Your data

Draft, awaiting legal review. The final wording may change before launch.

A short overview of what Christina keeps about you. The privacy policy has the full details.

What we keep, and for how long

• Your account: your email address, name and language, and a one-way hash of your password. It lets you sign in, and lets us write to you. We keep it until you delete your account.
• What you agreed to: that you accepted the terms, and whether you gave or withdrew your consent to health information. Kept until you delete your account.
• Your health and wellbeing information, only with your explicit consent: your conversations and their summaries, what Christina remembers about you, your paths, your session history, your mood entries, and safety records that say when crisis lines were shown to you, without your words. So that Christina can talk with you, remember you and help keep you safe. Kept until you withdraw your consent or delete your account.
• Sign-in records: the time, IP address and browser of each sign-in. They keep you signed in, and help us notice misuse. Kept until you sign out, or for 30 days without use.

Where it is

On servers in the United States, run by DigitalOcean. Emails go out through SMTP.com. The privacy policy lists every company that processes your data for us.

Who can see it

• You.
• Christina's systems, to write her replies and notes.
• Anthropic, which runs the language model: to write each reply it receives the recent part of your conversation and the notes Christina keeps about you. It does not train on them, and it deletes them within 30 days.
• Someone on our team, only when you report a reply, ask us to look at something, or the law requires it.

What we never do

• Sell your data, or use it for advertising.
• Train AI models on your conversations.

What you can do

• Give your consent to health information in the app, if you did not when you signed up. Without it your account works, but Christina cannot talk with you, remember you or keep your mood entries.
• Withdraw that consent in your settings, without closing your account. All your health and wellbeing information is deleted at once and for good, and you are offered a copy first. Your account stays, so you can sign in and start over.
• Delete your account in your settings. Your data leaves our database at once, and our backups within 30 days.
• Get a copy of your data, or correct it: write to contact@christina.app from the email address on your account. We answer within 30 days.