Privacy Policy

Companheiro is a place for private creative work and reflection. What you write here can be personal, so this policy tries to be plain about exactly what happens to it. The short version: we collect what the app needs to work, we never sell it, we never use it for advertising, and nothing you write is used to train AI models.

Who is responsible for your data

The data controller is the operator of Companheiro:

Contact for anything privacy-related: hello@companheiro.app.

What we collect

Account details

• Your email address and a password (stored only as a one-way hash by our authentication provider; we never see it).
• If you sign in with Google, the email address (and, if Google shares it, your name) that Google passes to us. We never receive your Google password.
• Settings you choose, such as theme, dictation language and whether the weekly letter is on.
• Which version of our Terms and this policy you agreed to when you created your account, and when.
• Optionally, how you heard about us, and any campaign tag in the link you arrived from (for example utm_source). This is carried in the page address, not in a cookie.

What you create

• Check-ins, captures, ideas, projects, drafts, notes, tasks, reflections and conversations with the companion.
• Images and recordings you add to a project. These are stored for you; the AI never sees the files, only any text you write about them.
• Links you save. Our server fetches a short preview of the linked page (title, description, thumbnail) so the companion can understand it.

What the app works out from it

To respond well, the app derives signals from what you write: for example your energy, the “weather” of a check-in, recurring themes, and patterns it notices over time (your Portrait). This is a kind of profiling. It exists only to shape how the companion talks to you. It is never used to make decisions with legal or similarly significant effects on you, never shared, and you can see and delete it.

Information about your wellbeing

Check-ins and reflections can reveal how you are feeling, and sometimes things about your mental or physical health. The law treats this as special-category data. We process it on the basis of your consent, which you give when you create your account and agree to our Terms, and only to provide the companion to you. You can withdraw that consent at any time by deleting the entries concerned or your whole account, or simply by not writing about your health. Companheiro is not a medical or therapeutic service (see our Terms).

Usage analytics

Companheiro is made by one person. To learn how it is working for people, the maker can see how each account uses the project side of the app: how many projects there are and where each one stands, the dates things happened (a project started, its core concept written, a piece added, a project finished), how many of each thing a project has (pieces, parts, threads, tasks, anchor lines, images, recordings, changes to its core concept, checks of its rules, reflections after posting), how many words its pieces hold, how many times you have talked with the companion about a project, and how many minutes you wrote on a given day. This is shown beside your name, email address, plan and the practices you chose when you joined, together with what the AI processing for your account has cost and roughly what your plan has paid (see Billing and usage below).

It never includes anything you wrote: no title, no text of a concept, piece, thread, task or conversation, and no image or recording. It includes nothing at all from your check-ins, captures, ideas, Portrait or letters. It is worked out on our own servers from what is already stored in your account; no tracking script runs in your browser and nothing is sent to an analytics company.

Usage analytics are on unless you switch them off: Settings → Share usage analytics. Switch them off and your account is no longer shown to the maker in this way, straight away. If your account is older than this section, nothing of yours is shown until you have seen a notice about it in the app.

Billing and usage

• Your plan, trial dates and subscription status, and the Stripe customer reference that links your account to your payments.
• How much AI processing your account uses (model, size of the request in characters and tokens, cost, time taken). We record the size and shape of requests, not their content. This is how we keep prices fair and enforce fair-use limits.
• A one-way hash of your email address, to stop the free month being claimed more than once. It cannot be turned back into your address, and it is kept after an account is deleted for that reason only.

Technical data

Our hosting provider records standard server logs (IP address, browser type, the page requested, time, errors) to keep the service running and secure. We run no analytics, advertising or tracking scripts in your browser; the usage analytics described above are worked out from your account on our own servers.

