Privacy Policy

Last updated: May 2, 2026

This policy explains what data KopelAi collects, why, and what you can do about it. We've tried to write it in plain language. If anything is unclear, email shaigian1@gmail.com.

Who we are

KopelAi is operated by Shai Hay Gian, an independent business registered in Israel. For the purposes of GDPR and similar laws, this is the data controller. You can reach us at shaigian1@gmail.com.

What KopelAi is

KopelAi is a private reflection space for therapists. You have ongoing conversations with an AI that builds an understanding of you over time, helping you understand yourself as a clinician - your strengths, blind spots, and the patterns you bring into the room. You can type and also upload files (recordings, documents, images) that the AI understands. The AI generates insights and a personal profile based on what you share.

KopelAi is not therapy, not formal clinical supervision, and not a substitute for them. It is a tool for personal reflection only.

Client confidentiality - important

Therapists naturally talk about clients. KopelAi encourages you to keep this anonymous: use a first name, initials, or "a client who…" rather than identifying details. It is your responsibility not to enter identifying client information. KopelAi is not a medical record and must not be used to store identifiable clinical data. If you do enter client-related content, it is stored and used to generate insights about you as a clinician (not about the client).

What we collect

Information you give us

• Account information: Your email address, used for sign-in and account recovery.
• Conversation content: The text of your conversations with KopelAi, including which language each message is in.
• Files you upload: Audio recordings, documents (PDF/Word), text, and images you attach to a conversation. Audio is transcribed to text and then immediately discarded - we never store the recording itself.

Information generated by KopelAi

• Summaries of your past conversations
• A profile describing your patterns, values, interests, and other observations KopelAi makes about you
• Categorized insights (your strengths, what energizes you, your open questions, etc.)

Technical information

• Anonymous user identifiers used to associate your conversations with your account
• Timestamps of when you used the app
• Your subscription status and tier (if you upgrade to a paid tier)
• Standard server logs (IP address, request times) handled by our hosting providers - we don't tie these to your identity

What we don't collect

• We don't collect your real name (unless you choose to share it in conversation)
• We don't collect your phone number, address, or location
• We don't sell, rent, or share your data with advertisers
• We don't use your conversations to train AI models
• We don't track you across other apps or websites

How we use your data

We use your data only to provide and improve KopelAi:

• To run conversations with you and remember context across sessions
• To generate your insights and profile
• To manage your account and subscription
• To communicate with you about your account, including important changes to this policy
• To respond when you contact us

Who we share your data with

We use a small number of trusted service providers to run KopelAi. We send your data to them only as necessary to provide the service:

• Supabase (Frankfurt, EU) - stores your account, conversations, and insights
• Anthropic - provides the Claude AI model that powers conversations. Anthropic processes the conversation text to generate responses but does not store your conversations or train on them.
• OpenAI - provides audio transcription and embeddings for search. Content is processed and not used for training.
• Vercel - hosts the KopelAi website
• Railway - hosts our backend API
• Google - if you choose to sign in with Google, Google authenticates you (we never receive your password)
• Ching - processes subscription payments and issues invoices

We do not share your conversations or insights with anyone else. Period.

Where your data lives

Your conversations and account data are stored on Supabase servers in Frankfurt, EU. When data passes through other services (Anthropic, OpenAI), it may be processed in the US. All transfers happen over encrypted connections.

How long we keep your data

• Active accounts: We keep your data for as long as your account is active.
• If you delete your account: Your data enters a 7-day soft-delete period during which it can be restored if you change your mind. After 7 days, it's permanently deleted from our active systems. Backups are purged within 30 additional days.
• Inactive accounts: If you don't use KopelAi for 12 months, we may contact you and, after no response, delete your data.

Your rights

You have the right to:

• Access your data. Use the "Export my data" button in Settings to download everything KopelAi has stored about you, in JSON format.
• Correct your data. If something KopelAi has noted about you is wrong, you can correct it directly in the app or contact us.
• Delete your data. Use the "Delete my account" option in Settings. This triggers the 7-day soft delete described above.
• Object to processing or restrict it. Email shaigian1@gmail.com.
• Lodge a complaint with your local data protection authority. In Israel: the Privacy Protection Authority (PPA). In the EU: your country's DPA.

Children

KopelAi is for users 13 and older. We do not knowingly collect data from children under 13. If you believe a child under 13 has created an account, contact us at shaigian1@gmail.com and we will delete the account.

Security

We use industry-standard security: encrypted connections (HTTPS/TLS) for all traffic, encryption at rest in Supabase, row-level security so users can only access their own data, and limited internal access. No system is perfectly secure, but we take this seriously.

Changes to this policy

If we make material changes to this policy, we'll notify you in the app or by email. The "Last updated" date at the top of this page will always reflect the latest version.

Contact

For any privacy question, request, or concern: shaigian1@gmail.com