Privacy

Who is responsible

Data controller: Vincent Flores de Waard, trading as DonQShot Labs · Tweede Atjehstraat 44, 1094 LJ Amsterdam, the Netherlands · phone +31 6 52 07 61 77 · developer@donqshotlabs.com · Dutch Chamber of Commerce (KvK) no. 34180303 · VAT ID NL002077606B18.

What we process, why, and on what basis

1. Answering your question

Data: the text of your question and its detected language.

Purpose: generating the guru's answer, in your language.

Legal basis: necessary for the service you request (Art. 6(1)(b) GDPR). Because a question can reveal sensitive information — for example about your health — we also ask your explicit consent on the first screen (Art. 9(2)(a) GDPR).

Recipients: Anthropic PBC (US) generates the answer; Vercel hosts the request.

Retention: we store nothing. Anthropic automatically deletes API inputs and outputs within 30 days (exceptions under "Where your question travels").

2. Crisis check

Data: the same question text, checked for signs of serious distress.

Purpose: showing help resources instead of an answer when it matters. This check happens on our server and via the AI model.

Legal basis: our legitimate interest in your safety (Art. 6(1)(f)). Because this check can concern health data, it is covered by the same explicit consent (Art. 9(2)(a)).

Recipients: no one — nothing is reported to any third party.

Retention: nothing is stored.

3. Security and fair use

Data: your IP address.

Purpose: abuse prevention and the limit of 60 requests per hour.

Legal basis: legitimate interest (Art. 6(1)(f)).

Retention: held only in the server's working memory.

4. Technical logs

Data: request metadata and error messages — never the content of your question.

Purpose: keeping the service running.

Legal basis: legitimate interest (Art. 6(1)(f)). Processor: Vercel.

Retention: brief, then gone.

5. Website statistics (website only, not the iOS app)

Data: anonymised events — page, referrer, country, browser, operating system, device type, and a visitor hash that resets daily. No cookies.

Purpose: understanding how the site is used.

Legal basis: legitimate interest (Art. 6(1)(f)). Processor: Vercel Web Analytics.

Retention: aggregated; no lasting identifier.

6. Reports you send

Data: the question, the answer, the time, and anything you add — sent from your own mail app; nothing passes through our servers.

Purpose: reviewing answers and adjusting the guru.

Legal basis: legitimate interest (Art. 6(1)(f)); you decide what you send.

Retention: until the review is complete, then deleted, unless the law requires otherwise.

7. On your device

Data: your consent choice, the ember progress, your daily counter, the install-hint choice; the widget keeps your latest question (never the answer); this session's conversation lives in session storage and disappears when you close the app or tab.

Purpose: making the app work. Stored only after your consent.

Retention: until you clear site data or delete the app.

Consent and contract — how they fit together

Answering your question is simply the service you ask for. Because questions can contain sensitive information and are checked for crisis signals, we additionally ask your explicit consent before your first question. You can withdraw it at any time — with the button below, after which the first-run screen returns. Withdrawing stops all AI processing; without it, the guru cannot answer.

Where your question travels

Anthropic PBC processes your question in the United States. That transfer is protected by the EU Standard Contractual Clauses that are part of Anthropic's Data Processing Addendum (Art. 46 GDPR); you can consult them via Anthropic's commercial terms or request a copy at developer@donqshotlabs.com. Anthropic deletes API inputs and outputs within 30 days of receipt or generation — unless a different arrangement applies (we have none), if retention is needed to enforce their Usage Policy (then up to 2 years, with safety-classification scores up to 7 years), or where the law requires it. By default Anthropic does not use API data to train models, and we have not opted in — see their current policy.

What we don't do

No accounts. No ads. No selling of data. No tracking.

Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction, objection and data portability. Because we don't store your conversation and keep no account, there is usually nothing to access or erase — you clear local data yourself by removing site data or the app. You can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or with the supervisory authority in your own country.

Reporting content

You can report any generated answer — including a question the guru asks back. Press and hold the answer, or tap the flag, and choose "Report this answer". The report is sent through your own mail app to developer@donqshotlabs.com; it includes your question, the answer, and the time. The crisis screen is a fixed system message, not a generated answer.

Contact

Questions about this policy? Email us: developer@donqshotlabs.com.