Your Privacy Matters
Your privacy and safety are at the heart of how we design every part of Chomi.
Last updated: 20 October 2026
Our Jungian companion is carefully designed using insights from peer-reviewed research, foundational psychological texts, and therapeutic best practices. We maintain an uncompromising ethical standard: we proactively refer users to human therapists when appropriate. Your conversations are processed by the AI providers that power the service, under their commercial API terms. Anthropic, Google, OpenAI and xAI do not use them to train their models. We never sell your conversations and never use them for advertising.
Your data and conversations remain private, secure, and under your control. We know therapy is deeply personal, and we treat your conversations with the same respect and confidentiality that a professional therapist would.
Questions? Our privacy team is available at support@nrichs.me
Your conversations stay on your device by default
Nothing is shared without your clear, active choice
We only collect what's necessary to provide our service
Your conversations are never used to train our AI
We adhere to therapeutic industry privacy standards
Essential Information
Email address (for authentication)
Display name
User role (Patient/Therapist/Institution)
Font size preference
Subscription status
Optional Information
conversations (stored locally by default)
Connection preferences (therapist-patient relationships)
Data sharing preferencesUsage RecordsTo run and bill the service, we keep records of how it is used: when each session starts and ends, how long you spend in conversation, how much of your free allowance you use, how many messages you send and when, when a guest account becomes a membership, and which of our services you are using. These records never include what you say. We analyse them in-house and report on them only in aggregate, to understand and improve the service. Our lawful basis is legitimate interest. Usage records for guest accounts are deleted 14 months after they are made, and all of your usage records are deleted when you delete your account with Forget Me.
What We Don't Collect
Personal health records
Financial information beyond subscription status
Browser history
Device information beyond basic authentication needs
Location data
All conversations are stored locally on your device by default
You maintain full control over your data
You can delete conversations at any time
Local storage uses industry-standard encryption
Only if you explicitly opt in:
Shared conversations with your therapist
Account preferences
Connection relationships
Patient Data Sharing
Conversations remain private by default
Sharing with therapists requires explicit opt-in
You can revoke sharing permissions at any time
You choose which conversations to share
Therapist Data Access
Can only view explicitly shared patient conversations
Access logs are maintained for transparency
Patient data is compartmentalized
No ability to download or export patient data
Institution-Level Privacy
No direct access to patient conversations
Access limited to therapist management
Aggregate analytics only (no individual data)
Industry-standard SSL/TLS protocols
Automated threat detection
Session management and timeout controls
Role-based access control
Therapeutic Standards
Adherence to psychotherapy ethical guidelines
Compliance with mental health privacy standards
Regular privacy impact assessments
Continuous policy review and updates
Clear separation of AI and human therapy
Transparent referral processes
Crisis protocol adherence
Professional supervision framework
Access your data
Delete your data
Be forgotten completely
You can export your conversations at any time from Settings. For a copy of everything else we hold about you (your account details and Assessment results), contact us at support@nrichs.me and we'll provide it within 30 days.
Modify sharing preferences
Revoke sharing permissions
Request account deletion
Local data: Retained until you delete it
Shared data: Retained until sharing is revoked
Account data: Retained until account deletionUsage records: guest records deleted 14 months after they are made; member records retained until account deletionWhen you delete your account with Forget Me, we permanently delete your conversations, personality profile and scores, music ratings, roaming backups, settings, and account record. Deletion is immediate and cannot be undone.
For completeness, here is what does not disappear at that moment:
Repeat-signup check. We keep a one-way code derived from your email address for 12 months, so the free allowance cannot be claimed repeatedly. It cannot be reversed into your address and is deleted automatically after 12 months.Payment records. If you subscribed, PayPal retains its own transaction records under its own privacy policy. We cancel the subscription; we cannot erase PayPal's books. If we cannot confirm the cancellation, we keep the subscription reference so that we can cancel it for you.Backups. Deleted data may persist in our backups for a limited retention window before expiring.Sent email. Emails we have already sent exist in your inbox and in our email provider's delivery records.Your other devices. Browsers you used on other devices may hold locally saved data until you clear them.Messages sent to other platforms. If you connected external messaging platforms, messages already delivered to those platforms remain there, governed by those platforms' policies.Spotify. If you connected Spotify, we delete our access to it, but the connection stays listed in your Spotify account until you remove it there.AI providers. Your conversations were processed by the AI providers that power the service. Any copies they hold are kept and deleted under their own API terms; we cannot delete them for you.Service logs. Our operational logs can include your account identifier and email address. They are kept for security and troubleshooting and are not deleted with your account.Analytics. Our analytics provider retains usage events for its standard retention period; we do not use them to identify you after deletion.Messages we cannot match to you. A help chat held while you were not signed in, or a contact-form message sent from an address your account never confirmed, carries nothing that links it to your account, so we cannot find it to delete it.We think a deletion promise should say exactly what it covers. This is the whole list.
Under-18s can join only by invitation from an existing adult account or their therapistA child account holds the child's date of birth, used to adapt Chomi's conversations to their ageFor children under 13 we also hold a guardian's email address, and the guardian is told when the account is created
Deleting a child account deletes all of this. If the inviting account is deleted, the child's account remains, unlinked
Emergency services contact information not stored
Clear crisis referral procedures
Transparent limitations of AI service
Human intervention protocols
AI Training
No use of user data for AI training
Pre-trained on approved academic sources
Transparent AI limitations
AI Interactions
No persistent memory between sessions except in conversations
Any personality profile we hold is built from your own reactions to the Assessment's music, and only used to run this service — never for advertising, and never sold
Clear AI identification
Your conversations are never used for tracking or advertising
Email: support@nrichs.me
Response time: Within 48 hours
Data request handling: Within 30 days
EU users compliance
California users compliance
Authentication (Google SSO)Email communicationsPayment processingInfrastructure hostingAnalytics and advertising measurement (with your consent)Analytics and advertising cookies are optional and off by default. If you accept analytics cookies, we use Google Analytics to understand how visitors use our site. If you accept marketing cookies, we load the Meta Pixel (Meta Platforms Ireland Limited), which sets the _fbp and _fbc cookies and reports your visit to Meta so we can measure our advertising. We also use the Google Ads tag (Google Ireland Limited), which sets Google advertising cookies and reports your visit to Google so we can measure our advertising and show you our ads elsewhere. If you accept marketing cookies, Google Analytics also shares measurement data, including an identifier for your browser, with Google Ads, so we can measure and improve our advertising. If you accept marketing cookies, we also use Leadinfo (Leadinfo B.V.) to identify the organisations that visit our site. Leadinfo receives the pages you visit, a device identifier, our analytics ID and a partly masked copy of any email address you enter on these pages. You can change your mind at any time via Manage cookies in the footer, which removes the cookies they set on our site.
Your conversations are processed by the AI providers that power the service, under their commercial API terms. Anthropic, Google, OpenAI and xAI do not use them to train their models. We never sell your conversations and never use them for advertising.
With warm regards, Chomi
www.chomi.worldChomi is proudly part of the nRich suite of evidence-based and research-led AI psychology products.