Why we use it, and our legal basis

• To provide the service you signed up for (contract): storing your work, running the companion, sending account emails such as sign-in links.
• To process information about your wellbeing (your consent, UK/EU GDPR article 9(2)(a)), given when you create your account.
• To keep the service secure, fair and affordable (legitimate interests): preventing abuse and repeated free trials, fair-use limits, fixing faults, understanding which channels bring people here.
• To understand how the app is used and improve it (legitimate interests): the usage analytics described above, which hold no content and which you can switch off in Settings at any time.
• To meet legal obligations: for example keeping records, or responding to a lawful request.

We do not sell your data, share it for advertising, or use it to train AI models.

Who processes it for us

We use a small number of service providers. Each only processes your data on our instructions, under a data processing agreement.

• Supabase — database, sign-in and file storage.
• Vercel — hosting and running the app.
• Anthropic — the AI model (Claude) that reads what you write in a conversation or check-in and writes the companion’s replies. Under Anthropic’s commercial terms, API inputs and outputs are not used to train its models and are kept only for a limited period for safety and abuse monitoring.
• Resend — delivers operational alerts to us (for example a failed payment sync), which can include your account reference. Sign-in emails to you are sent by Supabase.

Sign in with Google

If you choose to, Google confirms who you are and passes us your email address. Google acts as an independent controller under its own privacy policy (opens in a new tab) and learns that you signed in to Companheiro. We share nothing else with them.

Payments

Subscriptions are sold through Stripe Managed Payments. Stripe acts as the reseller (merchant of record): it takes your payment details, handles tax and receipts, and is an independent controller of that information under Stripe’s privacy policy (opens in a new tab). We never see or store your card number.

Voice dictation

When you use the microphone, speech is turned into text by your browser’s built-in speech recognition, not by us. Depending on your browser this may be done on your device or by the browser maker (for example Google in Chrome, Apple in Safari) under their own privacy terms. We only receive the resulting text, and never store audio. If you prefer, you can always type instead.

Link previews

When you save a link, our server (not your browser) requests the page, and for some platforms their public preview service (YouTube, Vimeo, TikTok, X). Those sites see a request from our server, not from you.

International transfers

Some providers above are based in, or use infrastructure in, the United States. Where data leaves the UK or European Economic Area, it is protected by the safeguards the law requires: an adequacy decision (including the UK Extension to the EU–US Data Privacy Framework, where the provider is certified) or the standard contractual clauses and UK International Data Transfer Addendum.

How long we keep it

• Your account and everything you create: until you delete it, or delete your account.
• When you delete your account, your data is removed from the live database and file storage straight away. Encrypted backups expire on a rolling schedule, normally within 30 days.
• AI usage and billing event records are kept for accounting and fraud prevention, with the link to your account removed when you delete it.
• The email hash described above is kept to prevent repeat trials.
• Stripe keeps payment and tax records for as long as the law requires it to.
• Server logs are kept for a short period by our hosting provider, normally no more than 30 days.

Your rights

You can, at any time and for free:

• Get a copy of your data: Settings → Your data → Export gives you everything as one file.
• Delete your account and everything in it: Settings → Delete account.
• Correct anything, by editing it in the app or asking us.
• Withdraw consent, object to processing based on legitimate interests, or ask us to restrict processing. For usage analytics the switch in Settings does this by itself.
• Complain to a data protection authority. In the UK that is the Information Commissioner’s Office (opens in a new tab); in the EU, the authority in your country (in Portugal, the CNPD (opens in a new tab)). We would appreciate the chance to put things right first: hello@companheiro.app.

We reply to requests within one month.

Age

Companheiro is for adults. You must be 18 or over to create an account, and we do not knowingly collect data from anyone younger.

Security

Data is encrypted in transit and at rest. Every row in the database is locked to its owner by row-level security, so one account cannot read another’s. Uploaded files are private and only reachable through short-lived signed links. No system is perfectly secure; if a breach ever affects you, we will tell you and the regulator as the law requires.

If you are struggling

If something you write suggests you may be in danger, the companion may point you to people who can help, such as findahelpline.com (opens in a new tab). It does not contact anyone on your behalf.

Changes

If we change this policy in a way that matters, we will tell you in the app or by email before the change takes effect. The date at the top shows the latest version.