Privacy Policy

Last updated: October 3, 2026

This policy explains how My Friend Robin handles information when you use its app and website. Contact us about privacy at support@myfriendrobin.com.

Information we handle

We process the messages you send and Robin’s replies. Messages can contain personal or sensitive information you choose to include. If you sign in on our website, we use your email address to send one-time sign-in codes and to identify your account. If you sign in with Apple, our authentication provider handles your Apple account identifier and any name or email address Apple supplies, including a private relay address. Your account can store preferences, conversations, usage totals, and subscription status. We do not receive your Apple password or full payment card number.

We use a random installation identifier, its salted hash, account identifiers when signed in, request identifiers, timestamps, usage counts, and technical error information to operate the service and enforce allowances. These are pseudonymous identifiers, not a promise of anonymity. Hosting and authentication providers may also process IP addresses, browser or device information, and security logs. If you contact support, we receive what you send us.

Purposes and sharing

We use this information to generate replies, save and synchronize conversations, remember preferences, authenticate accounts, validate subscription access, enforce usage limits, prevent abuse, and respond to support or privacy requests. We never sell personal information for money, and we never share your conversations with advertisers or use them to build advertising profiles. Our public web pages do use advertising tools, described under “Advertising on our website.” We may disclose information when legally required or necessary to address a serious safety or security issue.

After you allow AI sharing, your messages and recent conversation history are sent to OpenAI with a pseudonymous safety identifier to generate replies. Our API requests disable response storage. This does not mean zero retention: OpenAI’s standard API abuse-monitoring logs may include content and are normally retained for up to 30 days, with exceptions described in its policies. OpenAI states that API data is not used to train its models by default unless the customer opts in. See OpenAI’s API data controls.

Supabase provides account authentication and database hosting; Vercel hosts the website and API. Where store purchases are available, Apple or Google processes payment, and RevenueCat processes account and transaction information to validate subscriptions. On our website, Stripe processes payments; we receive your email address, billing country, a Stripe customer identifier, and subscription status, never your full card number. When you buy on the website, we record which of our web pages and advertising campaign (for example, a “utm” link tag) led to the purchase with the payment record, so we can learn which pages are helpful. We use Vercel Web Analytics to count page visits and sign-ups in aggregate; it does not use cookies or track you across other websites. Advertising tools on our public pages are described below. To prevent payment fraud, the sign-up page uses Cloudflare Turnstile, which checks browser and connection signals to tell people from automated programs, and we count checkout attempts using a salted, one-way hash of your IP address that is deleted after about a day. These providers receive information needed for their services and apply their own retention and security practices. Data may be processed outside your province or country, including in the United States, and may be subject to local laws even when a database is hosted in Canada.

Advertising on our website

Our public marketing and sign-up pages (not the chat) use the Meta Pixel and RedTrack, an ad-measurement service. They set cookies and record which pages you visit, whether you watch our video, take our quiz, start checkout, or buy, so we can measure and improve our ads on Facebook and Instagram. When you buy, we also send Meta and RedTrack the purchase and its value, a one-way hashed (scrambled) version of your email address, your IP address and browser type, and the ad click identifiers stored in those cookies. They do not receive your conversations with Robin. Under some U.S. state laws (including California’s), this counts as “sharing” personal information for targeted advertising.

Your privacy choices (Do Not Sell or Share My Personal Information): you can opt out below at any time. We also honor the Global Privacy Control signal sent by some browsers. Opting out applies to the browser you use; to opt out everywhere, email us.

Voice and device storage

Optional dictation uses Apple speech recognition on iOS or your device or browser’s speech provider. That provider may process audio remotely. Robin receives the transcript; our chat API does not accept audio uploads. Dictated text is sent to OpenAI when you press Send. Read-aloud uses your device or browser’s speech service, which may process the reply text remotely depending on the voice selected. You can type instead, disable read-aloud, and revoke microphone permissions in your device settings.

The app stores chat history, preferences, AI-sharing permission, and authentication session information on your device using app or browser storage. Guest chat history is kept locally, although sent messages still pass through our API and OpenAI. Local history is limited and may be lost when app or browser data is cleared; Robin is not an archival or backup service. Someone with access to your unlocked device or browser profile may see saved chats.

Retention and deletion

Signed-in conversations are stored in the active account database until deleted. Delete a conversation in Saved chats, or request account deletion in Settings → Account and privacy. Account deletion requires identity confirmation and, for Apple accounts, successful Apple token revocation before the account and associated conversations, preferences, subscription records, and linked billing events are removed from the active database. If the deletion flow is unavailable, contact support for assistance. Deleting a conversation or account is separate from cancelling a subscription.

Signing out clears the current account’s local chat and preference cache on that device. We cannot remotely erase all offline copies, screenshots, exports, or device backups. Clear app or browser data on other devices when necessary. Provider backups and security records may persist under their retention practices after active database deletion. Installation hashes and complimentary-use counts can remain to prevent repeated free trials; guest request logs and independently retained store or provider records can also outlast account deletion. Contact us to request deletion of remaining personal information or details of applicable retention; legal and fraud-prevention exceptions may apply.

Consent, rights, and security

Withdrawing AI sharing permission stops future chat submissions from this app; it does not undo processing already begun or erase existing records. Deleting a Robin account does not cancel a store subscription. You can decline AI sharing and browse Settings and Saved chats. Permission is stored on each device; withdraw it on every device you use. The app cannot provide AI replies without sending chat content to OpenAI.

Depending on applicable law, you may request access, correction, a copy, or deletion of your personal information, withdraw consent, or raise a complaint with a privacy regulator. Contact us using the address above. We may need proportionate identity verification, but never send us your password or full financial account number.

We use encrypted network connections, database access controls, and server-side credential storage. No system guarantees absolute security. Chat is processed by service providers and is not a confidential professional relationship. We cannot promise absolute secrecy, anonymity, zero retention, or deletion of every provider record or offline device copy. Avoid sharing passwords, banking numbers, government identifiers, or unnecessary sensitive information.

Adults, safety, and changes

Robin is an AI conversation companion for adults aged 18 and over. Replies can be inaccurate or unsuitable. Robin is not a person, medical provider, therapist, lawyer, financial adviser, or emergency service, and does not provide personalized treatment instructions or medication recommendations. The service is not intended for anyone under 18. Contact us if you believe a child has submitted personal information. Chat is not continuously monitored by a person and is not an emergency reporting channel. Contact local emergency services for immediate danger.

We update the date above when this policy changes. Material changes will be communicated as required, and we will seek renewed permission when required for new uses of your information.