Privacy Policy

1. Who we are

Tricky Chats ("we", "us", "our") is a web app at trickychats.life that helps you rehearse difficult everyday conversations with AI. This Privacy Policy explains what information we process when you use the app and your choices.

2. Information we collect

On our server

• Practice sessions: while you chat, we store your session id, the scenario description you enter, and the messages you send and receive (including AI replies and coaching text) in a local database on the server (sessions.db). This lets the conversation continue during your visit and powers features such as suggested lines and feedback.
• Checkout email: if you buy Premium through our test checkout, we use the email address you provide only to send your license key. We do not store card details — payments are handled by our payment provider when live checkout is enabled.
• Access login (optional): if the site is password-protected, we store a signed session cookie after you sign in. Usernames are not written to the practice database.
• Server logs: our hosting may record IP address, user agent, and error/diagnostic lines (for example when email fails to send). We do not use these for advertising.

In your browser (local storage & cookies)

• Premium license key and device instance id (if you activate Premium)
• Session id, voice preferences, cookie-banner acceptance, and similar settings
• Optional "Premium on this device" flag when dev mode is enabled on a server
• Strictly necessary cookies for sign-in when access protection is enabled

We do not sell your personal data and we do not use third-party advertising trackers on the app.

3. Why we use it & legal basis (UK GDPR)

• Provide the service (performance of a contract / legitimate interests): run your practice chat, generate AI replies, suggestions, coaching, portraits, and read-aloud audio.
• Premium & licensing (contract): issue, validate, and email license keys; prevent abuse of paid features.
• Essential cookies & storage (legitimate interests / consent where required): keep you signed in, remember preferences, and record cookie banner acceptance.
• Security & reliability (legitimate interests): short server logs and session retention limits.

4. AI & third-party processors

To generate replies, coaching, speech, and images we send relevant parts of your scenario and conversation to AI providers configured on our server (for example Google Gemini and/or OpenAI). Those providers process data under their own terms and privacy policies.

Premium checkout may be processed by Lemon Squeezy (or another payment provider we configure). License validation may call Lemon Squeezy's servers.

Transactional email (license keys) is sent through the SMTP service configured in our environment (for example Gmail or your domain host).

5. How long we keep data

• Practice sessions: deleted automatically after about 90 days of inactivity (configurable on our server). You can also clear browser storage at any time.
• Generated portraits & cached audio: temporary files on the server are removed on a rolling schedule (typically 30–90 days without use).
• License keys: validity is embedded in the key itself; we do not maintain a separate customer database of purchasers unless our payment provider does so under their policy.

6. Your rights

If you are in the UK or EEA you may have rights to access, rectify, erase, restrict, or object to processing, and to data portability, subject to exceptions. Because most practice data is tied to an anonymous session id in your browser, the easiest way to erase it is to clear site data for trickychats.life. If you bought a reply top-up, the email with your license key and invoice includes a link to request deletion of server-side data tied to your purchase email. Other questions: contact us using the details below.

You may complain to the Information Commissioner's Office (ICO) if you believe we have handled your data unlawfully.

7. Children

Tricky Chats is intended for users aged 13 and over. It is not designed for children under 13 and we do not knowingly collect their data. If you believe a child under 13 has used the app, please contact us so we can delete associated server sessions where possible.

8. International transfers

Our server may be in the UK or EU. AI and payment providers may process data in other countries under their standard contractual safeguards.

9. Changes

We may update this policy from time to time. The "Last updated" date at the top will change when we do. Continued use of the app after an update means you accept the revised policy.

10. Contact

Questions about privacy or your data: TrickyChatsAdmin@gmail.com. See also our Terms & Conditions.