Privacy Policy
HerSubtext ("we", "us") is a private relationship-conversation reading tool. This policy explains what we collect, why, and the choices you have. The short version: we never store your full conversation transcripts, we never sell your data, and we never use your conversations to train AI models.
What we collect
- Account data. Your email address, used to sign you in (magic link or Google sign-in, provided by Supabase Auth).
- Conversations you upload. Chat screenshots or WhatsApp export files you choose to upload are sent to an AI model to be transcribed and analyzed. The full transcript is processed in memory and then discarded — we do not store it. The generated reading (your "report") is stored so you can open it again; it contains short verbatim excerpts quoted as evidence.
- Relationship threads. If you save a person, we store the label you give them (e.g. a first name you type) and anonymized snapshots of each reading — engagement/risk levels, pattern summaries, and your own note. Snapshots contain no message text and no automatically detected names.
- Usage events. Product analytics such as button clicks, step timings, and outcome categories (e.g. risk level of a reading). Events never contain conversation content or the names of your contacts.
- Technical data. Standard server logs (IP address, browser type) used for security and rate limiting.
How we use it
- To provide the service: transcribing and analyzing your conversation, generating your report, and keeping your history.
- To improve the product, using aggregated, content-free analytics.
- To prevent abuse (rate limiting, account-level access controls).
Who processes your data
- Cloudflare — hosting, delivery, bot protection.
- Supabase — authentication and database.
- OpenAI — AI models that transcribe and analyze the conversations you upload. HerSubtext is an independent product and is not affiliated with, endorsed by, or sponsored by any AI model provider.
- Creem — payment processing. Card details are handled by Creem; we never see or store them.
- Upstash — rate limiting.
- Google Analytics 4 — usage statistics (page views and events, never conversation content).
These providers process data on our behalf and may be located outside your country, including in the United States.
What we never do
- Sell or rent your data to anyone.
- Use your conversations to train AI models.
- Store your full conversation transcripts.
- Show your content to other users. A report link works like a password — anyone you share it with can open it.
Retention and deletion
Reports and threads are kept until you delete them. You can delete a thread (and all its snapshots) at any time from your History page. To delete a specific report or your entire account and all associated data, email us and we will do it within 30 days.
Your rights
If you are in the EU/EEA or UK, you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Email us to exercise any of these rights. You also have the right to lodge a complaint with your local data protection authority.
Cookies and storage
We use browser local storage to keep you signed in. We do not use advertising cookies.
Children
HerSubtext is intended for adults (18+). We do not knowingly collect data from minors.
Changes
If we change this policy materially, we will update the date above and, for significant changes, notify you by email.
Contact
Questions or deletion requests: hersubtext@hotmail.com