Privacy Policy

Last updated: September 30, 2026; chat-history retention choices added October 5, 2026. This policy describes the first version of THERA-GO, operated by TheraGo, for adults 18 and older in the United States.

Information you choose to share

We process your email address, account identifiers, optional first name, setup preferences, messages, selected images, recordings, notification permission and device tokens, and subscription status. Your password is handled by Supabase Auth. Card details are handled by Stripe or Apple; THERA-GO does not receive your full payment-card number.

Why and where data is processed

Supabase provides account authentication, conversation storage, and private file storage. OpenAI processes conversation context, images, and recordings to generate responses, understand voice notes, moderate content, and synthesize speech. Stripe handles website purchases. Apple handles iPhone purchases and push-notification delivery. You must explicitly agree to AI processing before conversations begin.

Access and security

Messages and files are associated with your account. Server-side access checks restrict requests to the account owner, and files are served through temporary signed links. Connections use HTTPS in the deployed service. This is not end-to-end encryption. Do not share passwords, financial credentials, or private information about someone else without permission.

Retention and deletion

You choose how long chat history stays: 1 day, 7 days, 30 days, 90 days, or until you delete it. The period runs from your last message in each chat; replies and check-ins do not reset it. When it ends, that chat’s history disappears from your account and cannot be restored, and its files are queued for removal. Accounts that never chose a period keep history until it is deleted. You can change this in Settings; shortening it permanently removes history older than the new period. Files you upload but do not send expire after 24 hours. You can download a copy of your account and message data in Settings. Account deletion closes your account and removes account records from the active service. File removal finishes automatically, with retries after temporary failures. Provider backups or records required for payment, fraud prevention, or legal obligations may persist according to the provider’s policy. Exact backup retention and deletion procedures must be confirmed before public release.

Your choices

You can change preferences, disable check-ins, turn off device notifications, delete conversations, or delete your account. Turning off notifications does not cancel a subscription. Cancel Apple subscriptions through Apple’s subscription settings.

No advertising tracking

This version does not include advertising trackers or sell conversation data. Essential session cookies keep you signed in on the website. Device tokens are used only for opted-in notifications.

Age and regional availability

This first version is intended for adults 18 and older in the United States. State privacy-rights procedures will be confirmed before public release. We do not claim HIPAA compliance or provide medical-record services.

Questions

Privacy questions and requests: alexiewebbb@gmail.com. This is an interim personal address; a dedicated mailbox does not exist yet, and no response time is promised. This version is for private testing and should not be used with real sensitive information.