Privacy Policy

Alone Mind (alonemind.app) · Last updated: 6 October 2026

1. Controller

The controller of your personal data is Ela Kosic, Balenska 1, Fuzine, Croatia, operating Alone Mind ("Alone Mind", "we", "us"). Contact: support@alonemind.app.

2. Nature of the service

Alone Mind is an AI-based coaching companion. It is not a therapeutic, medical or emergency service. Conversations are not monitored in real time and, except where required by law, neither we nor any third party will contact you or any authority on the basis of their content. If you are in crisis or immediate danger, contact your local emergency number (112 in the EU) or a crisis line directly.

3. Data we collect

At registration we collect your email address, password (managed by Supabase Auth and not accessible to us in plain text), a username with a randomly generated numeric suffix, your date of birth, and your country. We do not request your real name. Providing this data is necessary to create an account; without it we cannot provide the service.

During use we store the content of your conversations and titles generated for them by AI. Each message is also passed through an automated safety classification, the result of which is not stored. To set up your trial or subscription, we share your email address and country with Paddle. We store your subscription status and Paddle reference identifiers. We never receive your payment card details.

We also collect technical data: server logs (such as IP address and timestamps) and, through Vercel Analytics, cookieless usage data including pages visited, referrer, browser and device type, and approximate location derived from your IP address. If you write to our support address, we process your email address and the content of your message.

4. Purposes and legal bases

We process account data and conversation content to provide the service, on the basis of contract (Art. 6(1)(b) GDPR). Your country is used for tax purposes via Paddle.

We process your date of birth to verify that you are at least 18 and to compile aggregate statistics about our user base, and we process server logs and analytics data to secure the service and understand how it is used. These processing activities are based on our legitimate interests (Art. 6(1)(f)). You may object to them at any time.

Conversation content may reveal information about your emotional wellbeing, which is data concerning health under Art. 9 GDPR. We therefore process it on the basis of your explicit consent (Art. 9(2)(a)), which we request at registration separately from our Terms of Service and record with a timestamp. You may withdraw consent at any time by deleting your account. Because the service cannot be provided without it, withdrawal ends your use of the service.

5. Automated safety classification

Each message is automatically classified by an AI model to identify indications of distress. The classification is used only to determine the response given within the conversation and is not stored. It has no effect on your account. Where serious risk language is detected, the service responds within the conversation and directs you to emergency services and crisis lines.

6. Recipients and processors

We use the following processors: Supabase (authentication and database, hosted in the EU, in Ireland), Vercel (hosting and analytics), Anthropic (generation of AI responses, conversation titles and safety classification), Resend (transactional email), and Zoho Mail (support correspondence, hosted in the EU). Paddle acts as Merchant of Record and as an independent controller of your payment and tax data, under its own privacy policy: https://www.paddle.com/legal/privacy.

Anthropic processes your messages solely to provide the service and does not use them to train its models. Anthropic deletes inputs and outputs from its systems within 30 days, except where longer retention is required to enforce its usage policies or to comply with the law. Transfers to Anthropic, Vercel and Resend outside the European Economic Area rely on Standard Contractual Clauses or the EU-US Data Privacy Framework. We do not sell your personal data or use it for advertising.

7. Retention

While your subscription is active, we keep your conversations until you delete them. If your trial lapses without a subscription, or your subscription is cancelled, your conversations are deleted 15 days later. Accounts without an active subscription are deleted after six months without activity.

When you request deletion of your account, it remains pending for seven days, during which you may cancel the request by contacting support@alonemind.app. After that, your account and all associated data are permanently deleted. Paddle retains billing records for as long as tax law requires.

8. Your rights

You have the right to access, rectify, erase, restrict and port your data, to object to processing, and to withdraw consent at any time. Data export, account deletion and correction of your email address are available directly in the Account section of the app. For other requests, contact support@alonemind.app; we will respond within one month. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP, azop.hr) or the supervisory authority of your country of residence.

9. Cookies and local storage

Alone Mind does not set cookies. We use browser local storage to maintain your session and remember your theme preference, which is strictly necessary and does not require consent. Paddle may set its own cookies when you open its checkout, for fraud prevention and payment processing, as described in its policy.

10. Age restriction

The service is intended for persons aged 18 and over. Age is verified at registration and under-18 registrations are blocked. Accounts found to belong to minors will be deleted.

11. Security

We apply appropriate technical and organisational measures, including encryption in transit and at rest and access controls. In the event of a personal data breach, we will notify the competent authority and affected users where required by law.

12. Changes

We may update this policy from time to time. The current version is always published here, and we will notify you of material changes by email or in the app.