Addalaf Privacy Policy
Effective date: October 8, 2026 · Version: 1.0
Addalaf is published by Heartful Robots LLC, a Delaware limited liability company, 850 Burton Road, Suite 201, Dover, DE 19904 ("we", "us"). This policy explains what we collect when you use Addalaf, why, who else handles it, and the choices you have. Contact us at support@addalaf.com.
The short version. We collect what you type into Addalaf so we can write joke suggestions for you. To write them, we send your request to one of our AI providers, Anthropic or Google. We do not sell your data, we do not show ads, we do not track you across other sites or apps, and nobody at Heartful Robots reads your speeches or profile in the normal course of business.
1. What we collect
Account information. Your email address and password, or, if you sign in with Apple or Google, the email address they share with us (Apple lets you hide your real one). Your password is stored in scrambled (hashed) form by our database provider; we never see it. We do not ask for your name.
Your boundary profile. Your humour style, topics you've ruled out, tone and audience-standing settings, and any free text you write about what you'd never find funny or what not to joke about. That free text may include sensitive information, such as a bereavement, an illness, a religious belief, or a detail about another person. Please write only what Addalaf needs to steer away from a topic. You do not need to name anyone or give medical details for it to work.
Your talks. Talk titles, the occasion and audience you describe, the detail you want to joke about and, if you use Script Mode, the full text of your speech.
Suggestions and your choices. The jokes Addalaf writes, your edited versions, and what you do with each one (keep, edit, reject, favourite, copy) with the time you did it. When Addalaf declines to write jokes for a request, we also keep its short written reason, which may quote your text.
Support messages. What you write to us, plus technical context to help us fix problems: the screen you were on, app version, usage counts, and your browser or device description.
Technical and usage data. Sign-in session tokens, the cost and timing of each request, and error logs. We automatically remove your content from error logs before storing them.
What we do not collect. Your location, contacts, microphone, camera, or advertising identifiers. We use no third-party analytics or advertising trackers, and we do not track you across other sites or apps. Because we don't do that kind of tracking, browser "Do Not Track" signals do not change how Addalaf works. Addalaf's own built-in tools record how the app is used and collect crash reports, so we can fix and improve it. These never include your speech or profile text and are not sent to any outside company.
2. How we use it
- To provide Addalaf: create your account, store your profile and talks, and write suggestions.
- To improve Addalaf: we measure which suggestions people keep, edit or reject (our "keep rate"). We use counts and patterns for this, not by reading your content.
- To support you: answer your messages and fix problems.
- To keep Addalaf safe and legal: prevent misuse, enforce our Terms, and meet legal obligations.
- To send you service emails: sign-up confirmation, password resets and support notifications. We do not send marketing emails without your permission.
We do not use your content to train AI models, and our AI providers do not either (section 3).
3. Our AI providers: Anthropic and Google
When you ask for suggestions, we send one of our AI providers, Anthropic, PBC or Google LLC (both USA), the occasion and detail you described, your boundary profile including any free-text notes, and, in Script Mode, your speech. That provider writes the suggestions and sends them back. We choose which provider handles a request, and we may change providers over time.
- Anthropic. Under Anthropic's commercial terms, Anthropic does not use this data to train its models, and deletes it within 30 days. It may keep data longer if its automated systems flag a request as possible misuse, or where the law requires.
- Google. We use only Google's paid Gemini API service. Under its terms, Google does not use this data to improve its products, and it keeps logs for a limited period (currently 55 days) to detect abuse, or where the law requires.
We will ask for your agreement before your first request is sent to an AI provider.
4. Who else handles your data
We share your data only with service providers who process it for us under contract, and only as needed to run Addalaf:
| Provider | What they do for us | Where |
|---|---|---|
| Anthropic; Google (Gemini API) | Writes the joke suggestions | USA |
| Supabase | Hosts our database and sign-in system | Canada (database) |
| Railway | Runs the Addalaf application | USA |
| Resend | Sends service emails | USA |
| Google Workspace | Our business email, which receives support emails | USA |
[At paid launch, add: Apple and Google process subscription purchases made in their app stores, under their own privacy policies. We receive your subscription status, never your payment details.]
We may also disclose data if the law requires it, to protect someone's safety, or as part of a sale or merger of our business (in which case this policy would continue to apply to your data, or you would be told).
We do not sell your personal information, and we do not share it for targeted advertising.
5. Where your data is stored
Your data is stored in Canada and processed in the United States. Both our database provider and our AI provider encrypt data in transit and at rest.
6. How long we keep it
| Data | How long |
|---|---|
| Account and boundary profile | While your account is open |
| Talks, speeches, suggestions and edits | Until you delete them or your account |
| Records of what you kept, edited or rejected | With the talk; if you delete a talk, see below |
| Support messages | 24 months after the conversation ends |
| Error logs | 30 days |
| Our hosting provider's server logs | A short rolling window set by the provider |
| Database backups | 7 days |
| Copies held by our AI providers | Anthropic up to 30 days; Google up to 55 days (longer if flagged for misuse or required by law) |
If your account is inactive for 24 months, we will email you and then delete it.
When you delete a talk, we delete its title, description, speech text, suggestions and your edits. We keep a content-free record that a suggestion was kept, edited or rejected on a date, so we can measure whether Addalaf works. That record contains none of your words and is deleted with your account.
When you delete your account, we delete all of your data from our database. Copies may remain in backups for up to 7 days and in our hosting provider's server logs until they expire, after which they are gone.
7. Your choices and rights
Whoever and wherever you are, you can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct it;
- delete it, or delete your account;
- withdraw your consent to sending your data to our AI providers (Addalaf cannot write suggestions without it).
Email support@addalaf.com from the address on your account. We will reply within 30 days. You can also delete your account yourself in the app (Settings → Delete my account) or see addalaf.com/delete-account for how to request deletion if you cannot sign in. Some US states give residents these rights by law, and we honour them for everyone. If we decline a request, we will tell you why, and you may appeal by replying to that email.
8. Age
Addalaf is for adults 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has an account, contact us and we will delete it.
9. Security
Each user can access only their own data. Staff access to user content is limited to support you ask for, is deliberate and is logged. No system is perfectly secure; if a breach affects your data, we will notify you as the law requires.
10. Washington and Nevada residents
Our Consumer Health Data Privacy Policy explains how we handle information that could reveal health conditions, which may be in your boundary profile: /legal/health-data.
11. Changes
If we make a material change, we will tell you by email or in the app before it takes effect, and update the date above.
12. Contact
Heartful Robots LLC, 850 Burton Road, Suite 201, Dover, DE 19904 · support@addalaf.com