Privacy Policy

Last updated: 16 July 2026

1. Who we are (Data Controller)

LoveSpiel ApS
CVR number 40153381
Lyngby Hovedgade 96, st
2800 Lyngby, Denmark

This policy explains how we collect, use, share, secure and retain your personal data when you use our AI couples counselling chatbot (the "Service").

2. About the Service

The Service is an AI-powered couples counselling chatbot based on the Process Oriented Couple Therapy method. It is not therapy, not a substitute for professional help, and not a crisis service. You can reach a human counsellor for non-acute questions via our contact page.

3. What personal data we process

• Conversation content you type, which may include sensitive details about your relationship, feelings, health, and sexuality (special-category data — see §5).
• Account and payment data (via our membership and payment providers) — name, email, package status, and payment confirmations. We do not store full card details; payments are handled by our payment providers.
• Technical and usage data — login, message counts (used to enforce package limits), timestamps, IP address, and basic log data.

We ask you to use a call name, not your real or full name, in conversations (data minimisation). Please avoid sharing information that directly identifies you or other people.

4. Why we process your data, and our legal bases (GDPR)

• To provide the chatbot and manage your package — Art. 6(1)(b) (contract).
• To process your conversation, including special-category data — Art. 9(2)(a) explicit consent (given at the start of each chat), together with Art. 6(1)(a). This consent also covers storing conversations for up to 20 days to review and improve the Service.
• To enforce usage limits, ensure security, and prevent abuse — Art. 6(1)(f) (legitimate interests).
• To meet legal and accounting obligations — Art. 6(1)(c).

You can withdraw consent at any time (see §10); withdrawal does not affect processing already carried out.

5. Sensitive (special-category) data

Conversations may reveal data about health, sex life, and relationships, which is "special category" data under GDPR Art. 9. We process it only with your explicit consent, only to provide and improve the Service, and we ask you to minimise what you share (use a call name; avoid identifying details).

6. AI processing and sub-processors

To generate responses, your messages are sent to and processed by our AI providers:

• Anthropic (Claude) — conversation (processed in the United States).
• OpenAI — knowledge retrieval / embeddings (processed in the United States).

We access these providers through their API services (not the consumer ChatGPT/Claude apps). Under their API terms, these providers do not use your inputs or outputs to train their models. They may retain API data briefly for abuse monitoring before deletion. Each provider is bound as our processor under a data processing agreement, acting only on our instructions. Other processors: AZE Hosting (website hosting), our payment provider Stripe, Cloudflare (bot protection on our checkout pages), and Plausible Analytics (privacy-friendly, cookieless visitor statistics, hosted in the EU).

We may disclose data if required by law or to protect rights, safety, or security.

7. Automated processing

The chatbot generates text using AI models; outputs are probabilistic and may be imperfect. We do not make decisions with legal or similarly significant effects on you solely by automated means. The chatbot is informational and supportive; it does not provide diagnosis, treatment, or medical advice.

8. International transfers

Our AI and other providers may process data outside the EU/EEA (for example, in the United States). Where they do, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework.

9. Retention

• Conversation logs: conversations are stored securely on our website for up to 20 days so we can review them and improve the Service, after which they are deleted automatically; messages are also retained briefly by our AI providers (typically up to 30 days) for abuse monitoring.
• Account and billing data: kept as required by law (e.g. bookkeeping) — 5 years after the end of the financial year (Danish Bookkeeping Act).

We delete or anonymise data when it is no longer needed. We do not sell your data, and we share it only with the processors in §6 and where legally required.

10. Your rights

You have the right to access, rectify, erase, restrict, and port your data, to object to processing, and to withdraw consent at any time. To exercise these rights, contact admin@lovespiel.com. You can also complain to the Danish supervisory authority, Datatilsynet (datatilsynet.dk).

11. Cookies

We use strictly necessary cookies for login, session management and security. We do not use marketing cookies. Our visitor statistics tool (Plausible Analytics) works entirely without cookies and does not track you across websites. You can manage cookies in your browser settings.

12. Security

We protect your data with measures including encryption in transit, access controls, and restricted access to logs. No system is 100% secure; you can help by sharing only what is needed and using a strong, unique password.

13. Crisis and safety

The chatbot cannot contact emergency services or report situations, and it cannot reliably know the correct crisis numbers for your location. In an emergency or crisis, it is your own responsibility to find and contact the relevant local emergency or crisis service.

14. Children

This Service is intended for adults (18+). We do not knowingly collect personal data from anyone under 18.

15. Changes and contact

We may update this policy from time to time; the current version is dated above. Questions? You can contact  Lovespiel. See also our Terms of Service.