Your words deserve care.

Account and matching

We use your email, nickname, adulthood information, chat languages, time zone and preferences to operate your account. Gender and country are optional; country is used for support services, not to limit worldwide matching. A conversation partner sees your chosen nickname, approved photo if any, opening note and relevant shared preferences, not your email or full birth date.

If you choose Google sign-in, Google and Supabase process the sign-in. Essential authentication cookies and a device setting cookie keep the service working. Choosing a website language does not automatically decide the languages you agree to chat in.

Sensitive information and your permission

Notes, topics, experience stages and messages can reveal health or other sensitive information. We ask separately for explicit permission to process information you choose to share for matching and private conversations, including the described safeguards. Accepting the terms is a separate choice.

Your permission is recorded with the policy versions, date and language. You can withdraw it in Settings. Withdrawal stops new matching and sending through the service; you retain access to privacy controls, reports, exports and deletion. It does not undo processing already performed or automatically erase copies that must be handled under the deletion and safety rules.

Do not share information you are not comfortable having processed. Peer support is not medical care, and no medical assessment is made about you.

Safety reviews and optional AI

Ordinary messages are not sent to an AI moderation model one by one. When someone reports a conversation, Cloudflare AI can receive relevant conversation context with speaker attribution. The operator can review the report and relevant messages. Profile photos are checked by AI before publication; unclear or unavailable checks stay private for manual review or a later retry.

A limited text check can offer optional support links for some direct expressions of immediate distress. It creates no automatic report, sanction or emergency-service contact. The card can be dismissed.

Written Conversation ideas are selected from a fixed library and do not send your messages to AI. A private AI reply pilot is restricted to the operator's own conversations, with the other participant's agreement or two operator-owned test accounts. It uses at most 12 recent messages, never sends a reply automatically and expires drafts within 48 hours. It is not publicly enabled.

Who processes information

Supabase provides the EU database, authentication and private photo storage. Cloudflare provides hosting, bot protection and AI services. Resend delivers transactional email. Google is involved only when you choose its sign-in. Optional push notifications involve your browser's push service.

GIF search uses KLIPY when enabled. Only the GIF search words are sent, not your message draft. Loading media contacts KLIPY and can disclose your IP address. Emojis are selected on your device.

The database region does not mean every provider processes everything exclusively in the EU. Providers may process information internationally under their applicable data-processing terms and transfer safeguards. Do not treat the service as end-to-end encrypted: it is encrypted in transit and at rest, but authorised safety review can access content.

How long information stays

An active conversation is not deleted because it is old or closed. Removing it from your feed does not erase the other person's access. An inactivity review may begin only when both participants have been inactive for two years, with advance notice and an opportunity to return or export before any deletion. Unresolved safety evidence can require separate retention.

Report evidence is normally retained for up to 12 months, subject to an unresolved case or applicable legal obligation. Account deletion follows the stated deletion process, normally within 30 days; unresolved safety evidence is separated and restricted. Backups expire according to the backup schedule rather than being edited in place, and restored data must respect recorded deletion requests.

An unfinished opening note is kept on this device for at most three days from its last edit. You can clear it sooner. Submitting the note clears that draft. Optional feedback stays separate from matching and can be skipped permanently.

Purposes, choices and contact

Essential account and service processing supports the service you request. Explicit permission covers the sensitive information you choose to share. Fraud prevention, security and report handling protect members and the service, with additional safeguards for sensitive content and any applicable legal obligations.

Optional email and push settings can be changed. Website analytics and internal funnel totals are used to improve the service; they do not include message text, selected health topics or advertising profiles. We do not sell your personal information.

You can request access, correction, deletion, restriction or a portable copy, and withdraw consent where it applies. Contact the operator with privacy questions or complaints. You may also complain to the relevant data protection authority.