwordless login with single-use links, protection against CSRF and XSS attacks, request rate limiting, and security HTTP headers.

9. Minors

DateBuddy is intended for people over 18.

10. Changes

We'll let you know about significant changes in the app. Every version is numbered, and your consent is stored together with the version number.