Privacy policy
What leaves your device, who receives it and what PsycheAI keeps, in plain words.
How your data flows
Your files are read on your phone. Only a short, de-identified summary ever leaves it.
No internet needed
- Step 1Your files are loaded on your phone, not uploadedYour Instagram, WhatsApp, Google or Facebook files are opened right in your browser.
- Step 2A short de-identified summary is madeJust 100–200 KB of text, a tiny slice of your files. Names, handles, emails and numbers are removed.
- Step 3You choose what is sentReview the summary and untick anything you would rather not share. You can download it first, too.
The only part online · encrypted
- Step 4Only that summary is sent, encryptedTo Google Vertex AI enterprise, which never uses it to train AI.
- Step 5Your results come back to your phoneYour Psyche Card, full report and Psyche Syncs are saved only there. PsycheAI keeps no copy.
Don’t just take our word for it: load your data in airplane mode, and it is still read and summarised. Or read the code, which is public.
Your data
What stays on your device?
Your Instagram zip file, any Google, Facebook or WhatsApp files you add, and your photos and videos never leave this device. They are read in your browser.
Your digest, Psyche Card, reports and Ask PsycheAI answers are saved only in your browser, until you press Delete everything. Save a backup puts them, with your Psyche Syncs and your link’s key, in a file on this device to restore in another browser. PsycheAI never receives that file, so keep it private.
What leaves your device?
Only a short digest of your own activity, usually 100-200KB of text. You see it, and can untick anything, before it is sent for analysis.
And, only if you tap Use for Psyche Pair and agree, the card-level part of your read: your type, Big Five, attachment lean, love languages, interests, values, motivations, character and headline. Never your data, messages or report text.
It is de-identified on your device first: your name and username become a blank, email addresses, phone numbers, ID, card, bank and postal numbers, passwords, login codes and usernames, and street addresses are removed, and, in your posts, comments and messages, everyone else’s @handles become numbers like [P1] and the names of people you message become numbers like [N1].
Who receives it?
- Google Vertex AI (Gemini, on Google Cloud’s enterprise tier), to write your card and report and to answer your Ask PsycheAI questions. On this paid enterprise service your digest, questions and report are not used to train AI, and are handled only to answer you. They may be kept briefly to check for abuse, under Google Cloud’s terms, on servers outside Singapore.
- PsycheAI’s server only passes the digest to them and the report back. It does not log either or save them to disk. Why it holds the finished report at all: writing it takes a few minutes, and a phone can lose its connection meanwhile (switching apps, or from Wi-Fi to mobile data). So the report waits until your device collects it, and you are never charged twice or made to wait again. It is held only in encrypted form that PsycheAI cannot read, with the key on your device, and deleted as soon as your device has it: usually within seconds, never more than four hours.
- Stripe handles payments. PsycheAI never sees your card number, only the amount, the currency and a payment reference.
- Render hosts the site and Upstash holds the small records below. Like any website, they see your IP address when you connect.
- People you send your link to see your Psyche Card, never your data, messages or Psyche Report.
- The person whose link you sync with gets the result and your Psyche Card, if you choose to share it, before syncing or later.
- PsycheAI in Muse (Psyche Pair, at app.psycheai.io), only if you tap Use for Psyche Pair: the card-level part of your read above, to match you. What it keeps is on its own page.
Can anyone else access my data?
No. There is no sign-up, no password and no email address, and PsycheAI never asks for the password of your Instagram or any other account: you download your data yourself. PsycheAI’s administrator does not see your data or your results: there is no admin view of them, and nothing from your digest or report is stored or logged.
What PsycheAI keeps
Only a few small things, and none of them names you:
- Daily totals, such as how many cards were made that day.
- A scrambled code made from your Instagram username and the time of your earliest message or post, so each account gets one free card, one guess at its character, and its free first Psyche Report only once (we note that the account has had a Psyche Report). It cannot be turned back into your username, and it cannot be worked out from your username alone.
- If you load WhatsApp chats, a scrambled code of each chat, made from your name as the chat shows it, who the chat is with and the day it began, and one of the chats together. They let each chat count towards one free card. They cannot be turned back into names.
- If you share your link, PsycheAI keeps an encrypted copy of your card’s short summary. Your device encrypts it and the key lives only in your link, so PsycheAI cannot read it. This is client-side encryption, the same idea WhatsApp and Signal use for messages: most cloud services encrypt what they store but keep the key themselves, so they can read it; PsycheAI never has the key. It is kept for a year after the link was last opened.
- If someone syncs with your link, the result and their Psyche Card, encrypted the same way with your link’s key, so PsycheAI cannot read them. They are deleted once your device has them, or after 30 days.
- Simple counts for your link: how many times it was opened, how many friends made a card from it or synced with you, and the credits you have spent. They are plain numbers, never who, under a random code that isn’t tied to your name. A free Psyche Report or gift link is kept for 60 days.
- For Ask PsycheAI, how many questions you have been given, bought and used, under the same random code, and that a payment was counted. Never a question, a report or an answer.
- Payment references, so a Psyche Report can be retried if it fails.
- A scrambled code of your IP address, for up to an hour, to stop abuse.
There are no cookies, no ads, no third-party analytics and no tracking. PsycheAI does not sell or share data: it makes money from paid re-runs and Ask PsycheAI questions, never from your data.
Your rights and other questions
Can I see, correct or delete my data?
Under Singapore’s Personal Data Protection Act you can ask to access or correct your personal data, or withdraw consent. Most of what PsycheAI keeps cannot be linked to you. Email admin@psycheai.io to ask, or to have your shared link deleted (send us the link). The data in your browser you can delete yourself, with Delete everything.
What about other people in my messages?
Your messages contain other people’s words. Only short samples go into the digest, other people’s handles are removed, and nothing is shown to anyone but you. Only upload data from your own accounts.
Who can use PsycheAI?
People aged 18 and over. If this policy changes, the date above changes with it. Questions: admin@psycheai.io.