Privacy Policy

Data controller

Safety in Relationships Oy Ltd., Finland. Privacy contact: kaisa@evaluoi.ai.

Data we process

Account data: email, salted password hash (never plaintext), language preference, subscription tier and payment status.

Content data: the relationship summary you write during onboarding, messages with the Ex and Friend conversation partners, the partners and roles you choose, feedback and any crisis flags you raise.

Technical data: session identifiers, error logs (without conversation content) and request timestamps for security.

Lawful bases (GDPR Art. 6 and 9)

Contract (Art. 6(1)(b)): account creation, sign-in, delivering the subscription and your conversations.

Consent (Art. 6(1)(a) and Art. 9(2)(a)): processing the special-category data you share about emotions, relationships and wellbeing. Consent can be withdrawn at any time by deleting your account.

Legitimate interests (Art. 6(1)(f)): service security, abuse prevention and basic usage counting. Balancing tests documented internally.

Legal obligation (Art. 6(1)(c)): Finnish accounting law for payment records.

Retention

Account and conversation data: while the account is active. On account deletion all content data is hard-deleted immediately.

Invoicing and payment data: 6 years from the end of the financial year (Finnish accounting law).

Security logs: maximum 90 days.

Processors and recipients

Supabase (Frankfurt, EU): database, authentication and storage. Per-user isolation via Postgres Row Level Security.

Lovable AI Gateway / Google Gemini: conversation messages are sent to the model to generate a response. The gateway does not use messages for model training.

Vercel (EU/US): static page and edge function delivery.

Stripe (EU/US): payment processing. PCI-DSS compliant; we do not store card data.

Resend (EU/US): transactional email (e.g. password reset).

Transfers outside the EU rely on the EU Standard Contractual Clauses (SCCs).

AI processing

To generate a conversation reply, your message and the necessary context are sent to a large language model API.

Your data is not used to train models or to target advertising.

Model output is not used to make automated decisions with legal effects on you and is not a clinical diagnosis.

Your rights

Right of access, rectification, erasure, restriction, objection and portability (GDPR Art. 15–22).

You can export all your data as JSON from the profile page and delete your account in one click.

Right to lodge a complaint with the supervisory authority (in Finland, the Office of the Data Protection Ombudsman).

Crisis situations

The app detects keywords and automatically surfaces crisis support links. Get Closure is not an emergency service. In immediate danger call your local emergency number (112 in the EU). For someone to talk to in Finland, MIELI crisis helpline +358 9 2525 0111.