Privacy Policy

Conversate ("Conversate", "we", "us") is an app that generates conversation starters using AI, available as a web app and, in future, as iOS and Android apps. This policy explains what information we handle when you use Conversate, why, and the choices you have. Questions any time: support@conversate.example.

Content you type. Your vibe choice, custom topics, and situation descriptions are sent to our servers over an encrypted connection, used to generate suggestions, and returned to you. We do not save this content in our database. The only trace kept server-side is a one-way fingerprint (hash) of your most recent situation text, used to tell a "try again" on the same situation apart from a new one for daily limits. A hash cannot be turned back into your words.

An anonymous device identifier. The first time you visit, we set a cookie containing a randomly generated ID. It is not derived from you or your hardware and tells us nothing about who you are. We use it to apply daily free-tier limits and to prevent abuse.

Usage counters. We record how many generations a device has used each day (for example, "7 starters today"). Counts only — never the content.

Data stored on your device. Your saved favorites, preferences, and recent-generation history are stored in your browser or app's local storage. They are not uploaded to us.

Purchase information (when subscriptions are available). Payments are handled by the Apple App Store, Google Play, or Stripe (managed through RevenueCat). We never see or store card details. We receive your subscription status, plan, a transaction reference, and — for web purchases — the email address used at checkout, so we can send receipts and restore your purchase on a new device.

What we don't collect: your name, contacts, precise location, browsing history, or advertising identifiers. The web app contains no third-party analytics or advertising trackers.

Suggestions are generated by third-party AI providers — primarily Anthropic (Claude), with OpenAI as a backup. The text you provide is sent to them solely to produce your suggestions. Under the API terms we use, these providers do not use your content to train their models.

A practical tip: there's no need to include real names or identifying details about other people in a situation description — "my coworker" works just as well as a name.

Conversate sets two cookies, both first-party and functional:

• conversate-device — the anonymous device ID described above (kept for about 13 months).
• conversate-auth — keeps you signed in to the private beta while it lasts.

There are no advertising or analytics cookies.

• To generate your conversation starters.
• To apply free-tier daily limits and the Plus fair-use limit.
• To prevent abuse of the service.
• To process purchases and restore them on your devices.
• To understand overall usage through aggregate counts (never content).

Only the service providers that make Conversate work: Anthropic and OpenAI (AI generation), Supabase (database), Vercel (hosting), and — for purchases — RevenueCat, Stripe, Apple, or Google. Each receives only what it needs for its role. We may also disclose information if the law genuinely requires it.

We never sell personal information, and we don't share it for advertising.

• The content you type: not stored, so nothing to keep.
• Usage counters and device records: only as long as they're useful for limits and abuse prevention; old counters are periodically deleted.
• Purchase records: while your subscription is active and as required for accounting and legal obligations.
• On-device data: until you clear it — it's yours.

You can clear your favorites, preferences, and history from the app's Settings or by clearing your browser data. Deleting the device cookie resets your anonymous ID entirely.

You can also email us to ask what data is associated with your device or purchase email, or to have it deleted. Depending on where you live, you may have additional rights under laws such as the GDPR (EU/UK), the Australian Privacy Act, or the CCPA (California). We honor these regardless of where you are — and for the record, we do not "sell" or "share" personal information as those terms are defined in the CCPA.

All traffic is encrypted in transit. Our database is configured so that only our own servers can read it — it is not directly accessible from browsers or apps. Secret keys never ship in client-side code.

Some situations people bring to Conversate are personal — reconnecting with someone, supporting a friend, a hard conversation. That content gets the same treatment as everything else: processed to generate suggestions, never stored. Conversate is not a mental-health or crisis service; if you're struggling, please reach out to a professional or a local crisis line.

Conversate is not directed at children under 13, and we don't knowingly collect information from them. If you believe a child has used the service, contact us and we'll delete any associated data.

Our servers and providers operate primarily in the United States. By using Conversate, you understand your information is processed there.

When we change this policy, we'll update this page and its effective date. If a change is significant — for example, when mobile apps introduce optional rewarded ads — we'll flag it in the app before it takes effect.

support@conversate.example

Our dedicated support inbox goes live with the public launch.