# HerStandard Privacy Policy Last Updated: October 26, 2026 HerStandard ("HerStandard," "we," "our," or "us") operates the HerStandard mobile application and related services (the "Service"). This Privacy Policy explains how we collect, use, and disclose information when you use the Service. This policy describes our practices. Where permission is required, we request it separately in the app. Feature availability may differ by app version. ## 1. Contact HerStandard Email: support.herstandardapp@gmail.com ## 2. Eligibility The Service is intended for users age 18+. ## 3. Information We Collect ### Information You Provide - Email address (account creation) - Onboarding responses, including your emotional state, primary goal, decision intent, and age range, provided during initial app setup to personalize your experience - Situations, conversation messages, follow-up questions, and optional person names or nicknames - Quick Logs, check-ins, and other relationship information you choose to save - Optional screenshots/images submitted for message analysis - Corrections to saved information and links between entries describing the same incident - AI consent records, including the notice version accepted and when that acceptance was recorded - AI-generated replies, analyses, General Insights, Person Insights, person-memory notes with supporting references, and condensed summaries used to maintain context in long conversations - Support requests and feedback Your saved content is associated with your account. Using a nickname does not make it anonymous. Messages and images you submit may include another person's words, name, contact details, or sensitive information. Share only information you are entitled to share, and remove unnecessary identifying details, especially from screenshots. ### Automatically Collected Information - Device type and OS - App version - Crash/diagnostic logs - Usage counts, request timestamps, AI model and token-use metadata, and estimated processing costs used to operate the Service and manage allowances; the AI cost ledger does not contain your conversation text - Referral and deep-link information, such as a creator code used to attribute a referral ### Subscription and Purchase Information Payments are processed by Apple/Google. We receive limited transaction metadata (for example, subscription status, purchase confirmations, product identifiers, and free trial eligibility). We do not receive card numbers. We use RevenueCat to manage subscriptions, including free trial eligibility, renewal status, and purchase history. RevenueCat does not receive your full payment information but helps us display your subscription status in-app. ## 4. How We Use Information We use information to: - Provide and operate the Service - Generate AI-based insights - Run moderation and safety checks - Maintain security and prevent abuse - Diagnose issues and improve performance - Process subscription and purchase state, including free trial eligibility and renewal status - Respond to support requests - Comply with legal obligations We do not sell personal information and do not use user data for targeted advertising. You can review and manage subscription renewal and cancellation through your Apple or Google account. ## 5. AI Processing HerStandard uses OpenAI to generate conversation replies, situation analyses, General Insights and Person Insights, and to perform moderation. Requests can include your submitted text, images when supported, relevant saved reports and conversations, corrections, memory notes, and selected profile answers used for personalization. Generating insights can use conversations that have no final analysis. The app requests permission before you initiate AI processing. Updated app versions may ask again when the scope of processing changes. You can decline and retain access to viewing or deleting your saved information. Declining a new request does not switch off previously enabled background memory; use the memory controls described below to stop those updates. ### Person memory across situations Automatic person-memory processing requires both an enabled memory preference for that person and a recorded acceptance of the AI notice covering background memory. Enabling the preference alone does not authorize processing. Once these requirements are met, saved text reports, conversation messages and corrections can be sent to OpenAI in the background to create and refresh notes. Updates may be delayed or grouped together. Notes and supporting references are stored with your account and used in later conversations and analyses. In the conversation experience, the memory preference is on by default for newly added people; existing memory choices are preserved. If your acceptance has not yet been recorded on our server, automatic memory updates remain paused. Updated app versions can record an acceptance of the same notice previously saved on your device without asking you to accept it again. You can change the choice when adding a person or in their Activity section. You can review notes, correct supporting information, exclude supporting entries from memory, or turn memory off. Turning it off deletes that person's memory notes and stops further automatic person-memory updates. It does not delete saved conversations, analyses, corrections, or requested insights. Screenshots are not resent to create these background memory notes. ### Context within a long conversation To keep a long conversation manageable, we may send earlier messages to OpenAI to create a condensed summary and save that summary with the conversation. Later requests can use the summary and recent messages, while the full transcript remains saved. This works within the conversation even when person memory is off. Summaries are AI-generated and can be imperfect. Deleting the conversation removes its stored transcript and context summary from our active