Effective 1 August 2026.

Secure Sister is an iOS app that offers peer-style coaching on anxious–avoidant relationship patterns. This policy explains exactly what the app collects, where it goes, how long it is kept, and how to get rid of it.

Secure Sister is operated by Secure Sister (contact: admin@securesister.com), the data controller for the purposes of this policy.

TLDR:

- Your conversations are stored on your phone, not on our servers.

- The text you type is sent to Google's Gemini API so it can generate a reply. On the paid tier we use, Google states that this content is not used to improve Google's products.

- We never send your email address, name, or any identifier to Google alongside your messages.

- There is no account and no login. We cannot look up "your data" because we do not hold a profile of you.

- The only thing we store that could identify you is an email address, and only if you choose to join the waitlist.

What we do collect, and why

Your chat messages

Stored on your device. Your conversation history is saved in your phone's local app storage so the app remembers your thread between launches. It is not uploaded to us and we cannot read it.

Sent to Google to generate each reply. When you send a message, our server forwards the message and up to the last 20 messages of that conversation to Google's Gemini API, which returns the reply. This is the core function of the app and it cannot work without it.

What we send Google: your message text and recent conversation text. What we do not send: your email address, your device identifier, your IP address, or any name.

We do not store your messages on our servers. They pass through and are not written to any database or log.

An anonymous install identifier

The app generates a random identifier the first time you open it. It is not derived from your device, your phone number, or anything about you, and it is not linked to any personal detail. We use it to hold your seat (see below) and to stop a single install flooding the service. It is stored on your device and, on our server, as a record that this identifier holds a seat, with the date it was claimed.

Your IP address, briefly

Our server records your IP address in a short-lived counter used to enforce rate limits and prevent abuse. It is automatically deleted after about two hours and is never linked to your messages, your email, or your install identifier.

Your email address — only if you ask us to store it

If you join the waitlist, we store the email address you enter, a record that you ticked the consent box, and the date and time you submitted it. Nothing else. We use it for one purpose: to contact you about Secure Sister — a seat opening up, or the newsletter once it launches. We do not sell it, rent it, or share it with advertisers.

Aggregate safety counts

When the app shows crisis resources, we increment an anonymous monthly counter. It records that a referral happened — a number, nothing else. No message text, no identifier, nothing traceable to a person. We keep these counts because California SB 243 requires operators of companion chatbots to report them.

What we do not collect

No name. No phone number. No contacts, photos, camera, microphone, or location — the app does not request these permissions and cannot access them. No advertising identifiers. No analytics or tracking SDKs. No third-party trackers of any kind.

Who we share it with

Two companies process data on our behalf, and no one else:

Google (Gemini API) | Your message text and recent conversation text | Generates the AI replies |

Cloudflare (Workers, KV) | Waitlist email, seat record, short-lived rate-limit counters Runs our server

We do not sell your personal information. We do not share it for advertising or cross-context behavioural advertising. Google's handling of the text you send is governed by their own terms. On the paid tier we use, Google states that content submitted through the API is not used to improve their products. See Google's [Gemini API Additional Terms of Service] (https://ai.google.dev/gemini-api/terms).

How long we keep things

Your chat history | On your device until you clear it or delete the app

Message text on our servers | Not stored at all — it passes through

IP address (rate limiting) | ~2 hours, then automatically deleted

Install identifier + seat record | Until you ask us to delete it

Waitlist email | Until you ask us to delete it, or we shut the service down

Aggregate safety counts | Kept as required for SB 243 reporting; contains no personal data

Deleting your data and withdrawing consent

Everything on your device: open Settings inside the app and choose Clear my data. This erases your conversation history, your consent record, and your install identifier. It also withdraws your consent — the app returns to the opening screen and will not send anything to Google until you agree again.

Your waitlist email: email admin@securesister.com and ask us to delete it. We will remove it and confirm. You do not need an account, a password, or to explain why.

Your seat record: email the same address. Because it is keyed to a random identifier and not to you, tell us and we will remove it. Because there is no account system, there is no login-protected profile to export or delete beyond the above.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or obtain a copy of your personal information, to withdraw consent, and not to be discriminated against for exercising those rights. If you are in the EU or UK, our legal basis for processing is your consent, which you give on the opening screen and can withdraw at any time as described above. To exercise any right, email admin@securesister.com. We respond to every request.

Age

Secure Sister is for adults. You must confirm you are 18 or older before you can use the AI chat. We do not knowingly collect information from children. If you believe a child has used the app and given us an email address, email us and we will delete it.

This is not therapy

Secure Sister is an AI, not a person and not a therapist. It does not diagnose, treat, or provide medical advice, and it can be wrong. It is for education and reflection. If you are in crisis, please contact a real person rather than this app:

- 988 — Suicide & Crisis Lifeline (US), call or text

- Text HOME to 741741 — Crisis Text Line (US)

- findahelpline.com — services by country

If you are in immediate danger, call your local emergency number!

Changes

If we change this policy we will update the date at the top and, for anything material, ask for your consent again inside the app.

Contact

admin@securesister.com