Privacy policy

We collect the data needed to operate Psyra safely and reliably.

• Account details such as email and display name.
• Conversation, journal, mood, and session data you choose to create.
• Billing and plan information handled with payment providers.
• Technical logs for security, abuse prevention, and reliability.
• Cookie preferences and basic product analytics when allowed.

We use data to provide and improve Psyra.

• To authenticate you and maintain your account.
• To provide remembered conversations and app features.
• To support safety, consent, and crisis-resource workflows.
• To process payments and enforce plan limits.
• To debug, secure, and improve the service.

The contact form sends your name, email, topic and message to our team. Tickets sent from your account store your request, replies and attachments so we can follow up.

You may optionally allow support to read the text already present in one conversation to investigate a ticket. Access expires after seven days or when the ticket closes. You can revoke it in the ticket. Sharing excludes later messages, images, journals, memory and internal prompts.

We record the permission, its duration, any revocation, and the times and reasons for support access. Recent accesses are visible in the ticket. These records are included in your JSON export and deleted with the tickets when your account is deleted. Revoking access cannot undo a previous viewing.

We rely on trusted providers to run Psyra.

• Servers and database hosted in Germany (EU).
• Payment and email delivery providers.
• AI providers: a large language model provider for replies (through a routing service), an embeddings provider for memory search, and speech providers for voice. The current list is available on request.

Depending on your location, you may have rights over your personal data.

• Access - Ask for a copy of your data.
• Correction - Ask us to correct inaccurate data.
• Deletion - Delete your account and associated data.
• Portability - Export your data in a portable format.
• Restriction - Ask us to limit certain processing.
• Objection - Object to certain processing where applicable.

You may also complain to the competent data protection authority; in France, this is the CNIL. Contact the CNIL

We keep everything while you use your account. You can delete any session, journal entry or memory, or your whole account, at any time.

After 2 years without using Psyra, your account and its data are deleted, unless you have an ongoing paid subscription. We email you 30 days before; signing in keeps your account.

When you delete your account, the account and its associated database records are removed immediately. Deletion also attempts to remove stored images and memory search data, but cleanup in separate services can fail. Our policy is to keep encrypted backups for 14 days.

Payment records that the law requires to be kept are held by our payment provider for the legal period, without any conversation content.