database. ### Model training and provider retention OpenAI states that API inputs and outputs are not used to train its models by default unless the API customer opts in to data sharing. Provider processing and retention are separate from storage in HerStandard: standard abuse-monitoring logs may be retained for up to 30 days, and exceptions or other retention rules can apply. We do not promise zero provider retention or immediate removal from provider logs when you delete content in the app. See [OpenAI's data controls](https://developers.openai.com/api/docs/guides/your-data). AI outputs are probabilistic and may be inaccurate, incomplete, or inapplicable. The Service is informational only and not legal, medical, or mental-health advice. ## 6. Screenshot/Image Handling If you upload a screenshot/image for analysis: - It is uploaded to secure cloud storage for validation and AI processing. - We attempt to delete the uploaded file when analysis processing finishes, including handled failures. - An interrupted upload, processing failure, or failed deletion can leave a file in storage. We do not guarantee immediate deletion or a fixed automatic cleanup period. - Account deletion includes screenshot files stored under your account. Deleting an image does not automatically remove text or insights already derived from it. Provider retention is described above. ## 7. Sharing of Information We may share data with service providers necessary to operate the Service, such as: - Firebase (auth, database, storage) - OpenAI (conversation replies, analyses, summaries, insights and moderation) - Branch (deep links and referral attribution) - Device speech-recognition services when you choose dictation - Infrastructure and diagnostic services needed to operate the app - Subscription management providers (for example, RevenueCat) We may also disclose information when required by law or to protect rights/safety. ### Dictation and local storage Dictation requires microphone and speech-recognition permissions. Speech is handled by your device's speech-recognition service and may be processed by the platform provider; we do not guarantee on-device-only recognition. The app does not intentionally save dictation audio recordings. Transcribed text becomes part of the draft or message you choose to submit. The app stores some drafts, pending requests, preferences and sign-in state on your device. Reminder preferences are local, and reminders do not include your relationship messages or person names. Information you explicitly share using your device's share tools is also subject to the destination's practices. ## 8. International Transfers Data may be processed outside your country. Where required, appropriate safeguards are used. ## 9. Data Retention We retain data only as long as necessary to provide the Service, maintain security, resolve disputes, and comply with legal obligations. In general: - Saved conversations, archived transcript pages, analyses, logs and generated insights remain associated with your account until deleted or removed through the app's controls. - Correcting, excluding, deleting or retagging a supporting entry can invalidate affected person-memory notes and insights while they are removed or rebuilt. Other independent supporting reports may still support a note. Excluding an entry from memory is not the same as deleting the original entry. - Turning person memory off deletes its notes; saved conversations, their within-conversation summaries, analyses and corrections remain until separately deleted. - Updated app versions offer **Delete person and all situations** in Insights and **Delete all activity data** in Profile. Person deletion removes that person and their associated conversations, analyses, Quick Logs, memories and insights, and clears the overall relationship insight. All-activity deletion also removes all person records, daily check-ins and account screenshot uploads. Both preserve your sign-in account, subscription and preferences; previously used free allowances do not reset. - Activity deletion retains account-level usage and cost records and content-free deletion identifiers needed to prevent old requests from recreating deleted conversations. These records do not contain the deleted conversation text and are removed by account deletion. Pending cleanup temporarily pauses activity writes and can be retried from Profile. - Account deletion removes account-owned conversations and their archived pages, analyses, relationship logs, person records, memory notes, insight caches, queued memory work and AI usage records from our active database, and requests deletion of account screenshot files and the sign-in account. - Some cleanup is asynchronous and can take time or fail temporarily. Contact us if deleted information remains visible. - Service providers may retain security logs, backups or purchase records under their own retention rules and legal obligations. Deleting your HerStandard account does not cancel an Apple or Google subscription; manage that separately in your store account. - Screenshot handling and OpenAI retention are described in Sections 5 and 6. We do not promise that deletion removes every copy from all providers immediately. ## 10. Your Rights Depending on jurisdiction, you may have rights to access, correct, delete, port, restrict, or object to processing. You can delete your account from Profile using Delete Account. Use Activity to manage saved situations and person memory. For other access, correction, export or deletion requests, contact: support.herstandardapp@gmail.com We may verify your identity before fulfilling requests. ## 11. Security We use reasonable technical and organizational safeguards. No system is absolutely secure. ## 12. Changes to this Policy We may update this Privacy Policy and revise the date above. We will provide notice or request additional permission where required for material changes.