Privacy icon Your Privacy Matters

Privacy Policy

Your privacy and safety are at the heart of how we design every part of Chomi.

Last updated: 6 October 2026

Welcome to Chomi

Our Jungian companion is carefully designed using insights from peer-reviewed research, foundational psychological texts, and therapeutic best practices. We maintain an uncompromising ethical standard: we proactively refer users to human therapists when appropriate. Your conversations are processed by the AI providers that power the service, under their commercial API terms. Anthropic, Google, OpenAI and xAI do not use them to train their models. We never sell your conversations and never use them for advertising.

Your data and conversations remain private, secure, and under your control. We know therapy is deeply personal, and we treat your conversations with the same respect and confidentiality that a professional therapist would.

Questions? Our privacy team is available at

Our Core Principles

Local-First Storage Icon

Local-First Storage

Your conversations stay on your device by default

Explicit Consent Icon

Explicit Consent

Nothing is shared without your clear, active choice

Minimal Data Collection Icon

Minimal Data Collection

We only collect what's necessary to provide our service

No Training Data Icon

No Training Data

Your conversations are never used to train our AI

Professional Standards Icon

Professional Standards

We adhere to therapeutic industry privacy standards

What Information We Collect

Essential Information

  • Email address (for authentication)
  • Display name
  • User role (Patient/Therapist/Institution)
  • Font size preference
  • Subscription status

Optional Information

  • conversations (stored locally by default)
  • Connection preferences (therapist-patient relationships)
  • Data sharing preferences

What We Don't Collect

  • Personal health records
  • Financial information beyond subscription status
  • Browser history
  • Device information beyond basic authentication needs
  • Location data

How Your Data is Stored

Local Storage Icon

Local Storage

  • All conversations are stored locally on your device by default
  • You maintain full control over your data
  • You can delete conversations at any time
  • Local storage uses industry-standard encryption
Cloud Storage Icon

Cloud Storage (Optional)

Only if you explicitly opt in:

  • Shared conversations with your therapist
  • Account preferences
  • Connection relationships

Data Sharing and Control

Security Measures

Technical Security Icon

Technical Security

  • Industry-standard SSL/TLS protocols
  • Automated threat detection
Access Controls Icon

Access Controls

  • Session management and timeout controls
  • Role-based access control

Therapeutic Standards

Professional Ethics

  • Adherence to psychotherapy ethical guidelines
  • Compliance with mental health privacy standards
  • Regular privacy impact assessments
  • Continuous policy review and updates

Clinical Boundaries

  • Clear separation of AI and human therapy
  • Transparent referral processes
  • Crisis protocol adherence
  • Professional supervision framework

Your Rights

You have the right to:

  • Access your data
  • Delete your data
  • Be forgotten completely
  • You can export your conversations at any time from Settings. For a copy of everything else we hold about you (your account details and Assessment results), contact us at and we'll provide it within 30 days.
  • Modify sharing preferences
  • Revoke sharing permissions
  • Request account deletion

Data Retention

  • Local data: Retained until you delete it
  • Shared data: Retained until sharing is revoked
  • Account data: Retained until account deletion

Deleted accounts

When you delete your account with Forget Me, we permanently delete your conversations, personality profile and scores, music ratings, roaming backups, settings, and account record. Deletion is immediate and cannot be undone.

For completeness, here is what does not disappear at that moment:

  • Repeat-signup check. We keep a one-way code derived from your email address for 12 months, so the free allowance cannot be claimed repeatedly. It cannot be reversed into your address and is deleted automatically after 12 months.
  • Payment records. If you subscribed, PayPal retains its own transaction records under its own privacy policy. We cancel the subscription; we cannot erase PayPal's books. If we cannot confirm the cancellation, we keep the subscription reference so that we can cancel it for you.
  • Backups. Deleted data may persist in our backups for a limited retention window before expiring.
  • Sent email. Emails we have already sent exist in your inbox and in our email provider's delivery records.
  • Your other devices. Browsers you used on other devices may hold locally saved data until you clear them.
  • Messages sent to other platforms. If you connected external messaging platforms, messages already delivered to those platforms remain there, governed by those platforms' policies.
  • Spotify. If you connected Spotify, we delete our access to it, but the connection stays listed in your Spotify account until you remove it there.
  • AI providers. Your conversations were processed by the AI providers that power the service. Any copies they hold are kept and deleted under their own API terms; we cannot delete them for you.
  • Service logs. Our operational logs can include your account identifier and email address. They are kept for security and troubleshooting and are not deleted with your account.
  • Analytics. Our analytics provider retains usage events for its standard retention period; we do not use them to identify you after deletion.
  • Messages we cannot match to you. A help chat held while you were not signed in, or a contact-form message sent from an address your account never confirmed, carries nothing that links it to your account, so we cannot find it to delete it.

We think a deletion promise should say exactly what it covers. This is the whole list.

Children's Privacy

Child safety icon
  • Under-18s can join only by invitation from an existing adult account or their therapist
  • A child account holds the child's date of birth, used to adapt Chomi's conversations to their age
  • For children under 13 we also hold a guardian's email address, and the guardian is told when the account is created
  • Deleting a child account deletes all of this. If the inviting account is deleted, the child's account remains, unlinked

Emergency Situations

Crisis Protocol

  • Emergency services contact information not stored
  • Clear crisis referral procedures
  • Transparent limitations of AI service
  • Human intervention protocols

AI-Specific Privacy

AI Training

  • No use of user data for AI training
  • Pre-trained on approved academic sources
  • Transparent AI limitations

AI Interactions

  • No persistent memory between sessions except in conversations
  • Any personality profile we hold is built from your own reactions to the Assessment's music, and only used to run this service — never for advertising, and never sold
  • Clear AI identification
  • Your conversations are never used for tracking or advertising

Contact Information

For privacy-related inquiries:

  • Data request handling: Within 30 days

Regulatory Compliance

GDPR Icon

GDPR

EU users compliance

CCPA Icon

CCPA

California users compliance

Third-Party Services

We use limited third-party services for:

  • Authentication (Google SSO)
  • Email communications
  • Payment processing
  • Infrastructure hosting
  • Analytics and advertising measurement (with your consent)

Analytics and advertising cookies are optional and off by default. If you accept analytics cookies, we use Google Analytics to understand how visitors use our site. If you accept marketing cookies, we load the Meta Pixel (Meta Platforms Ireland Limited), which sets the _fbp and _fbc cookies and reports your visit to Meta so we can measure our advertising. We also use the Google Ads tag (Google Ireland Limited), which sets Google advertising cookies and reports your visit to Google so we can measure our advertising and show you our ads elsewhere. You can change your mind at any time via Manage cookies in the footer, which removes the cookies they set on our site.

Your conversations are processed by the AI providers that power the service, under their commercial API terms. Anthropic, Google, OpenAI and xAI do not use them to train their models. We never sell your conversations and never use them for advertising.

With warm regards, Chomi

www.chomi.world

Chomi is proudly part of the nRich suite of evidence-based and research-led AI psychology products.

Manage cookies