Privacy

1. What we process

• Your email address, if you give one, and the information needed for your account.
• The conversations you upload, notes you add and the reports made from them.
• Payment information handled by Stripe. We do not receive your card details.
• Technical data needed to secure, run and measure the service: page and purchase events, report IDs, counts, costs and timing. It never includes the text of a chat.

Your chat is encrypted in your browser before it is uploaded. Our own reader unlocks it in memory to count your messages and to pass it to the AI companies below. We run that reader, so the encryption does not stop us from reading a chat.

Before an AI sees your chat, the names your phone saved are replaced with the names you typed. Your report quotes some of your messages. Those quotes are kept until the report is deleted.

2. Why we use it

We use it to create and deliver reports, run your account, keep the service secure, answer requests and meet legal duties. Depending on the purpose, we rely on our contract with you, our legitimate interests or a legal duty.

If you give an email address, we use it to send your receipt and the link to your report. We do not send marketing emails.

We do not sell your data, and we do not use your conversations or reports to train AI models.

3. Who else touches it

We share only what each provider needs.

Cloudflare

Runs the website and stores the encrypted chat file and the cards. Also checks that an upload comes from a person. Storage is in Asia-Pacific. A page may be served from a machine near you.

Neon

The database. Counts, dates, initials, the names you typed and the report. Singapore.

Fly.io

Runs our reader, the one machine that can unlock your chat. It does that in memory, to count and to pass the chat to the AI providers below. A second machine draws the cards and never sees a chat. Singapore.

OpenAI

Reads the chat and checks the writing. For the free preview it reads a selection of the chat. For a paid report it reads every message. It also gets the names you set, the statistics and the draft to check. We ask it not to store the request. It still keeps some records to check for abuse. Outside Singapore. We have not chosen a country with OpenAI.

Anthropic

Writes the preview and the paid report. It gets our notes about the chat, the messages those notes quote, the statistics and the names you set. It does not get the whole chat. It keeps some records to check for abuse. United States.

Stripe

Takes the payment. We never see or hold your card details. Singapore and the United States.

Resend

Sends your receipt and the link to your report. United States.

Some of these are outside Singapore. We stay responsible for your data when it goes there (section 26 of the PDPA).

How your chat is read

The statistics use your whole chat. The free preview is written from a selection of it, a paid report from every message. We use paid business accounts with OpenAI and Anthropic, set so that your content is not used for training. Each keeps some records to check for abuse, under its own terms, and deleting your chat here does not delete those.

A report is private until you press Share. Anyone with that link can open it, and you can turn the link off at any time.

4. How long we keep it

Uploaded conversations

Deleted as soon as your report is finished, or within 24 hours if the report cannot be written. While a paid report is being written, the chat is kept for at most 6 hours. You can delete it sooner from your account.

Uploads abandoned before you pay or sign in

Deleted within 24 hours.

Reports

Kept until you delete them or delete your account. If you never signed in, there is no account to keep a report against, so it is deleted after 90 days.

Account

Your sign-in email is kept while the account stays active. Delete my account, on your account page, removes it at once, along with every chat on the account and your place on our mailing list. Invoices and payment evidence, below, are kept separately, with no email on them. Signing in again with the same address starts a new, empty account.

Invoices and payment evidence

Kept for as long as the law requires, generally 10 years. They hold an amount and a Stripe reference, never anything from a chat. Records of what each AI request cost (request IDs, token counts and costs, no chat text) are normally kept for the same period. Daily spending totals are deleted after 90 days.

Technical and security logs

Kept only as needed, for no more than 90 days unless the law or an ongoing incident requires longer.

When we delete a chat, we remove the key that unlocks it first, then the file. A backup may still hold an earlier copy until that backup expires. Before any backup is restored, we re-apply deletions so deleted chats and reports do not come back.

5. If you are in somebody else’s chat

Somebody may upload a chat you are in without asking you. A report is private to whoever made it. We do not publish it. It reaches other people only if the person who made it sends it on.

The person who uploaded the chat is responsible for it, and only they can delete it. If you want a report gone, ask them: their Delete button removes the report, the cards, the link and the chat file at once.

We will not send you somebody else’s report on request. Controlling an email address does not prove who you are, and handing a private report to whoever asks would be the same failure the other way round.

6. Your choices

• Delete everything. Use Delete beside a chat on your account page. It removes the report, the cards, the link and the chat file at once. Delete my account, on the same page, does that for every chat and removes your email too. You do not have to ask us.
• A copy of what we hold. Write to us and we will check the chat is yours first. We do not keep your chat after the report is finished, and you already have the original.
• A correction. Changing a name, the language or who is who makes a new version of the report with a new preview. We never quietly rewrite a report you have bought.
• Withdraw consent. Unsubscribe stops the email. Delete stops everything.
• Complain. To us first, at auntie@auntiekaren.ai. If we do not resolve it, you can go to the Personal Data Protection Commission of Singapore.

This is an 18+ service. The reports are written for adults and are not moderated for a younger reader.

7. Cookies

We set a small number of cookies, and all of them are needed for the site to work. None is for advertising or analytics, so there is nothing to switch off.

ak_device

Holds your chats. Without an account this is the only thing that says a chat is yours, which is also why clearing it loses them. 30 days from your first visit.

ak_session

Keeps you signed in, so your chats and reports follow you to other devices. Set only when you sign in with your email, and removed when you sign out. 90 days.

ak_ref

Remembers that a friend's link brought you here, so you pay the friend's price on your first report. It holds a code that identifies the link, not you or your friend. 30 days from the day you opened the link.

ak_admin

Keeps our own team signed in to the admin pages. Nobody else is ever given it. 8 hours.

Turnstile

Cloudflare's check that an upload came from a person. It is not analytics and does not follow you anywhere. Set by Cloudflare, short.

Clearing cookies signs you out and, if you have not signed in, means this browser can no longer open the chats you uploaded from it.