Privacy Policy

What we collect when you message us

When you message Iris on Telegram, we process the following:

• Telegram user and chat IDs — the numeric identifiers Telegram assigns to your account, used to deliver messages and keep your account isolated. We never receive your phone number from Telegram, and these IDs are not included in the AI prompt.
• Message content — the text you send us and our replies. This is stored in our database to maintain conversation continuity.
• Profile information — facts you share with us (your name, your reason for being here, triggers, coping strategies, intervention results, notes). This is stored so the AI can provide personalised support.
• Session summaries — short digests of past conversations generated by the AI to track your progress.
• Email address — only if you subscribe via Stripe. We receive the email you provide at checkout and store it on your account for billing and account-recovery purposes.

What we collect when you take the quiz

The self-assessment quiz on this website stores results so we can generate a shareable summary URL. For each submission we store:

• Your answers and computed scores — including archetype, severity band, and pathway, so the result page can be re-rendered from a link.
• Optional anonymous context — if you choose to provide it, we store broad categories such as age range, country, gender, relationship context, faith/values context, and primary goal so we can understand aggregate patterns.
• A hashed IP address — we take a SHA-256 hash of your IP combined with a server-side secret, truncated to 32 characters. We do not store your raw IP.
• Your browser's user-agent string — used for basic abuse detection.
• Your Telegram account, only if you unlock results via Telegram — opening Iris from the results page links that quiz result to the Telegram account you message us from. If you unlock with a password instead, no account is linked to the quiz result.

What we do NOT collect

• Your phone number (Telegram does not share it with us)
• Precise location data, city, postcode, or address
• Name, date of birth, or other direct identifiers in the quiz
• Raw IP addresses (we only store a hashed value, and only on quiz submissions)
• Browsing history or cross-site tracking
• Advertising or analytics cookies
• Any data from your phone beyond what you text us

How we use your data

Your data is used exclusively to provide the service: delivering personalised recovery support, maintaining conversation context, and sending proactive check-ins you've agreed to. We do not sell your data to third parties. We do not share your data with third parties for marketing. We do not use your data for advertising.

AI processing

Your messages are processed by a large language model accessed through OpenRouter, which routes requests to the underlying model provider that generates Iris's replies. The model sees your first name (if you provide one), your profile, your conversation history, and session summaries. It never sees your Telegram IDs. We send only what is needed to generate a response, and we do not use your conversations to train any model of our own.

Data storage and security

• Service data is encrypted in transit and stored in encrypted PostgreSQL databases.
• Access is restricted to essential operations personnel only.
• Conversation records are linked to your account internally. The AI prompt does not include your Telegram IDs.

Data retention and deletion

Your data is retained while your account is active so Iris can remember what support works for you. To delete your conversation history, profile, or account, email privacy@relapse.chat from the email associated with your account, or from any address if you include the Telegram username or ID you message us from. We will verify the request and complete deletion within 30 days. Residual data (such as encrypted database backups) is purged on the normal backup-rotation cycle.

Anonymous quiz results that are never unlocked or linked to an account are retained for up to 12 months and then deleted.

If you cancel your subscription with the Telegram /cancel command, billing stops at the end of your current period but your data is not deleted — email us if you also want your data removed.

Third-party services

• Telegram — delivers messages. Subject to Telegram's privacy policy.
• OpenRouter — routes your messages to the large language model that generates Iris's replies. Subject to OpenRouter's and the underlying model provider's data policies.
• Stripe — processes payments. We do not store your card details.
• Langfuse — traces AI interactions so we can debug failures and improve quality. Traces contain the prompts and responses (which include your message content and profile information shown to the AI), but they do not contain your Telegram IDs.

Your rights

You can request access to, correction of, or deletion of your data at any time by emailing privacy@relapse.chat. Under GDPR and UK data protection law, you also have the right to data portability, the right to restrict processing, and the right to lodge a complaint with the Information Commissioner's Office (ICO).

Children

Iris is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a minor has signed up, email us and we will delete the account.

Changes to this policy

We may update this policy from time to time. The “last updated” date at the top of the page reflects the most recent revision. Material changes will be communicated to active users via Telegram before they take effect.

Contact

For privacy questions or data requests, email privacy@relapse.chat.