1What we collect
- Your email address and a password, which Supabase Auth stores in hashed form.
- Your subscription status and billing period, copied from Stripe, and the Stripe customer and subscription IDs that link your account to them.
- The conversation during a session, kept only as long as the next section says.
- If you use the free first session: a one-way code made from your email address, with an internal account number, a session number and the time. It holds no email address, no name and nothing you wrote, and it is used only to stop a second free session.
- If you use the free first session: a one-way code made from your internet address, with a session number and the time. It holds no address and nothing you wrote. It is used only so that one address gets at most two free sessions in 30 days, and it is deleted after 30 days, whether or not you delete your account.
- Saved reports, if you choose to save them.
- A step you chose to carry to your next session, in your own words, if you saved one, and your answer to "Did it happen?" on a report.
- Your answer to "Was this report useful?" on a report, and the date. None of your words go with it.
- If you ask for a research report: what you asked it to cover, your suggestion for the conversation, the PDF, and when you asked and when it was sent.
- A short record of how each session ended, tied to your account: whether you saved a report, whether you tapped "This didn't help", whether the AI model stopped the session itself, and which version of Feelings Buddy's instructions ran. It holds none of your words.
- If a session is stopped for safety, a record of when, the session it was in and the kind of check that stopped it. It holds none of your words. The operator gets an email with the same details, for information.
2What happens to a session
While a session runs, the conversation is stored so each reply can follow from the last. When you end the session you choose:
Save report
A second AI call writes a report from your own words, and the report is saved. The conversation is kept with it, so you can read it or download it from the report. It is deleted when you delete that report or your account.Research report (optional)
If you save the report, you can also ask for a research report. Feelings Buddy's AI research assistant reads the conversation and what you wrote, and writes a PDF. No person reads them. If your report needs research we haven't done yet, the person who runs Feelings Buddy is told the general topics to research, never your words. The PDF and your request are kept with the report and deleted when you delete it, or usually within a day after you delete your account. What it learns from research is kept as general research notes, never your words or details.Don't save
The conversation is deleted at once.If an automatic safety check or the AI model stops a session, the conversation is deleted then, and no report can be saved from it. A conversation left open with no saved report is deleted automatically 30 days after the last reply.
Every session starts fresh. Nothing from one session, and no saved report, is brought into another session, except a step you chose to save. That step is used once, for one question at the start of your next session, and is deleted after that session.
3How Feelings Buddy improves
Feelings Buddy improves by changing the instructions its AI model follows, which are the same for everyone. Improving it adds no memory of you, and your conversations are not used to improve it. The session records above and your "This didn't help" taps show which version of those instructions is missing, without any of your words. If you ask for a research report and write how the conversation could have gone better, the AI research assistant passes on up to three general themes from it, never your words, which the person who runs Feelings Buddy reads to improve it. They are kept without anything that links them to you.
4Who processes your data
Anthropic
Makes Claude, the AI model that replies in a session, writes reports and checks each message you send for signs you may not be safe. It receives the conversation for each reply. Under its commercial terms it may not train models on what we send. Anthropic says it deletes it within 30 days, or keeps it up to 2 years if its own safety systems flag it. It stores this data in the United States. If you ask for a research report, the AI research assistant sends Anthropic the conversation and what you wrote, under the same commercial terms.Supabase
Stores account data, reports and conversations. Region: Canada (ca-central-1). It also stores research report PDFs.Stripe
Processes payments and keeps its own billing records.Resend
Delivers email for Feelings Buddy: the operator's email when a session is stopped for safety, which holds the kind of check, the time and a session identifier; notices to the operator that a research report was asked for or needs new research, which hold a request number or a count; and the emails telling you your research report needs new research or is ready, which hold a link at most. None of them holds any of your words.Meta
Receives page views and clicks from our public pages only if you accept cookies. Meta never receives anything you write.Some of these companies handle your personal information outside Canada. Anthropic stores what we send it in the United States and may route it through other countries. Stripe, Resend and Meta may also handle it outside Canada. While your information is in another country, the courts, law enforcement and national security authorities of that country may be able to get it.
5Your choices
Download my data
Your dashboard gives you a JSON file with your profile, subscription, reports, session records, any research report request with what you wrote in it, and your conversations, both any in progress and any kept with a saved report. Research report PDFs download from each report. Records of safety stops are not in the download. After you delete your account, they are kept without your name, your email, your account or anything you wrote.Delete a report
This deletes the report, the conversation kept with it, and any research report and request.Delete all my data
This deletes your account, reports, research reports, session records and every conversation, and cancels your subscription. If you used the free first session, the one-way code made from your email address is kept, as section 6 says, and the one-way code made from your internet address is deleted when its 30 days end. Stripe keeps its own billing records under its own obligations, and we cannot delete those. If a session was ever stopped for safety, a record of when and why is kept, without your name, your email, your account or anything you wrote.6What we keep after you delete your account
When you subscribe, we keep a record of the agreement you accepted in the app before you subscribed: the version of the terms, the time you accepted them, the Stripe checkout reference and when the copy of the agreement was emailed to you. It holds no email address, no name and nothing from your sessions. We keep it after you delete your account, as proof of the agreement. We also keep a short deletion record, an internal account number and the time you deleted your account, with no email, name or content. We keep it for 90 days so that any payment that arrives after you delete your account can be stopped automatically, and then we delete it. If you used the free first session, we keep the one-way code made from your email address, with an internal account number, a session number and the time, only so that the same email address does not get a second free session. It holds no email address, no name and nothing you wrote. The one-way code made from your internet address is kept until 30 days after the free session, then deleted. The record of any safety stop is also kept, without your name, your email, your account or anything you wrote, as "Your choices" says. Stripe keeps its own billing records.
7Cookies and advertising
If you accept cookies, Meta's pixel loads on three public pages: the home page, How it works and the FAQ. It tells Meta that the page was viewed or that you clicked to start, so we can measure our ads. It never loads when you sign in, on your dashboard, during a session or on a report, and it never carries anything you write. If you decline, it does not load. You can change your choice with "Cookie choices" at the foot of those public pages.
If you start a free session, your browser keeps a count of the free sessions started in it. The count says nothing about you. It is sent to us only so that one browser gets at most two free sessions.
If you come to Feelings Buddy from one of our ads, your browser keeps the ad's short code, such as "a1", whatever you choose about cookies. When you create an account, we also save that code on your account, once, so we can count which ads bring people who sign up. When you subscribe, we send that code to Stripe with your payment, so we can see which ad led to it. It is never sent to Meta and it says nothing about you.
8What we don't do
We do not sell your data. We do not use your sessions, your reports or anything you write for advertising. Our only advertising measurement is the Meta pixel described above, and the ad codes we keep ourselves.
9Contact
Thomson Business Group Inc. is responsible for your personal information in Feelings Buddy (formerly Grief Buddy). Questions, requests and complaints about privacy go to Thomson Business Group Inc., 1545 Maley Dr., Sudbury, ON P3A 4R7, hello@feelingsbuddy.app.