Privacy Policy

Data We Collect

• —Account: email address, encrypted password.
• —Conversations: messages exchanged with your AI companion, stored to power adaptive memory.
• —Usage data: connection logs, features used, technical data (device type, app version).
• —Payment: payment data is processed directly by Stripe or RevenueCat (Apple / Google). We never store your banking details.
• —Navigation data: pages visited, country, browser and device type. This data is anonymized and collected via Vercel Analytics to measure website traffic.

Purposes and Legal Basis

• —App functionality (contract performance): account creation, AI response generation, cross-device sync.
• —Service improvement (legitimate interest): analysis of aggregated, anonymised usage data.
• —Billing (contract performance): Premium subscription management.
• —Security (legitimate interest): fraud and abuse prevention.

Third-Party Services

• —Firebase (Google): authentication, database, hosting. Data stored in European datacentres. Privacy policy: policies.google.com/privacy
• —Stripe: payment processing. Privacy policy: stripe.com/privacy
• —RevenueCat: in-app subscription management. Privacy policy: revenuecat.com/privacy
• —Vercel: website hosting and anonymous audience measurement (page views, country, browser). No cookies placed. Privacy policy: vercel.com/legal/privacy-policy

Data Retention

• —Account data and conversations: retained until you delete your account.
• —Payment data: retained for 10 years in compliance with legal accounting obligations.
• —Technical logs: deleted after 90 days.

Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• —Right of access: obtain a copy of your personal data.
• —Right to rectification: correct inaccurate data.
• —Right to erasure: request deletion of your data.
• —Right to data portability: receive your data in a structured format.
• —Right to object: object to certain processing activities.
• —Right to withdraw consent: at any time, without affecting the lawfulness of prior processing.

To exercise these rights, contact us at contact@hellowellington.app. We respond within 30 days.

Security

Your data is encrypted in transit (TLS) and at rest. Access to data is strictly limited to authorised personnel. No personal data is sold to third parties.

Complaints

If you believe your rights are not being respected, you may lodge a complaint with your local data protection authority (e.g. CNIL in France: cnil.fr).

Changes

We may update this policy. In case of material changes, you will be notified via an in-app notification. The last updated date is shown at the top of this page.