Privacy policy

• Account data. Your email address (Sign in with Apple private relay is supported). We do not collect your precise location.
• Sensitive wellbeing data. Mood journal entries (anxiety level, trigger tags, notes), AI conversation content, and GAD-7 self-check results. These are treated as special-category data under GDPR Article 9 and processed only with your explicit consent.
• Usage analytics. Anonymized, de-identified product events (e.g. “an exercise was completed”). Conversation text is never included in analytics.
• Crash logs. Technical diagnostics, retained for 90 days on a rolling basis.

We use your data to provide and personalize the app — generating AI responses, showing your mood trends, and keeping your self-check history. We do not sell your personal information, and we do not show advertising.

To generate replies, your conversation content is sent to a third-party large-language-model provider (OpenAI, Anthropic, or Google, depending on the active model). We use commercial API terms under which your data is not used to train the provider’s models and is not retained by the provider beyond the request. You are always told when you are talking to an AI.

• Journal data is encrypted on your device.
• All traffic is encrypted in transit (TLS).
• Server-side databases are encrypted at rest.
• We collect the minimum data needed and keep analytics de-identified.

Depending on where you live (GDPR/UK GDPR in the EEA and UK, CCPA/CPRA in California, LGPD in Brazil, PIPEDA in Canada, the Privacy Act in Australia), you have the right to access, correct, export, and delete your personal data. In the app you can:

• Export your data (JSON/PDF) at any time from Settings.
• Delete your account and all associated data yourself from Settings. Deletion is complete — including backups — within 30 days.

California residents: we do not sell or share personal information for cross-context behavioral advertising.

We keep your account and wellbeing data until you delete it. Crash logs are deleted on a 90-day rolling basis. When you delete your account, all associated data — including copies in backups — is erased within 30 days.

Settle is not directed at children. We do not knowingly collect data from anyone under 16, and the app is rated 17+. If you believe a child has provided us data, contact us and we will delete it.

We work with a small set of processors under data-processing agreements: cloud hosting and database (Supabase), subscription infrastructure (RevenueCat), product analytics (PostHog), and the LLM providers named above. Each is bound to process data only on our instructions.

If we make material changes, we will notify you in the app and ask for renewed consent where required. The current version is always available at this URL, with its effective date above.

Questions, export requests, or deletion help: support@corrin.cc