Privacy Policy

1. What we collect on the website (waitlist)

Right now, the only thing you can do on our website is join the waitlist. When you do, we collect the following:

• Your email address.
• Your first name, only if you choose to give it.
• The date and time you signed up.
• A tag showing where the signup came from (for example, which page or campaign).
• A salted, truncated hash of your IP address. We never store your raw IP address. The hash is a one-way, shortened fingerprint that we use only to detect abuse and duplicate signups; it cannot be turned back into your IP.

2. What we collect in the app

Using the Emma app means sharing more personal — and often sensitive — information with us. We collect only what the app needs to work, and most of it is content you decide to share:

• Account details: your email address, your login credentials (passwords are stored hashed, never in plain text), the name or nickname you want Emma to use, and your confirmation that you are 18 or older.
• Conversations with Emma: the text messages, voice notes and photos you send in chat, and Emma’s replies.
• Journal entries you write.
• Mood check-ins, including your mood, your energy level and any notes you add.
• Memories: the things you explicitly ask Emma to remember using “Add to Memory.” You choose what goes in, and you can view and delete each memory at any time.
• Weekly reports, which summarise your week. Your conversations are included in a report only if you choose to include them.
• Basic technical information such as device type, operating system, app version and error logs, so we can keep the app working and fix bugs.

3. How we use your information

We use the waitlist information for exactly one purpose: sending you a single email announcing that Emma has launched. That email includes an unsubscribe link. Nothing else — no newsletters, no promotions, no follow-ups. We use the information collected in the app to:

• Provide the service: generate Emma’s responses, save your journal, track your moods, build your weekly report and remember what you asked her to remember.
• Keep your account secure and prevent abuse.
• Fix bugs, understand in aggregate which features are used, and improve Emma.
• Send you service messages, for example about changes to this policy, our terms or a security issue.
• Comply with our legal obligations.

We do not sell your personal information. We do not use your conversations, journal entries or moods for advertising, and we do not build advertising profiles about you.

4. Legal basis

Where your local law requires a legal basis for processing (for example under the GDPR in Europe or similar laws elsewhere), we rely on: your consent, for the waitlist and for the sensitive information about your wellbeing that you choose to share with Emma; the performance of our contract with you, to provide the app; our legitimate interests, to keep the service secure, prevent abuse and improve it; and our legal obligations.

Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect processing that already happened, and it may mean parts of Emma stop working for you.

5. Who we share it with

We share personal information only with the following categories of recipients, and only as far as needed:

• AI providers. Emma’s replies are generated with large language models from third-party providers, currently OpenAI. To produce a response, the content you send in chat (text, voice notes, photos) and the context Emma needs — such as your memories — is sent to that provider. Under the terms of the API we use, the provider does not use your content to train its models and processes it only to generate the response.
• Infrastructure providers. The waitlist is stored on our own server. The app’s data is stored on servers we control or that our hosting providers operate on our behalf under contract, following our instructions.
• Authorities, when the law requires it, for example in response to a valid legal request, or when necessary to protect someone’s safety.
• A successor, if Dialogy LLC is ever acquired or merges with another company. We would tell you before your information becomes subject to a different privacy policy.

We never share your information with advertisers or data brokers.

6. How long we keep it

Waitlist: we keep your waitlist information until we have sent the launch email, and delete it shortly afterwards. If you unsubscribe before that, we delete it right away.

App: we keep your account and content for as long as your account is active. When you delete a memory, a journal entry or a mood check-in, it is removed from our active systems immediately and from backups within a limited period. When you delete your account, we delete all of your content, except for the minimum records we are legally required to keep (for example, basic billing or security logs), which we delete once that obligation ends.

7. Your rights

Depending on where you live, you may have the following rights over your personal information. We honour them for everyone, wherever you are:

• Access: ask for a copy of the personal information we hold about you.
• Rectification: ask us to correct information that is inaccurate or incomplete.
• Deletion: ask us to erase your information.
• Portability: receive your information in a structured, commonly used, machine-readable format.
• Objection and restriction: object to processing based on our legitimate interests, or ask us to limit how we use your information.
• Withdrawal of consent, at any time, where we rely on it.
• Complaint: lodge a complaint with your local data protection authority.

You can exercise many of these rights directly in the app: view and delete your memories, delete journal entries and mood check-ins, and delete your account. For anything else, or if you no longer have access to your account, email us at igotyou@emmaforthegirlies.com. We may ask you to verify your identity first, and we will reply within the time your local law allows (normally within one month).

8. Security

We protect your information with measures appropriate to how sensitive it is: encryption in transit, hashed passwords, hashed and truncated IP addresses on the waitlist, access controls so that only the people who need to can reach your data, and logging of access to production systems.

No system is perfectly secure. If we ever discover a breach that affects your information, we will tell you and the relevant authorities as the law requires.

9. Age

Emma is for adults. You must be 18 or older to join the waitlist or use the app. We do not knowingly collect information from anyone under 18. If you believe someone under 18 has given us personal information, contact us at igotyou@emmaforthegirlies.com and we will delete it.

10. International transfers

Some of our providers, including our AI provider, may process information in countries other than the one you live in, including the United States. When we transfer personal information internationally, we rely on safeguards recognised by the applicable law, such as standard contractual clauses, and we choose providers that commit to protecting your data.

11. Changes to this policy

We may update this policy as Emma grows or as the law changes. We will post the new version on our website with an updated date, and if the changes are significant we will let you know by email or in the app before they take effect. Continuing to use Emma after that means you accept the updated policy.

12. Contact

Questions, requests or concerns about your privacy: write to us at igotyou@emmaforthegirlies.com, by post at Dialogy LLC, 16192 Coastal Highway, Lewes, Delaware, 19958, County of Sussex, USA, or on social media at @emmaforthegirlies. We read every message.