The guru is an AI. A mirror, not a person.
BlissGuru is for people aged 16 and over.
Data controller: Esspo · Tweede Atjehstraat 44 H, 1094 LJ Amsterdam, the Netherlands · developer@donqshotlabs.com · Dutch Chamber of Commerce (KvK) no. 34180303 · VAT ID NL002077606B18.
1. Answering your question
Data: the text of your question and its detected language.
Purpose: generating the guru's answer, in your language.
Legal basis: necessary for the service you request (Art. 6(1)(b) GDPR). Because a question can reveal sensitive information — for example about your health — we also ask your explicit consent on the first screen (Art. 9(2)(a) GDPR).
Recipients: Anthropic PBC (US) generates the answer; Vercel hosts the request.
Retention: we store nothing. Anthropic automatically deletes API inputs and outputs within 30 days (exceptions under "Where your question travels").
If you share an answer, that answer is in the link; we don't store it and your question isn't included.
2. Crisis check
Data: the same question text, checked for signs of serious distress.
Purpose: showing help resources instead of an answer when it matters. This check happens on our server and via the AI model.
Legal basis: our legitimate interest in your safety (Art. 6(1)(f)). Because this check can concern health data, it is covered by the same explicit consent (Art. 9(2)(a)).
Recipients: no one — nothing is reported to any third party.
Retention: nothing is stored.
3. Security, fair use and the daily limit
Data: your IP address and the app's install number. That number is random: the app creates it on your device after your consent, and it is not linked to your name, your Apple account or an advertising ID. It is sent with every question (as X-Guru-Install). If you have Deeper, Apple's proof of purchase is sent too, so the server can check your subscription.
Purpose: abuse prevention, the limit of 60 requests per hour, and the daily limit (3 questions a day free, 30 with Deeper).
Legal basis: legitimate interest (Art. 6(1)(f)); for Deeper also the performance of your subscription (Art. 6(1)(b)).
Retention: the hourly count is held only in the server's working memory. For the daily limit the server keeps one counter per day under a coded derivative of the install number, the IP address or the subscription (a keyed hash), never the number, the address or the proof itself. That derivative changes every day, so days cannot be linked to each other, and it is deleted automatically after 36 hours. Processor: Upstash (storage of the counters).
If you send us a message through the contact form, we keep your email address and your message to reply to you, with Upstash, for no more than 30 days.
4. Technical logs
Data: request metadata and error messages — never the content of your question.
Purpose: keeping the service running.
Legal basis: legitimate interest (Art. 6(1)(f)). Processor: Vercel.
Retention: brief, then gone.
5. Website statistics (website only, not the iOS app)
Data: anonymised events — page, referrer, country, browser, operating system, device type, and a visitor hash that resets daily. No cookies.
Plus five events without content: question asked, copied, shared, report opened and report sent (question_asked, copy_clicked, share_clicked, report_opened, report_sent). Never the text of your question or the answer.
Purpose: understanding how the site is used.
Legal basis: legitimate interest (Art. 6(1)(f)). Processor: Vercel Web Analytics.
Retention: Vercel keeps the statistics as counts. The visitor hash resets every day and is separate from the install number.
6. Reports you send
Data: the question, the answer, the time, and anything you add — sent from your own mail app; nothing passes through our servers.
Purpose: reviewing answers and adjusting the guru.
Legal basis: legitimate interest (Art. 6(1)(f)); you decide what you send.
Retention: until the review is complete, then deleted, unless the law requires otherwise.
7. On your device
Data: your consent choice, the install number (see 3), the ember progress, your daily counter, the install-hint choice, in the app whether the rating prompt has been shown; the widget keeps your latest question (never the answer); this session's conversation lives in session storage and disappears when you close the app or tab.
Purpose: making the app work. Stored only after your consent.
Retention: until you clear site data or delete the app.
Answering your question is simply the service you ask for. Because questions can contain sensitive information and are checked for crisis signals, we additionally ask your explicit consent before your first question. You can withdraw it at any time — with the button below, after which the first-run screen returns. Withdrawing stops all AI processing; without it, the guru cannot answer.
Anthropic PBC processes your question in the United States. That transfer is protected by the EU Standard Contractual Clauses that are part of Anthropic's Data Processing Addendum (Art. 46 GDPR); you can consult them via Anthropic's commercial terms or request a copy at developer@donqshotlabs.com. Anthropic deletes API inputs and outputs within 30 days of receipt or generation — unless a different arrangement applies (we have none), if retention is needed to enforce their Usage Policy (then up to 2 years, with safety-classification scores up to 7 years), or where the law requires it. By default Anthropic does not use API data to train models, and we have not opted in — see their current policy.
No accounts. No ads. No selling of data. No tracking.
Under the GDPR you have the right of access, rectification, erasure, restriction, objection and data portability. Because we don't store your conversation and keep no account, there is usually nothing to access or erase — you clear local data yourself by removing site data or the app. You can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or with the supervisory authority in your own country.
You can report any generated answer — including a question the guru asks back. Press and hold the answer, or tap the flag, and choose "Report this answer". The report is sent through your own mail app to developer@donqshotlabs.com; it includes your question, the answer, and the time. The crisis screen is a fixed system message, not a generated answer.
Questions about this policy? Email us: developer@donqshotlabs.com.
Last updated: 27-10-2026