Privacy & security
You deserve to know what happens to what you share. Here are the protections, the choices and the limits.
Last updated: October 2026
Where your data lives
Psyra’s servers and database are hosted in Germany, in the European Union.
That does not mean all processing stays in Europe: the AI providers used to reply to you process messages outside the EU.
What we encrypt and how
Psyra encrypts sensitive text in the application with AES-256-GCM before storing it in the database.
This covers conversations, journal entries and drafts, session notes and summaries, memory, questionnaire answers, safety plans, exercise content, mood notes, goals and practices, profile text and support messages.
Our backup policy is to keep encrypted backups for 14 days.
Encryption at rest protects stored data if a database or backup leaks; the app itself decrypts it to reply to you.
What AI providers see
To reply, Psyra sends your messages and relevant conversation context to AI providers outside the EU.
Replies are written by a large language model from an AI model provider, reached through a routing service.
For memory search, relevant text is turned into embeddings (numerical representations of text) by an AI provider.
Voice conversations transcribe speech to text, reply with Psyra’s chat model, and turn that reply into speech. The current list of providers is available on request through the contact page.
Psyra has no ads or advertising trackers and never sells your data.
Your memory, your control
In the memory tab, you can see what Psyra remembers, correct it, hide it, forget individual items or clear memory.
You can pause memory or turn off remembering for a session before you begin.
Your rights
You can export your data as a JSON file from settings.
You can also delete your account: the account and its associated database records are removed immediately.
Deletion also attempts to remove stored images and memory search data; cleanup in those separate services can fail, and encrypted backups remain until they expire.
Our policy is to delete accounts after 2 years of inactivity, with an email warning 30 days before; accounts with ongoing paid subscriptions are excluded, and signing in keeps your account.
For help with your data or your rights, contact us.
What Psyra is not
Psyra is an AI for adults aged 18 and over, not a therapist, a medical service or an emergency service.
Psyra identifies itself as an AI in chat and voice, and reminds you after a long absence.
Psyra cannot call emergency services or contact anyone for you; crisis resources are one tap away.
Questions
If something is unclear, ask us through the contact page.
For the formal text, read our privacy policy.